Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e32382e3132382e302f32302d3230203d3e2034383131.roa
File:                     3131342e32382e3132382e302f32302d3230203d3e2034383131.roa (raw, json)
Hash identifier:          7ctkGQpyisi9zH2u2VKxvHKRSH6rZz0X8ZJdtm7yPBk=
Subject key identifier:   FD:AE:F3:B9:9D:6A:E8:BD:18:72:47:82:F9:7D:49:A3:A2:39:70:D6
Certificate issuer:       /CN=8421F0680EB1B3756485D0F7681F78067E9C172E
Certificate serial:       0CAAB4C371328F491245571706B3786EA149D5E6
Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e32382e3132382e302f32302d3230203d3e2034383131.roa
Signing time:             Sat 09 May 2026 11:55:54 +0000
ROA not before:           Sat 09 May 2026 11:50:54 +0000
ROA not after:            Sat 08 May 2027 11:55:54 +0000
asID:                     4811
IP address blocks:        114.28.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:aa:b4:c3:71:32:8f:49:12:45:57:17:06:b3:78:6e:a1:49:d5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E
        Validity
            Not Before: May  9 11:50:54 2026 GMT
            Not After : May  8 11:55:54 2027 GMT
        Subject: CN=FDAEF3B99D6AE8BD18724782F97D49A3A23970D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f3:d9:57:c1:e4:e1:72:47:bf:69:f5:56:24:
                    ed:f7:32:2e:6f:a5:df:f1:6c:32:40:96:11:4e:b9:
                    84:87:9a:6b:70:ea:4c:68:d7:62:ba:d6:e8:66:bc:
                    ae:f3:d0:7f:ec:4e:39:53:4c:d9:ff:8f:2d:f8:eb:
                    79:9e:7e:a4:a6:84:ec:fd:cb:b1:2d:f4:2b:aa:09:
                    cf:be:b7:18:d0:4d:b2:71:50:e3:69:41:f5:98:b1:
                    35:15:72:77:5b:2a:6c:c4:c1:24:bb:15:ef:a4:6d:
                    3a:9c:f4:38:17:64:4a:6c:f9:51:a0:14:40:3d:ae:
                    40:74:44:27:70:bc:d7:35:ae:61:d3:cc:97:c9:fc:
                    3f:c0:2d:e2:4c:50:a6:11:b8:bc:42:f5:9b:a0:be:
                    7c:ec:b7:19:ad:57:c8:9c:d3:14:e0:89:f8:6e:bb:
                    89:a3:4e:98:f5:7e:b7:ba:29:d7:ca:8a:6c:f4:d3:
                    5e:72:96:0d:e4:90:17:d6:9d:66:03:03:7b:86:f9:
                    39:9b:fa:af:eb:bd:50:97:58:dd:65:e9:a4:1d:13:
                    e2:2d:6d:af:b5:c3:bf:d6:30:d2:5c:18:ba:58:c8:
                    e6:b5:74:05:7b:70:03:14:fc:3f:96:fd:65:43:8a:
                    2b:61:ea:9b:35:18:96:37:f7:7c:dd:5c:c0:04:15:
                    71:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:AE:F3:B9:9D:6A:E8:BD:18:72:47:82:F9:7D:49:A3:A2:39:70:D6
            X509v3 Authority Key Identifier:
                keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e32382e3132382e302f32302d3230203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.28.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a0:cd:26:ab:2a:fa:9f:9f:6e:ea:c0:10:e3:af:84:0a:5c:69:
         16:fa:ad:95:ec:94:ab:3b:b8:5f:2f:a7:af:ac:09:21:28:78:
         a8:dd:60:43:f6:9e:2b:ef:2d:44:a1:62:82:6c:e0:db:0d:c3:
         70:43:07:f9:33:02:4e:da:e1:fe:66:14:7e:61:fc:68:1a:92:
         0b:74:c7:d6:06:8a:42:ab:f3:88:6c:cc:ab:b7:65:d3:9c:df:
         d7:fa:14:82:8b:f4:91:f0:98:f2:dc:d5:b6:e5:62:63:b8:94:
         98:3d:43:aa:b5:2b:34:82:a4:65:b2:e0:24:50:3d:5b:45:db:
         f4:8b:55:d0:62:ca:26:0d:e2:f6:d2:d0:67:db:6b:ea:20:81:
         45:79:ae:42:9d:54:4a:30:29:6a:40:8d:a8:74:17:31:5c:7d:
         ed:99:01:1d:0d:27:09:95:a2:fc:03:1a:6b:5c:e9:a0:84:b3:
         0b:d3:cd:94:a7:df:76:62:bc:1d:1d:39:a2:b0:2f:b1:39:1c:
         84:e4:0d:c6:40:b6:4e:dc:f5:c0:45:d9:e5:fd:33:10:6a:32:
         f0:7f:41:5d:75:17:e6:6d:f7:78:79:f1:df:43:b4:3c:87:c8:
         2f:b2:20:78:67:67:b3:e9:46:da:d2:05:34:64:69:7c:1b:38:
         cb:55:e4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:02 2026 by rpki-client