Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3131342e3131332e3232342e302f32302d3230203d3e2034383038.roa
File:                     3131342e3131332e3232342e302f32302d3230203d3e2034383038.roa (raw, json)
Hash identifier:          HOsabm5bNcShA+X8mkx4KiOxrKQ9GJHd0bDjHFV1wfs=
Subject key identifier:   FF:E6:82:10:35:BE:52:EF:BA:75:79:2C:B3:33:E5:DC:28:5A:C9:AD
Certificate issuer:       /CN=40D86726DB14F9E5E06610928FF6C77226F14874
Certificate serial:       4A929E4C2D974FCF0464864B67F4225140BA67AB
Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3131342e3131332e3232342e302f32302d3230203d3e2034383038.roa
Signing time:             Tue 12 May 2026 09:17:38 +0000
ROA not before:           Tue 12 May 2026 09:12:38 +0000
ROA not after:            Tue 11 May 2027 09:17:38 +0000
asID:                     4808
IP address blocks:        114.113.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:92:9e:4c:2d:97:4f:cf:04:64:86:4b:67:f4:22:51:40:ba:67:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874
        Validity
            Not Before: May 12 09:12:38 2026 GMT
            Not After : May 11 09:17:38 2027 GMT
        Subject: CN=FFE6821035BE52EFBA75792CB333E5DC285AC9AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:32:82:c4:7c:6c:7e:12:97:a8:7d:d5:d7:ee:
                    d7:fa:25:e7:91:10:8a:75:c3:d1:a8:76:63:44:f5:
                    7a:64:cf:6a:7f:83:32:79:be:eb:23:0c:72:62:77:
                    67:fd:25:c3:db:9d:de:6d:eb:62:af:6f:02:f2:be:
                    dd:50:a7:c8:09:cc:5d:05:00:49:67:5e:68:dd:f4:
                    d6:59:73:76:48:c7:c2:9f:5e:93:77:32:e7:0f:e6:
                    f6:c5:dc:15:fe:11:4d:9e:f0:40:36:8e:08:b7:99:
                    81:03:ff:aa:c3:13:02:4e:66:f8:38:f8:3d:a6:bd:
                    11:26:71:57:85:aa:5d:1a:6c:34:a0:38:56:cf:41:
                    a9:8c:25:ff:d6:50:65:dc:bd:a6:8c:cf:53:11:a8:
                    21:1e:3d:f6:e4:9a:f5:e8:79:13:3d:2d:9d:7f:98:
                    47:d5:7d:a4:d4:ba:b8:08:8d:10:f8:54:4e:6e:0e:
                    f7:cd:66:ff:38:c5:af:44:09:3d:18:5f:ab:4f:f3:
                    b3:d5:6f:6a:90:9f:27:a3:ef:81:39:96:61:53:d6:
                    aa:44:28:18:7b:d4:2f:9e:4b:f9:55:d9:ee:52:c4:
                    f5:98:21:35:ee:7c:62:11:20:b6:49:40:de:9c:95:
                    74:4e:d9:62:a5:c5:d6:73:61:30:da:67:f4:32:8a:
                    f8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E6:82:10:35:BE:52:EF:BA:75:79:2C:B3:33:E5:DC:28:5A:C9:AD
            X509v3 Authority Key Identifier:
                keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3131342e3131332e3232342e302f32302d3230203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.113.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3b:fb:e6:6b:13:93:3c:db:7f:63:9f:6c:c7:fc:d2:c4:4b:a1:
         cd:f8:1f:27:77:b4:e3:e1:65:f2:6b:74:9a:45:61:cb:4b:6b:
         a9:0d:62:53:7f:1d:ac:70:ee:46:b5:5a:35:19:e5:77:92:bb:
         a1:d4:3d:9b:b8:fc:22:5e:11:94:cc:8e:b6:6a:12:11:62:06:
         03:4d:84:37:f0:c3:62:f5:c3:d0:54:3d:99:cb:a5:25:e4:99:
         7a:16:9e:57:49:71:6d:0c:35:3b:bd:b9:db:03:7c:6d:36:42:
         c4:0e:83:cf:1b:8a:15:c2:83:4e:05:3c:14:d0:1d:b3:04:a9:
         c0:d1:71:eb:39:68:c8:84:b0:b9:b2:99:24:50:b5:eb:96:db:
         db:d7:7d:a8:1e:f3:ec:11:c7:fa:e7:92:8d:c7:75:2b:e9:11:
         29:cc:11:77:a2:12:0c:70:f4:e8:fd:61:2b:27:f7:32:46:bc:
         c6:19:77:94:7d:e9:28:e4:c1:8f:63:60:d4:79:ae:f9:10:f3:
         d1:d7:fb:8e:df:5d:21:2c:2d:84:b6:98:a7:7a:c3:07:b8:97:
         d3:d8:b8:b1:15:b6:6a:9b:ed:41:fb:82:c6:03:ba:2c:b6:64:
         e7:0d:60:d0:75:9a:0c:62:6f:70:ca:38:bd:7f:b2:76:23:96:
         c5:00:7b:87
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 02:50:26 2026 by rpki-client