Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/31342e3230342e36302e302f32322d3232203d3e2034383337.roa
File:                     31342e3230342e36302e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier:          3T/BTG1bFAX91P3Dsqu7hf0JKTi7AO/X45BaJH1oplw=
Subject key identifier:   4F:D1:96:B2:DE:DD:F5:81:13:60:7A:98:2F:35:F9:2B:53:4D:9B:83
Certificate issuer:       /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Certificate serial:       1BAB31A31E04EA49F8B4D0B5D2D9C07007C54749
Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/31342e3230342e36302e302f32322d3232203d3e2034383337.roa
Signing time:             Wed 13 May 2026 02:50:08 +0000
ROA not before:           Wed 13 May 2026 02:45:08 +0000
ROA not after:            Wed 12 May 2027 02:50:08 +0000
asID:                     4837
IP address blocks:        14.204.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ab:31:a3:1e:04:ea:49:f8:b4:d0:b5:d2:d9:c0:70:07:c5:47:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
        Validity
            Not Before: May 13 02:45:08 2026 GMT
            Not After : May 12 02:50:08 2027 GMT
        Subject: CN=4FD196B2DEDDF58113607A982F35F92B534D9B83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6a:e6:35:09:af:98:0a:16:40:68:45:89:da:
                    98:63:03:e7:28:b0:bd:85:ae:ae:bd:bc:46:ed:46:
                    1e:70:d1:47:b8:27:e1:63:29:af:e0:f5:3d:cf:74:
                    e8:07:55:22:f6:9e:2a:5f:b9:04:90:93:7d:43:75:
                    33:ad:44:a4:35:a8:4e:bc:47:bd:20:3e:37:1e:45:
                    8d:b0:1a:b4:f1:d9:d3:80:b4:42:61:ab:4e:1e:57:
                    28:10:59:eb:9f:81:7b:0e:31:80:7b:83:fc:31:f9:
                    f4:b4:c8:c3:0d:ea:9f:a9:4e:b6:04:46:d0:34:78:
                    6e:40:48:41:19:c7:97:a8:87:e7:1e:d8:f7:cf:5c:
                    8a:29:0d:0b:fe:6a:c4:6c:cc:a3:25:b4:ea:04:27:
                    9d:b4:d6:bc:43:b1:c9:06:27:e5:43:53:8d:5e:63:
                    2f:d0:63:06:49:bb:db:d2:17:26:41:3a:d0:62:22:
                    a4:e0:34:0d:91:ab:02:99:8f:49:c3:e3:f7:b0:3a:
                    87:bb:ab:d9:3c:48:8a:39:97:78:61:78:2c:a5:23:
                    c8:13:c3:77:be:7f:ad:fe:1c:09:c3:6b:9d:29:0d:
                    70:d4:0f:2d:67:d4:c5:62:58:dc:1b:5d:f0:e4:b4:
                    7d:d2:da:28:58:ab:0a:9f:36:40:48:f9:70:2a:f4:
                    b2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D1:96:B2:DE:DD:F5:81:13:60:7A:98:2F:35:F9:2B:53:4D:9B:83
            X509v3 Authority Key Identifier:
                keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/31342e3230342e36302e302f32322d3232203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.204.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:c7:a0:81:ef:e4:96:e5:cd:f2:ee:6e:c5:fd:00:c3:43:1b:
         6a:81:66:b7:91:19:19:b9:72:c9:ab:3e:86:7c:c2:78:5f:a1:
         cf:7e:91:b7:42:a2:ee:41:bc:34:56:cc:be:54:d6:32:b6:9e:
         5a:75:bd:1b:ec:4b:fe:8a:7c:f0:4a:d3:e0:af:61:78:26:d5:
         b3:44:6d:98:5f:25:1d:41:c2:5f:7e:84:a0:5d:39:4e:cd:58:
         86:75:0d:41:34:3b:48:e8:fa:01:89:14:a9:42:d4:ea:a8:b0:
         e7:21:95:67:7d:f0:a5:21:a6:0f:1a:a3:24:67:50:79:96:a9:
         2a:2d:54:82:3e:88:40:42:d8:86:83:c0:6d:19:65:e5:2a:0c:
         4c:ec:fa:6d:7f:59:cf:d3:5e:a1:9f:35:b1:88:cd:4d:7f:0e:
         ea:d1:ae:e1:8f:cd:b7:3b:75:f4:b3:70:74:ba:ac:33:b0:04:
         79:a8:9f:f3:81:28:13:9d:2d:9c:be:3e:62:a1:1f:ae:30:57:
         21:41:8d:97:5a:88:0f:f1:e5:be:88:42:bb:99:83:3f:ad:de:
         d0:fe:42:a3:08:76:18:11:cb:03:b1:aa:08:ab:08:39:d4:98:
         7e:33:5c:28:26:bd:6a:56:ed:39:c9:f1:1e:65:87:ff:93:fe:
         9a:f0:e4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:38 2026 by rpki-client