Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e3134312e3132382e302f31382d3138203d3e203435303631.roa
File:                     3131342e3134312e3132382e302f31382d3138203d3e203435303631.roa (raw, json)
Hash identifier:          //+6nQlQDBn0BXAXI99nw4HMz9l6KIJ4wurfWegCjHI=
Subject key identifier:   27:54:A5:41:53:C5:2C:25:1B:CB:24:D1:97:1A:10:02:AD:A4:FF:38
Certificate issuer:       /CN=8421F0680EB1B3756485D0F7681F78067E9C172E
Certificate serial:       21B79B3912640EEC2F3251D26431CC12347D0379
Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e3134312e3132382e302f31382d3138203d3e203435303631.roa
Signing time:             Sat 09 May 2026 11:55:55 +0000
ROA not before:           Sat 09 May 2026 11:50:55 +0000
ROA not after:            Sat 08 May 2027 11:55:55 +0000
asID:                     45061
IP address blocks:        114.141.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b7:9b:39:12:64:0e:ec:2f:32:51:d2:64:31:cc:12:34:7d:03:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E
        Validity
            Not Before: May  9 11:50:55 2026 GMT
            Not After : May  8 11:55:55 2027 GMT
        Subject: CN=2754A54153C52C251BCB24D1971A1002ADA4FF38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:35:2e:f8:a1:8a:c7:ce:62:2f:3e:d4:8d:
                    f4:6b:0b:22:74:14:29:d9:75:ef:51:b2:f7:27:4e:
                    08:a8:4e:91:40:37:7a:5b:be:57:e8:77:58:3c:80:
                    67:5f:6d:09:58:21:67:0f:25:73:91:33:11:89:1b:
                    71:91:bb:5d:a5:47:32:f0:07:d5:ae:0b:e7:dc:40:
                    b2:2f:b5:ab:d3:ba:4e:bb:6d:fc:8d:a9:71:68:cd:
                    00:66:c7:1f:05:b2:74:e8:61:c9:b5:6a:3c:8d:81:
                    c5:61:16:d9:00:22:83:a6:18:79:a7:d1:be:97:da:
                    64:ec:b6:7b:39:84:67:06:bc:b0:b9:49:8e:b1:7a:
                    35:f1:89:31:ae:dc:8f:c1:3a:d1:e1:3b:f3:93:8d:
                    84:02:01:a0:3a:67:db:6b:40:4c:5a:3b:09:1c:51:
                    1c:64:a1:4a:01:0a:90:5d:13:5b:9d:b4:cb:8b:70:
                    8f:1c:9f:70:38:37:80:e8:6b:61:d6:11:6b:cb:b2:
                    65:04:5e:00:d0:43:88:fd:a2:00:39:22:c0:37:91:
                    62:17:3c:13:64:90:94:77:73:5c:09:7a:99:07:84:
                    39:6e:f2:d9:4c:a5:c4:45:6b:56:f4:8e:70:e8:ff:
                    28:be:09:31:22:20:d5:94:32:1f:47:f7:ba:20:ad:
                    50:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:54:A5:41:53:C5:2C:25:1B:CB:24:D1:97:1A:10:02:AD:A4:FF:38
            X509v3 Authority Key Identifier:
                keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e3134312e3132382e302f31382d3138203d3e203435303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.141.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a6:ee:f5:48:db:51:28:fb:6e:8b:a2:af:04:1b:b2:1e:9f:7f:
         55:5a:6e:fd:fe:ad:31:44:d4:15:4b:40:a9:b6:a4:1c:fb:4f:
         b7:71:fc:7f:c3:cc:a1:9b:d4:f2:09:1b:cf:f1:79:3a:f3:ec:
         f7:f4:12:03:8e:f7:0c:6b:58:6d:2a:3c:7c:25:6e:49:61:2a:
         80:a5:db:98:50:fd:fa:82:e7:d9:84:e6:82:99:dc:5c:3c:bd:
         5e:99:00:2c:4b:52:69:f0:6f:eb:1f:57:4c:2f:b2:71:25:c3:
         b7:b0:90:d9:e0:82:c4:d4:88:ed:6b:d6:9c:9e:1b:6c:89:0f:
         29:39:25:a2:81:5a:78:12:74:ff:12:43:64:08:2e:94:41:1d:
         ba:da:d6:65:19:e0:08:83:d2:b1:a8:ea:f3:d3:d9:f9:46:74:
         ac:81:5d:e5:d9:41:74:91:6e:f7:28:e2:93:85:f6:c7:13:73:
         3f:21:76:4f:2a:7c:8f:d1:06:69:06:6a:c1:df:4f:37:7f:c9:
         79:5f:70:ce:05:df:63:aa:07:30:a5:d1:6d:3e:54:ae:25:5c:
         ae:fe:82:c9:11:70:a9:90:7b:6a:48:72:1e:47:59:2a:e7:4b:
         6f:c2:85:cb:45:bf:7f:01:c0:64:02:a6:7d:e2:f9:70:56:a2:
         8f:1b:8f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:38 2026 by rpki-client