Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3131342e3131322e312e302f32342d3234203d3e20313334373030.roa
File:                     3131342e3131322e312e302f32342d3234203d3e20313334373030.roa (raw, json)
Hash identifier:          AxAmAqNBGwbgJ1KIWPX8PWjqXDXzngLGjooerBZTBeM=
Subject key identifier:   0E:87:99:93:16:9B:15:EE:07:62:C2:57:9F:CD:F4:5C:EB:DF:49:4B
Certificate issuer:       /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
Certificate serial:       72A1DC469BECE2FBB9111AA111C7A9CE783DB47C
Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3131342e3131322e312e302f32342d3234203d3e20313334373030.roa
Signing time:             Mon 27 Apr 2026 10:24:23 +0000
ROA not before:           Mon 27 Apr 2026 10:19:23 +0000
ROA not after:            Mon 26 Apr 2027 10:24:23 +0000
asID:                     134700
IP address blocks:        114.112.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a1:dc:46:9b:ec:e2:fb:b9:11:1a:a1:11:c7:a9:ce:78:3d:b4:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
        Validity
            Not Before: Apr 27 10:19:23 2026 GMT
            Not After : Apr 26 10:24:23 2027 GMT
        Subject: CN=0E879993169B15EE0762C2579FCDF45CEBDF494B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fc:cf:d4:13:1c:d0:49:fa:66:0c:86:db:d0:
                    9e:65:92:ab:54:47:c2:72:01:6d:ef:f2:22:55:46:
                    0a:3b:5e:9f:b2:6b:b9:ff:c3:14:70:7a:f4:8d:33:
                    a3:83:d3:7c:3c:af:ee:c1:40:22:44:4c:9e:ce:63:
                    ab:59:5f:12:5b:fd:68:32:67:d4:3b:f7:59:b5:76:
                    2b:34:94:e9:3a:d9:73:bc:db:e0:09:64:f4:ed:77:
                    6a:3e:ec:5b:f8:e8:14:13:b2:ef:b3:8c:e2:b5:b4:
                    76:10:3b:6a:61:8e:85:78:d5:aa:b8:50:e3:4a:7d:
                    5d:5d:9b:b8:37:aa:9c:cc:4e:f8:ee:e1:09:18:f1:
                    1a:46:5c:f7:5d:f4:33:03:f6:df:88:4d:e8:d4:b3:
                    2c:99:52:f3:e4:6e:1b:ed:a8:c6:74:af:80:fd:97:
                    67:8e:6e:2d:63:fb:61:0c:85:fb:46:5c:8d:1f:6e:
                    1a:36:60:43:25:d0:93:e0:44:96:4f:3f:d5:40:ab:
                    ba:5a:73:71:5e:50:e3:13:e0:70:9c:3d:e7:67:15:
                    f3:d7:88:c6:16:fc:44:4c:1f:25:7b:a1:f9:98:94:
                    ce:7b:2c:d6:2c:e2:82:29:61:b1:50:6f:45:7b:af:
                    81:88:87:9e:ae:d0:21:b6:c1:0e:8d:0b:4c:c6:15:
                    89:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:87:99:93:16:9B:15:EE:07:62:C2:57:9F:CD:F4:5C:EB:DF:49:4B
            X509v3 Authority Key Identifier:
                keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3131342e3131322e312e302f32342d3234203d3e20313334373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.112.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:66:4a:83:c2:43:20:0e:b7:6f:ef:a5:a9:ed:d1:1f:6e:d0:
         e8:c4:8f:54:10:9c:ac:55:07:2a:1d:a7:14:6f:78:8a:70:14:
         a8:5a:e2:5f:71:6b:eb:f2:6a:30:8a:90:6a:8f:75:b7:57:ca:
         27:44:ed:6a:af:0f:66:2c:cb:e2:51:32:64:11:a7:90:17:88:
         9d:c5:e0:dc:d6:5b:65:f2:d2:bf:23:9d:25:f6:25:ac:d9:a2:
         e0:07:92:32:56:3e:c4:57:17:35:ef:d5:d8:47:bb:fc:b2:3b:
         70:c2:74:76:03:ab:b5:e4:4a:b9:a1:60:ff:da:87:16:d1:d0:
         82:7b:a8:10:a2:c3:b5:dc:36:df:29:af:11:87:14:cc:9a:56:
         43:e2:06:7e:53:b9:d0:d1:96:90:b1:3f:69:65:e3:3e:53:d6:
         13:dd:93:c0:0f:c3:e6:86:ca:28:3f:52:8d:95:ac:72:29:d3:
         48:2d:7e:84:9f:61:7a:10:df:c8:5f:19:93:0e:dd:ea:84:83:
         df:81:b5:ac:cf:de:df:8b:fa:bb:90:65:ac:88:00:96:c5:10:
         d6:71:3b:d6:94:a8:bd:36:41:c5:ff:fc:3e:1a:f2:4c:c0:b1:
         1a:26:b5:7b:03:08:9a:74:2b:b3:9a:59:2b:71:45:f2:73:bd:
         33:c7:86:b9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 16:15:04 2026 by rpki-client