Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3131352e33312e36342e302f32322d3232203d3e2034383337.roa
File:                     3131352e33312e36342e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier:          NnkiFG9BrOMJG2yAMLabNIgYx5aKSRhxcjplTQHkHH0=
Subject key identifier:   35:B4:45:95:A2:33:9F:51:85:28:A6:68:1B:DA:93:22:71:F0:28:23
Certificate issuer:       /CN=3C076DFC935A1839CC3375F6F211010DB1E4240A
Certificate serial:       0A9841310660C332250077D66EF6A30ADA64F131
Authority key identifier: 3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3131352e33312e36342e302f32322d3232203d3e2034383337.roa
Signing time:             Fri 08 May 2026 08:21:07 +0000
ROA not before:           Fri 08 May 2026 08:16:07 +0000
ROA not after:            Fri 07 May 2027 08:21:07 +0000
asID:                     4837
IP address blocks:        115.31.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:98:41:31:06:60:c3:32:25:00:77:d6:6e:f6:a3:0a:da:64:f1:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C076DFC935A1839CC3375F6F211010DB1E4240A
        Validity
            Not Before: May  8 08:16:07 2026 GMT
            Not After : May  7 08:21:07 2027 GMT
        Subject: CN=35B44595A2339F518528A6681BDA932271F02823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dd:ba:49:05:26:28:30:34:1e:f5:9a:db:31:
                    23:39:4f:6f:8b:32:0c:46:c6:c9:99:65:a9:2a:ae:
                    d5:74:a7:52:1d:8a:de:87:82:e9:46:c1:2b:07:69:
                    6c:81:3a:44:69:2c:f1:f2:bb:1f:16:dd:6f:1e:e4:
                    08:d0:69:e1:9b:d6:6a:49:d7:e9:59:34:f3:74:b7:
                    c7:17:e7:a2:c0:8d:5a:9f:57:c2:b2:95:f3:91:d3:
                    10:c4:3c:cf:b9:d6:2f:74:d0:28:02:2a:c7:90:60:
                    9f:b9:bb:c6:ed:52:ee:0c:75:78:0d:cb:77:7a:37:
                    06:69:83:87:72:d9:49:20:63:eb:f4:a2:1d:f0:52:
                    fe:98:0b:50:cf:1a:bf:08:4e:34:9c:71:8e:c4:2e:
                    2d:ed:60:e0:af:aa:5f:11:f7:f2:bf:31:c3:a2:74:
                    ae:fd:ce:e2:82:4a:59:a2:e6:06:f2:7c:48:6c:56:
                    0a:dc:26:fb:d9:2a:29:16:6f:2e:95:40:85:3c:6c:
                    48:11:a8:da:79:56:a8:88:84:c1:2f:50:af:24:63:
                    30:11:21:cf:17:c1:3c:f1:26:71:cb:6a:74:53:78:
                    9e:06:43:f6:6c:86:dc:a2:68:a3:f3:4d:1a:f2:6c:
                    f7:51:7e:8d:11:73:f6:ef:f2:59:61:ab:c7:41:7e:
                    e2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B4:45:95:A2:33:9F:51:85:28:A6:68:1B:DA:93:22:71:F0:28:23
            X509v3 Authority Key Identifier:
                keyid:3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3131352e33312e36342e302f32322d3232203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.31.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:04:05:ad:05:7d:c7:d6:25:8e:0a:9f:c1:28:3e:0d:08:6e:
         09:a2:ef:3d:ce:58:2a:6e:e5:78:ba:5e:24:69:9c:ff:c3:e2:
         9c:45:19:07:03:ce:d5:19:7b:28:72:0b:d1:61:a1:fa:97:c4:
         e6:7e:65:7d:4a:7f:48:50:e5:6a:69:cb:2e:fe:0d:1d:19:fe:
         88:f3:f4:68:86:5a:af:78:18:4c:18:07:e9:09:69:ef:0e:d1:
         27:02:59:ce:8d:41:36:04:18:47:61:ce:c1:57:8b:de:f3:93:
         e5:91:ed:58:eb:5f:6f:13:d9:77:6a:cc:85:4e:d4:13:dd:5b:
         ff:aa:53:dd:05:0a:48:0f:7c:0f:b9:96:2b:a0:3e:05:7f:1a:
         bc:64:97:15:51:bd:9a:3c:0b:87:e7:1d:af:e8:24:2e:73:3f:
         1b:51:f6:11:06:e9:aa:19:81:a0:a3:94:a4:0e:9b:94:d0:55:
         68:da:fd:da:71:2c:4f:71:3f:eb:91:17:6b:43:5b:20:7d:bd:
         5a:94:7f:4a:d5:85:b5:04:e0:c3:46:96:ca:5d:d4:fc:fc:a2:
         84:a2:51:27:28:05:aa:b4:6c:db:1d:c4:5b:4f:66:db:3a:b9:
         69:ce:bc:f3:0f:1d:5f:dc:2b:6d:df:d7:bc:47:ef:96:58:d9:
         ed:e1:48:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:17:01 2026 by rpki-client