Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e3134312e3134382e302f32322d3232203d3e203435303631.roa
File:                     3131342e3134312e3134382e302f32322d3232203d3e203435303631.roa (raw, json)
Hash identifier:          GAjhPK7uIzL9Jk1ZUM2oYaioJeK2HkXJIrHGIBCS68A=
Subject key identifier:   BE:36:D9:32:22:F9:CA:92:C5:CB:EC:A9:30:44:F7:B4:CF:06:B9:2E
Certificate issuer:       /CN=8421F0680EB1B3756485D0F7681F78067E9C172E
Certificate serial:       1AF10E00D4D5A116A74D01155302BA46E1298963
Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e3134312e3134382e302f32322d3232203d3e203435303631.roa
Signing time:             Sat 09 May 2026 11:55:54 +0000
ROA not before:           Sat 09 May 2026 11:50:54 +0000
ROA not after:            Sat 08 May 2027 11:55:54 +0000
asID:                     45061
IP address blocks:        114.141.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f1:0e:00:d4:d5:a1:16:a7:4d:01:15:53:02:ba:46:e1:29:89:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E
        Validity
            Not Before: May  9 11:50:54 2026 GMT
            Not After : May  8 11:55:54 2027 GMT
        Subject: CN=BE36D93222F9CA92C5CBECA93044F7B4CF06B92E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:04:49:76:84:b5:0c:b6:55:cd:36:2c:ef:6b:
                    18:eb:10:42:cc:50:d9:71:1c:e6:b7:89:d1:f3:8c:
                    cf:0b:2d:c9:bf:d8:cb:e1:e9:fe:e3:f2:64:af:82:
                    9a:af:23:91:af:fa:9f:3c:14:f2:84:fb:fb:8b:4e:
                    25:f3:78:df:39:43:1b:8a:e7:fb:c8:af:c6:c2:9d:
                    b8:a5:d3:e8:c3:7e:f0:fe:ab:1e:f5:17:b8:d0:d8:
                    a1:20:b1:27:d6:55:f9:97:46:81:34:6e:a0:59:a8:
                    b6:eb:f8:dc:fb:d2:7f:ad:4a:c6:71:2e:18:fe:22:
                    b3:c6:c7:b6:74:5a:29:e2:50:65:5a:52:f7:5f:04:
                    18:d7:aa:db:7b:85:b4:6f:85:04:80:b4:bc:01:39:
                    87:e6:70:31:8f:86:ff:6d:ec:35:4b:20:21:16:99:
                    6e:6f:4e:97:24:8e:ac:ca:a6:8d:33:8c:2f:b5:ed:
                    17:20:c5:58:92:c5:c4:19:a7:19:b2:66:5a:77:0e:
                    a4:3e:19:a2:61:23:96:f5:59:57:c8:af:ac:b2:e6:
                    bb:19:0d:f3:fb:cb:bc:7d:ec:35:64:ac:7f:4c:6e:
                    a3:00:35:e4:4f:0e:ba:9d:c4:e7:23:1c:dc:e0:a9:
                    49:d3:7b:71:90:8f:ca:11:06:8c:e7:d9:98:b6:72:
                    76:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:36:D9:32:22:F9:CA:92:C5:CB:EC:A9:30:44:F7:B4:CF:06:B9:2E
            X509v3 Authority Key Identifier:
                keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e3134312e3134382e302f32322d3232203d3e203435303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.141.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:3b:93:59:16:ef:1d:91:46:b0:7d:b8:b1:e8:26:5b:c9:63:
         f4:ab:4f:e7:6b:e8:7f:4e:05:44:97:e9:4e:4f:e9:a6:42:b3:
         22:8f:fd:84:bd:c6:a7:24:90:6b:db:0e:17:3f:4c:cf:b9:4e:
         35:16:b7:9d:f4:60:06:28:68:58:eb:d3:1f:d3:46:81:cc:9f:
         78:df:f4:25:fd:36:d7:b1:83:e0:f7:d9:e0:88:7a:99:0d:fc:
         1f:cc:8f:0c:a2:7b:31:07:92:9a:c0:65:56:f9:d1:c2:93:ba:
         a1:7e:f4:a5:74:32:40:d5:20:96:74:74:aa:30:a3:c2:f5:38:
         48:58:b0:e1:94:6e:da:14:fe:3b:3f:62:28:00:a1:99:2b:6c:
         da:9f:49:29:b6:7a:51:ee:ad:cc:c3:66:43:4a:ab:c8:e3:d6:
         d5:fb:bb:e6:af:cc:f3:27:82:52:c7:7f:e7:01:22:de:f6:d4:
         bc:1f:03:60:37:bb:6e:ad:86:ff:8a:78:31:68:60:ee:5b:ca:
         f4:f5:cd:8c:f8:9c:e2:b6:e2:9c:b8:d5:97:4d:56:a9:b5:19:
         7a:e7:1e:a1:cd:4d:4a:10:fa:9d:60:1b:d3:c1:61:76:3b:11:
         82:1a:d7:69:97:3b:11:29:bf:f6:64:7b:41:05:ad:3e:6e:33:
         1a:5b:28:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:35 2026 by rpki-client