Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106106457318752269/0/3131302e34302e302e302f32302d3230203d3e2030.roa
File:                     3131302e34302e302e302f32302d3230203d3e2030.roa (raw, json)
Hash identifier:          uz8vvrxqhlxPhhSdcfvPutY8ZO3Uap7LyUirimI4VLk=
Subject key identifier:   B5:6B:C4:E9:3E:04:1A:B8:2B:14:17:97:FC:1D:7F:A3:9F:0F:E3:45
Certificate issuer:       /CN=6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52
Certificate serial:       7F4D33F195F83CD758F739F86058F119CB3D58B6
Authority key identifier: 6B:23:1F:5D:F7:53:5B:F8:6C:FF:EB:85:A0:B2:8E:0A:44:7C:BD:52
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/3131302e34302e302e302f32302d3230203d3e2030.roa
Signing time:             Mon 11 May 2026 08:30:02 +0000
ROA not before:           Mon 11 May 2026 08:25:02 +0000
ROA not after:            Mon 10 May 2027 08:30:02 +0000
asID:                     0
IP address blocks:        110.40.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:4d:33:f1:95:f8:3c:d7:58:f7:39:f8:60:58:f1:19:cb:3d:58:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52
        Validity
            Not Before: May 11 08:25:02 2026 GMT
            Not After : May 10 08:30:02 2027 GMT
        Subject: CN=B56BC4E93E041AB82B141797FC1D7FA39F0FE345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e8:d4:c3:62:7e:31:c0:8b:85:4d:f2:ea:ab:
                    cb:3b:1d:11:bd:72:d9:01:d4:9b:03:3c:e7:d9:d6:
                    17:2b:dd:c6:5b:f9:eb:ac:77:34:bf:8c:22:30:22:
                    1f:c4:bc:86:8a:37:25:98:da:b9:68:ff:28:c7:ad:
                    1a:29:6c:c6:0f:61:1d:ea:e1:53:5c:21:37:af:5c:
                    6e:13:21:27:cb:06:fb:18:73:31:bc:33:63:a6:8f:
                    0f:97:4d:25:10:d7:dc:00:df:18:6e:e1:51:8d:38:
                    42:c2:fc:e3:66:47:f3:57:4d:f2:c1:f7:8a:12:40:
                    3f:53:d7:3c:09:e8:de:46:0e:d1:8e:4d:fe:9b:a4:
                    48:75:bc:6d:5e:df:56:1a:5c:cc:ea:14:da:09:9d:
                    31:b0:18:4c:5e:59:cb:3b:c4:74:da:9b:bb:11:eb:
                    0f:ca:80:ff:5e:d6:f3:52:31:af:28:ca:ca:1c:1f:
                    d8:d5:84:41:4c:a6:0a:03:2e:01:3f:63:c7:1e:d1:
                    95:c7:29:0a:68:1f:24:07:3a:a1:88:7f:b0:a4:a2:
                    bb:7a:d2:8f:42:cb:ab:af:d3:45:ec:4a:36:4d:91:
                    b8:0b:80:47:64:07:a4:53:29:0a:4e:85:a4:41:e3:
                    65:32:68:50:98:91:6e:d3:b9:77:88:10:dc:28:09:
                    0d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6B:C4:E9:3E:04:1A:B8:2B:14:17:97:FC:1D:7F:A3:9F:0F:E3:45
            X509v3 Authority Key Identifier:
                keyid:6B:23:1F:5D:F7:53:5B:F8:6C:FF:EB:85:A0:B2:8E:0A:44:7C:BD:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/3131302e34302e302e302f32302d3230203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.40.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:53:fb:fc:6f:a0:74:16:fa:74:8e:dc:55:80:36:83:4a:ae:
         1c:bf:a7:d3:37:2f:31:7e:d0:9b:65:86:d4:0f:01:40:af:42:
         bb:b3:df:90:5f:3b:f7:b3:a5:67:3e:28:41:fa:fa:40:87:2f:
         de:77:d1:fe:3e:c7:98:93:fb:98:c0:64:5c:dc:db:c9:cb:09:
         2c:59:9b:58:c7:4c:24:7f:fb:d5:de:2a:27:06:b5:25:8d:9e:
         50:89:e4:6f:74:6e:47:52:dc:af:72:7f:d7:eb:48:91:e7:79:
         ec:d4:35:16:76:85:14:49:5f:92:05:60:a3:d4:93:71:01:db:
         2d:10:b3:aa:de:fc:a5:7c:9a:d9:d3:56:06:c8:b1:25:8b:5b:
         e6:f2:52:73:cf:fa:e8:66:aa:e8:42:27:97:4b:cf:b5:5d:a4:
         c5:e2:de:a0:0f:6b:df:76:5c:21:26:87:4f:a4:82:8b:af:27:
         9c:43:02:8f:05:d8:88:d3:a7:d6:a5:35:8f:99:a7:94:26:6a:
         6c:4b:b6:cd:f4:5d:2d:94:fb:2e:77:84:28:30:4a:fc:1d:2d:
         99:59:61:88:70:22:04:6a:51:31:88:40:9a:d4:90:21:9f:4f:
         11:c0:81:86:36:0d:c6:2d:7b:96:fa:e7:60:91:93:cb:4b:1c:
         d3:dc:4d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:52 2026 by rpki-client