Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3131332e3230382e3131322e302f32322d3232203d3e2034383038.roa
File:                     3131332e3230382e3131322e302f32322d3232203d3e2034383038.roa (raw, json)
Hash identifier:          Oe4lgNDRYqcDE8SGWHciOR4xQCmgOD/0eAWVb3S/6uQ=
Subject key identifier:   85:7D:31:3E:61:58:4D:BA:E5:A1:63:58:93:5B:EE:03:58:04:44:21
Certificate issuer:       /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Certificate serial:       4B0185C9C5E6667691238941043BB5A30B1851CA
Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3131332e3230382e3131322e302f32322d3232203d3e2034383038.roa
Signing time:             Fri 05 Jun 2026 05:40:29 +0000
ROA not before:           Fri 05 Jun 2026 05:35:29 +0000
ROA not after:            Fri 04 Jun 2027 05:40:29 +0000
asID:                     4808
IP address blocks:        113.208.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 13:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:01:85:c9:c5:e6:66:76:91:23:89:41:04:3b:b5:a3:0b:18:51:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
        Validity
            Not Before: Jun  5 05:35:29 2026 GMT
            Not After : Jun  4 05:40:29 2027 GMT
        Subject: CN=857D313E61584DBAE5A16358935BEE0358044421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8a:85:28:7d:65:08:cc:7e:3a:9c:88:a0:96:
                    8e:08:d2:ca:86:c3:c3:b1:69:07:b4:28:63:f5:18:
                    5b:30:00:b8:c7:25:d1:11:df:c0:65:81:e4:ea:cf:
                    31:b4:c2:60:1f:d5:82:70:77:44:55:37:55:93:10:
                    02:ec:ca:46:25:2b:1d:40:5c:c6:d4:6e:52:16:24:
                    f4:eb:32:3e:2b:48:6e:ef:b4:49:89:e6:cb:90:11:
                    eb:d4:88:29:33:d7:d7:1c:32:36:43:88:0d:0b:98:
                    16:03:24:12:be:9c:e6:ef:47:5d:f1:af:da:25:0d:
                    3f:84:83:63:54:58:39:83:7e:c4:66:39:8b:9b:9a:
                    32:c5:68:15:87:9d:f3:5a:83:97:77:d6:e2:c2:3b:
                    e1:35:d9:dd:61:34:df:82:9e:ae:0a:85:50:c5:ff:
                    e2:e4:e9:01:5e:e2:bb:63:ab:c2:da:e3:c8:ce:6f:
                    39:1a:c0:c8:8e:ae:9a:60:89:12:b7:f8:2e:98:a5:
                    56:57:9f:ff:9e:eb:0a:80:fe:70:68:94:d1:ba:3f:
                    b9:51:4e:03:53:e9:86:92:17:bf:ed:95:cd:64:03:
                    a4:46:a7:7b:58:4f:0b:37:08:1f:2b:51:e3:5f:c5:
                    87:75:55:b7:f1:bc:26:ab:31:cb:c3:41:5b:ce:a4:
                    d6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7D:31:3E:61:58:4D:BA:E5:A1:63:58:93:5B:EE:03:58:04:44:21
            X509v3 Authority Key Identifier:
                keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3131332e3230382e3131322e302f32322d3232203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.208.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:08:db:96:54:b1:77:ce:f7:b0:65:e8:b7:18:ef:eb:e5:ba:
         15:5e:f3:be:16:cb:60:28:98:d0:3d:92:72:ad:86:4b:a6:0c:
         47:68:b6:46:e0:8d:0e:2a:ec:15:ab:13:c4:09:7e:af:0e:8e:
         1e:d0:32:99:38:62:a5:d5:54:0a:a1:d5:9f:71:75:d0:4f:0d:
         09:e3:23:52:b2:43:aa:a8:d4:23:8c:4b:2f:53:6a:f8:41:91:
         7e:5e:d4:06:cb:e7:b5:f8:9b:26:5a:46:5d:4a:88:a3:3b:b0:
         72:dc:c9:d5:3e:0e:0d:aa:48:a7:de:c2:72:51:83:66:4b:4e:
         da:08:a2:45:80:44:0d:87:d8:2b:5f:b9:4d:a1:59:ac:91:a2:
         27:5f:f6:01:65:97:cb:1c:67:f6:ff:ba:76:11:ef:1c:7d:96:
         3d:db:8c:cc:8e:33:81:e5:d8:31:cf:71:33:82:48:2c:c7:bf:
         73:9e:9f:34:ec:8c:08:64:a6:41:e0:ea:8c:71:cb:d7:13:8e:
         7f:c7:e9:91:71:09:47:6d:3e:58:a5:32:74:10:a1:44:9f:91:
         a2:9f:c4:b6:92:7f:c7:c7:99:a2:af:e1:de:6d:35:0a:3c:43:
         eb:ca:60:fe:96:0e:fd:a3:ef:0f:bd:a7:c6:bb:9a:ad:52:92:
         70:83:7d:77
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:31:49 2026 by rpki-client