Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e3134312e3132382e302f31392d3139203d3e203435303631.roa
File:                     3131342e3134312e3132382e302f31392d3139203d3e203435303631.roa (raw, json)
Hash identifier:          rX71zn663mC+PXbN9bZFqHBjL7EmPtxQN3yowzWIv7k=
Subject key identifier:   CB:05:F8:85:D6:F8:6C:CA:FD:58:4E:00:68:E4:EE:64:E8:36:76:0A
Certificate issuer:       /CN=8421F0680EB1B3756485D0F7681F78067E9C172E
Certificate serial:       0D83FB7C3C22A1360294C59FF7C7AE6A30911251
Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e3134312e3132382e302f31392d3139203d3e203435303631.roa
Signing time:             Sat 09 May 2026 11:55:55 +0000
ROA not before:           Sat 09 May 2026 11:50:55 +0000
ROA not after:            Sat 08 May 2027 11:55:55 +0000
asID:                     45061
IP address blocks:        114.141.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:83:fb:7c:3c:22:a1:36:02:94:c5:9f:f7:c7:ae:6a:30:91:12:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E
        Validity
            Not Before: May  9 11:50:55 2026 GMT
            Not After : May  8 11:55:55 2027 GMT
        Subject: CN=CB05F885D6F86CCAFD584E0068E4EE64E836760A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ab:5a:2e:39:b1:cd:60:e1:dd:bc:cf:64:a4:
                    b2:74:3f:14:af:3b:df:da:65:b6:f0:2f:15:91:65:
                    fd:ea:a1:92:42:8c:57:d8:f2:c7:84:2a:92:96:1e:
                    bb:92:2c:cc:f8:6f:41:6e:f2:f4:12:db:dd:a1:99:
                    77:b1:55:0f:4b:a4:5c:ac:f5:0e:63:8f:b7:72:8c:
                    cb:d9:33:f2:97:70:3c:34:37:88:71:e5:92:41:bb:
                    15:e4:a8:a7:86:c4:ac:66:9b:67:aa:e3:7f:30:e7:
                    ec:ec:ab:95:07:d0:80:03:70:ba:b4:41:c3:a6:8a:
                    db:07:d9:bb:7e:93:fc:a6:71:d8:b1:e8:84:9f:65:
                    ba:d8:7a:ac:c7:05:33:fa:d7:de:60:3e:e9:48:f6:
                    6f:f6:2c:33:37:fc:66:d1:88:fa:9a:89:fd:4d:fc:
                    90:e0:12:9e:ec:37:b1:fe:de:f2:98:77:5d:55:b2:
                    1a:fa:4f:b6:04:dc:18:2e:34:6f:0e:c1:23:a2:51:
                    db:c6:15:3d:d1:b6:df:d8:1b:0e:07:62:5f:6a:7a:
                    1e:fb:23:b5:73:de:bd:84:54:e6:fc:68:07:d3:03:
                    e1:9e:f5:b7:12:d8:ec:e3:96:57:9f:e2:70:ff:0d:
                    bf:5d:51:50:e6:3b:a3:c5:55:0d:b9:e2:c9:0c:9b:
                    fd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:05:F8:85:D6:F8:6C:CA:FD:58:4E:00:68:E4:EE:64:E8:36:76:0A
            X509v3 Authority Key Identifier:
                keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e3134312e3132382e302f31392d3139203d3e203435303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.141.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         80:e4:c7:a8:f6:31:a4:ee:e1:65:c1:13:58:4d:17:f1:6c:23:
         d0:f0:ea:ab:c0:39:f4:2d:f6:77:2a:43:d2:44:47:89:1e:22:
         32:5a:f4:35:4b:c9:67:8c:f3:c5:9d:3c:e1:45:c6:f1:9d:b0:
         ab:38:84:51:c6:c0:4c:dc:55:dc:8f:73:9b:cc:a3:d2:89:12:
         88:3c:b6:d3:c3:19:a4:a2:cd:15:11:62:7a:25:22:44:a9:ed:
         23:20:5c:b6:8d:8f:83:91:cf:cb:2d:11:1f:35:cc:4c:95:64:
         68:2d:c7:6c:a9:27:e0:97:34:3c:89:f1:89:d5:66:3b:bb:e5:
         d6:fe:ed:e0:7c:70:1f:96:56:87:46:b5:a4:b9:2c:85:6c:4e:
         8c:84:a2:d1:2b:69:6f:db:93:12:06:b4:68:9c:da:84:05:a5:
         37:d5:7c:20:ac:30:11:3a:91:8b:ab:85:8c:ee:4d:09:85:ff:
         fa:d7:5a:8c:0a:b0:73:4a:eb:d4:1a:da:97:9f:c2:18:cd:c4:
         e3:98:f9:03:b0:fd:22:72:cd:b3:64:98:04:a6:18:93:28:eb:
         08:db:db:0b:7e:ba:e9:37:2e:f2:13:46:28:b3:01:a0:8e:4d:
         f4:a8:8e:4b:5e:db:93:17:e0:56:32:f8:55:8c:e1:39:40:d0:
         f7:19:fa:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:38 2026 by rpki-client