Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3131342e3131332e3232342e302f32302d3230203d3e2034383437.roa
File:                     3131342e3131332e3232342e302f32302d3230203d3e2034383437.roa (raw, json)
Hash identifier:          0RUREOZbL7QCSxbilQ+T7phjETfaLT5dhQ9p2hfr/q4=
Subject key identifier:   2A:1C:36:37:8B:98:C5:A0:6C:C3:DB:83:9E:4D:10:9E:72:19:6B:56
Certificate issuer:       /CN=40D86726DB14F9E5E06610928FF6C77226F14874
Certificate serial:       1FAAEDA1604A42FE59EADC1615A68E3177CFD5F2
Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3131342e3131332e3232342e302f32302d3230203d3e2034383437.roa
Signing time:             Tue 12 May 2026 09:17:39 +0000
ROA not before:           Tue 12 May 2026 09:12:39 +0000
ROA not after:            Tue 11 May 2027 09:17:39 +0000
asID:                     4847
IP address blocks:        114.113.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:aa:ed:a1:60:4a:42:fe:59:ea:dc:16:15:a6:8e:31:77:cf:d5:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874
        Validity
            Not Before: May 12 09:12:39 2026 GMT
            Not After : May 11 09:17:39 2027 GMT
        Subject: CN=2A1C36378B98C5A06CC3DB839E4D109E72196B56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ce:6e:79:43:70:82:94:f0:32:f4:b9:c0:b1:
                    50:e1:87:6c:60:e0:bf:db:03:8c:bc:b3:af:d6:74:
                    00:75:a6:51:f1:ca:58:e8:c8:b6:8a:67:48:bb:99:
                    bf:a3:e1:c3:4d:ed:0c:76:f1:c9:89:c5:e4:44:46:
                    09:e6:fb:3a:35:e0:b8:50:a5:2d:b9:88:39:b4:3a:
                    7d:56:c8:02:89:ae:7a:d0:52:21:99:ed:6c:5b:f3:
                    25:63:6b:9e:87:d1:6f:1e:71:ba:dc:84:40:10:64:
                    a1:8a:d4:af:65:3f:8f:8e:7a:8b:25:50:68:44:22:
                    53:45:15:32:ae:1b:e8:19:b8:a0:d1:53:cd:ad:d4:
                    1e:c8:4b:32:a7:d4:e8:b5:81:b3:9b:f2:9c:fa:07:
                    0b:84:51:f6:e3:0e:a4:88:92:2b:43:57:c3:3a:d6:
                    ec:22:83:3c:d9:a3:f8:2d:bd:2b:69:9c:fb:a0:35:
                    71:4b:a7:8c:74:ed:97:84:30:fa:d4:1f:49:4e:21:
                    17:53:78:2d:06:d3:81:71:32:4f:59:40:35:c8:e6:
                    2d:5a:cd:22:14:78:a1:c0:c6:6b:d2:9d:93:3c:85:
                    b3:0b:8f:35:87:86:f6:84:ce:9b:c2:fb:f3:69:dd:
                    7f:67:cd:fe:e0:d0:05:79:1a:a2:88:52:1b:6b:b1:
                    c8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:1C:36:37:8B:98:C5:A0:6C:C3:DB:83:9E:4D:10:9E:72:19:6B:56
            X509v3 Authority Key Identifier:
                keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3131342e3131332e3232342e302f32302d3230203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.113.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b2:df:7c:4e:9f:d3:88:b5:6b:13:ff:85:5c:ed:67:db:62:46:
         47:1f:b2:3b:31:3c:bc:04:9c:81:0e:74:84:55:b3:ed:cd:07:
         9a:12:62:4f:12:d1:3a:86:2f:67:d8:52:fb:d1:94:7d:2a:ed:
         bc:c8:a4:93:01:c1:db:d3:fb:92:33:de:bd:9a:d1:66:db:4c:
         ba:c6:ac:5f:79:fb:86:46:7e:69:f4:90:d0:74:99:6e:42:c0:
         fe:20:c9:be:77:39:7d:c6:1f:df:d5:b3:b8:d0:49:d0:05:7a:
         37:4a:02:86:f9:62:ea:6d:0c:25:52:fc:55:f4:03:b7:67:8b:
         76:56:b4:df:1a:0c:57:a3:66:91:f1:e8:98:26:cd:45:db:9a:
         77:eb:d7:b0:bc:e7:b4:99:1e:b0:72:c4:7c:4f:94:a3:bf:54:
         ee:c1:39:33:cb:12:e9:45:b4:9b:0a:91:12:ee:60:ba:df:a8:
         04:27:9f:0e:51:1e:73:e1:3d:6b:7a:0f:19:30:93:d6:fd:d9:
         35:29:ef:e6:dd:5d:1a:34:75:dc:4d:ab:10:5e:a6:45:02:e7:
         97:04:6e:24:e4:97:87:7d:43:c7:e3:fa:a2:49:c6:de:67:68:
         fa:38:02:4f:1e:4b:8a:60:71:f8:b6:e6:de:d3:b1:0b:b3:e8:
         48:fa:19:25
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 02:50:33 2026 by rpki-client