Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e32382e3132382e302f31392d3139203d3e2034383132.roa
File:                     3131342e32382e3132382e302f31392d3139203d3e2034383132.roa (raw, json)
Hash identifier:          xqw7IomjKxBRLvFlgY2UqqWMCB7OIYkSZ42ZB2kiYMc=
Subject key identifier:   68:CA:F7:70:DD:B6:66:09:ED:E6:27:62:B9:12:9F:C3:C8:C2:AC:86
Certificate issuer:       /CN=8421F0680EB1B3756485D0F7681F78067E9C172E
Certificate serial:       63B3B7C899BBDC517EB97FAD9D4A970409B08F48
Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e32382e3132382e302f31392d3139203d3e2034383132.roa
Signing time:             Sat 09 May 2026 11:55:54 +0000
ROA not before:           Sat 09 May 2026 11:50:54 +0000
ROA not after:            Sat 08 May 2027 11:55:54 +0000
asID:                     4812
IP address blocks:        114.28.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:56:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b3:b7:c8:99:bb:dc:51:7e:b9:7f:ad:9d:4a:97:04:09:b0:8f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E
        Validity
            Not Before: May  9 11:50:54 2026 GMT
            Not After : May  8 11:55:54 2027 GMT
        Subject: CN=68CAF770DDB66609EDE62762B9129FC3C8C2AC86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6f:c7:e3:88:b0:c9:6c:f3:0c:32:83:6a:99:
                    1e:56:52:95:3b:53:41:d8:5b:3b:1a:f6:7f:b0:eb:
                    6c:58:9e:d3:10:77:62:be:79:43:f0:36:b6:f4:80:
                    b3:06:dd:e8:12:93:46:7e:c1:b2:63:72:ee:47:88:
                    e6:09:09:49:18:27:56:b1:91:02:95:99:b2:6c:c1:
                    66:55:9c:ae:89:8e:e2:f5:36:bb:39:c5:e9:d2:dd:
                    f4:02:ad:19:8b:4a:09:af:de:94:a8:9a:9c:eb:3f:
                    a8:df:3b:9d:8c:2b:ed:29:9a:64:61:e7:02:2d:5e:
                    e3:60:87:12:5b:08:b2:07:a4:11:fe:02:e2:4d:a4:
                    02:21:e2:33:58:8b:ca:5b:e0:07:7a:10:46:64:e4:
                    80:8a:a8:fc:51:04:78:e2:72:d1:e5:cf:7f:52:f7:
                    bb:79:9c:c7:30:74:5c:98:9b:56:18:52:4b:9f:39:
                    9d:e6:45:b6:55:c5:fd:10:cc:27:1c:ce:6e:8c:73:
                    da:93:17:84:72:3c:c1:b3:b9:e8:d8:65:8f:c3:68:
                    fd:35:03:2a:fb:c3:1d:e7:b4:a0:58:8d:0d:e8:35:
                    6e:4a:36:db:fb:e0:79:be:a6:b8:0a:1a:77:14:1a:
                    38:41:07:16:19:08:c8:a5:6f:5f:5a:c1:54:83:59:
                    46:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CA:F7:70:DD:B6:66:09:ED:E6:27:62:B9:12:9F:C3:C8:C2:AC:86
            X509v3 Authority Key Identifier:
                keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e32382e3132382e302f31392d3139203d3e2034383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.28.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         62:1c:be:da:8e:f9:70:31:49:bf:9f:8b:c8:11:ea:76:5f:9e:
         60:67:4f:d2:fe:4d:51:b1:5d:02:e4:9f:46:6b:12:6f:60:93:
         7f:5d:d6:61:e2:f1:65:28:25:2c:98:40:ef:37:83:e7:b2:eb:
         1c:5f:0b:c5:25:e7:c0:ac:33:21:08:fc:0d:f6:7a:37:b4:a7:
         35:ec:b3:e8:01:ca:5a:09:c2:08:ec:8b:cd:d7:bd:8b:15:5b:
         45:73:56:7f:66:d3:24:da:d3:f6:2e:8e:13:85:08:15:3e:c5:
         c1:8f:16:37:01:73:5c:70:35:fd:05:1b:21:56:b4:3f:7f:05:
         9e:fd:8e:dc:15:14:0e:00:0a:c5:fe:0c:e5:87:0c:e6:ae:2a:
         da:c1:65:ab:13:bd:c7:85:05:21:05:26:1b:49:1f:c9:75:93:
         ce:54:17:7d:4b:38:54:12:c9:dc:b2:01:fc:ef:ae:50:95:17:
         29:cf:09:c8:41:45:41:64:51:ac:df:6d:fe:5a:22:23:3b:c8:
         18:db:4b:9a:bb:c4:c9:2b:93:03:d5:02:01:ad:25:d2:b4:ca:
         ec:9c:2e:ec:f3:83:e8:1c:fc:33:08:21:25:19:34:91:aa:03:
         0c:17:66:21:6e:21:b5:57:3d:18:b6:2f:97:b3:d3:4b:5f:c7:
         37:0d:62:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:31 2026 by rpki-client