Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e32382e37322e302f32312d3231203d3e2034383131.roa
File:                     3131342e32382e37322e302f32312d3231203d3e2034383131.roa (raw, json)
Hash identifier:          z+KkAbE1tNzpn5jtmiDv8aWslLlp03fmv+ixrqjR+0c=
Subject key identifier:   FB:A0:62:A3:4C:BE:52:0E:A5:96:76:A0:AB:5F:18:AD:C6:64:23:4A
Certificate issuer:       /CN=8421F0680EB1B3756485D0F7681F78067E9C172E
Certificate serial:       264435300509D93B7EDBE04D9EE85136F0981B79
Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e32382e37322e302f32312d3231203d3e2034383131.roa
Signing time:             Sat 09 May 2026 11:55:54 +0000
ROA not before:           Sat 09 May 2026 11:50:54 +0000
ROA not after:            Sat 08 May 2027 11:55:54 +0000
asID:                     4811
IP address blocks:        114.28.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:44:35:30:05:09:d9:3b:7e:db:e0:4d:9e:e8:51:36:f0:98:1b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E
        Validity
            Not Before: May  9 11:50:54 2026 GMT
            Not After : May  8 11:55:54 2027 GMT
        Subject: CN=FBA062A34CBE520EA59676A0AB5F18ADC664234A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:52:68:6d:ef:2c:7b:f6:31:23:6f:0b:9b:e8:
                    ac:65:81:62:f9:0d:8e:85:34:42:38:84:5d:c8:28:
                    a7:e0:8b:1c:8c:72:a4:0d:72:7a:99:69:1d:7c:29:
                    ae:36:7f:95:bf:33:46:83:8e:82:92:9c:a4:43:b1:
                    6d:e6:df:3a:d6:00:b2:8c:04:88:18:ac:5b:b2:12:
                    8d:10:d5:80:8f:ca:b6:c3:5d:95:db:59:36:1d:19:
                    51:61:4e:46:b7:89:a2:ee:ad:fa:58:f0:b1:be:5f:
                    06:83:e5:86:9b:be:0b:57:13:ac:d8:be:b0:f8:75:
                    e8:9c:3d:7c:4c:8d:93:43:d6:c9:e7:34:f1:21:4a:
                    a9:59:ff:d1:75:91:79:ad:30:10:71:b0:1f:a7:e1:
                    d7:7d:86:de:cd:48:e5:5d:ea:ee:7c:26:b4:c4:38:
                    f5:c6:4b:46:e0:bd:14:43:89:49:88:5f:33:ca:56:
                    01:6c:d6:82:5b:42:10:cc:28:c5:95:72:c1:d5:1a:
                    11:23:b9:00:2f:8f:d1:be:52:7e:17:95:f0:80:9f:
                    cc:a4:76:06:00:66:9e:5d:eb:a3:d6:0c:cc:e1:a7:
                    80:22:9f:29:a7:10:72:01:a3:04:d9:b3:a5:cd:fa:
                    bf:a0:a6:53:84:c7:1b:2c:25:03:46:73:b3:68:55:
                    39:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A0:62:A3:4C:BE:52:0E:A5:96:76:A0:AB:5F:18:AD:C6:64:23:4A
            X509v3 Authority Key Identifier:
                keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e32382e37322e302f32312d3231203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.28.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:7b:65:47:5e:23:82:11:17:ed:1a:1c:a7:39:d1:43:26:b5:
         a5:fa:8b:4e:5a:0b:03:b8:32:0e:62:f6:78:79:27:49:a5:2d:
         bb:17:bb:27:7a:bd:1c:cc:8a:9d:92:04:d5:c6:6e:0a:30:ec:
         6a:8d:46:9b:8a:90:7c:0c:4c:e2:8d:0b:3f:ab:13:18:20:1d:
         08:1f:ab:83:95:cc:39:1f:2a:75:92:f4:25:ea:19:4c:c9:39:
         10:e4:6d:f9:0a:1a:e5:d9:5d:99:86:db:b0:bb:1f:2c:eb:06:
         75:fb:54:c8:d7:75:99:e7:be:be:6b:5e:80:61:95:fc:08:ee:
         cd:19:07:0a:a8:bf:b6:9a:35:a6:02:5e:16:7d:83:97:01:f9:
         aa:f3:1b:d4:c2:92:7c:e3:a2:4a:1a:63:64:a5:06:70:ed:ea:
         63:e1:01:94:09:f4:bb:5f:e2:43:98:71:19:2e:17:ae:f5:b4:
         ef:5e:8f:f1:c8:18:ec:25:dc:68:c6:50:b2:ca:d9:b3:cd:63:
         eb:c3:6d:1d:24:6a:ab:01:f6:50:02:77:d9:55:8f:4e:ff:db:
         04:ba:38:b0:40:d1:dc:99:f6:a2:7a:34:c0:f9:69:74:dc:83:
         2d:ad:73:32:8b:f5:51:5b:2e:0c:08:7b:29:d4:64:5c:76:cf:
         ce:ec:f0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:36 2026 by rpki-client