Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230382e302f32342d3332203d3e20313432313332.roa
File:                     3131342e32382e3230382e302f32342d3332203d3e20313432313332.roa (raw, json)
Hash identifier:          sEXvQYAKgu0GSKkPqckvTqGwVYvZuzNpzSoyWNIxB2o=
Subject key identifier:   79:72:79:D5:C9:0C:8A:66:54:AE:1E:CE:84:88:6F:12:F7:D4:D4:BD
Certificate issuer:       /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Certificate serial:       4FD7C27801C9F9FB9DCFE934197A6A8ABDF2261D
Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230382e302f32342d3332203d3e20313432313332.roa
Signing time:             Sat 09 May 2026 08:03:36 +0000
ROA not before:           Sat 09 May 2026 07:58:36 +0000
ROA not after:            Sat 08 May 2027 08:03:36 +0000
asID:                     142132
IP address blocks:        114.28.208.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:40:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d7:c2:78:01:c9:f9:fb:9d:cf:e9:34:19:7a:6a:8a:bd:f2:26:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
        Validity
            Not Before: May  9 07:58:36 2026 GMT
            Not After : May  8 08:03:36 2027 GMT
        Subject: CN=797279D5C90C8A6654AE1ECE84886F12F7D4D4BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:71:3a:81:0f:fd:21:bb:14:15:19:e5:c7:8a:
                    e7:a9:93:cc:95:f3:60:74:e0:2a:fb:91:d8:fe:32:
                    61:94:da:61:ec:0f:19:0f:fe:26:8d:7b:43:04:29:
                    08:31:dd:a4:1e:e4:34:65:21:a6:fd:90:60:e3:38:
                    de:38:3d:25:a8:a1:ee:89:af:e9:59:0f:f1:1e:8f:
                    c9:7c:e3:1d:eb:1f:51:be:e3:a7:85:66:ac:fc:b9:
                    47:3a:6b:45:bc:19:24:41:56:36:06:40:a5:b0:e5:
                    9a:cd:9c:5d:2e:dd:25:da:e3:83:a1:eb:bf:df:38:
                    56:6d:a6:a9:c4:88:d2:38:54:23:e0:32:ea:3a:c9:
                    ae:b0:c4:54:e9:c9:73:26:04:46:4f:5c:ca:c4:1f:
                    0a:8b:d0:d2:83:17:55:2f:3c:a0:81:04:f3:e8:f2:
                    46:fe:0a:41:ce:2a:ff:ea:5a:82:00:65:b9:57:13:
                    68:e3:17:b8:38:e0:7b:f6:21:39:c4:93:62:d9:9b:
                    23:0e:09:b2:bf:76:77:6a:20:a0:5b:5b:1c:21:2b:
                    fd:45:16:5e:ab:1d:c4:8b:6f:be:4e:ab:bd:6b:70:
                    ca:f3:15:f2:8c:c7:88:d8:85:96:f9:63:40:13:e5:
                    2c:27:37:95:ca:64:a4:cd:49:fe:7e:07:74:cd:67:
                    a5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:72:79:D5:C9:0C:8A:66:54:AE:1E:CE:84:88:6F:12:F7:D4:D4:BD
            X509v3 Authority Key Identifier:
                keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230382e302f32342d3332203d3e20313432313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.28.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:67:cb:96:34:9b:39:ca:fe:a4:9f:bd:ba:af:d6:0c:47:e7:
         eb:37:3e:ba:37:4c:9b:5c:74:6b:1e:8a:fa:22:f8:9d:1c:f1:
         5a:81:79:49:06:46:2f:69:c4:25:ad:d6:7d:69:d3:5c:61:91:
         3e:94:3d:19:af:ea:3f:42:75:40:0b:a2:0c:56:5a:8d:90:73:
         64:02:19:14:b3:f0:78:b4:d6:8b:ae:ce:99:db:eb:61:ae:e0:
         50:d6:ab:94:6d:46:0d:83:5c:96:05:f9:3c:b9:dc:46:41:1e:
         0a:69:1b:16:86:3e:49:72:fa:84:fc:73:88:f9:47:17:8f:a6:
         f4:3b:7b:8e:6e:f3:8e:9e:47:68:14:e4:81:d6:23:c4:0a:0a:
         df:3e:e8:a0:92:de:11:41:d7:73:97:f7:e7:94:d0:29:7f:82:
         c0:0e:56:71:2b:26:c9:e0:fd:20:a9:3e:de:09:36:e6:6a:98:
         e0:e0:a4:49:9a:f7:d3:a0:29:fa:cd:67:88:d7:b4:26:2b:cb:
         bd:d4:9e:c9:40:33:89:ff:f3:46:cc:cb:af:f1:47:2f:e1:2b:
         08:d6:2d:6c:06:75:26:51:ac:3b:a4:66:12:d4:eb:e6:f7:f1:
         14:55:c5:be:65:bb:62:66:79:4f:3c:0a:37:20:b2:50:12:fb:
         d7:db:a6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:57:19 2026 by rpki-client