Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e36312e302f32342d3234203d3e203538343636.roa
File:                     3131342e36372e36312e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier:          Srz4NbCmfZIFNt15us0kZ7Zo7JcT66AQiqWtElVf1+o=
Subject key identifier:   73:E2:2A:A4:48:85:38:8B:43:1B:0A:49:8B:3A:50:74:51:CC:BC:E0
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       5EB9E62B0537C82AEC595CAAF92BEFEE1B5AB161
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e36312e302f32342d3234203d3e203538343636.roa
Signing time:             Wed 13 May 2026 05:34:32 +0000
ROA not before:           Wed 13 May 2026 05:29:32 +0000
ROA not after:            Wed 12 May 2027 05:34:32 +0000
asID:                     58466
IP address blocks:        114.67.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 11:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b9:e6:2b:05:37:c8:2a:ec:59:5c:aa:f9:2b:ef:ee:1b:5a:b1:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: May 13 05:29:32 2026 GMT
            Not After : May 12 05:34:32 2027 GMT
        Subject: CN=73E22AA44885388B431B0A498B3A507451CCBCE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:09:85:68:b1:2a:6f:53:99:5c:13:29:46:e2:
                    b5:2f:41:fb:25:ca:6f:ee:90:ba:2f:78:59:d3:c0:
                    d1:b7:e3:08:71:01:08:f8:76:08:1d:41:40:26:0d:
                    c4:52:fa:74:33:f2:fb:2b:6c:40:57:08:80:ae:37:
                    8c:c8:80:e3:2b:c0:d2:42:a7:10:78:39:04:a7:c6:
                    d5:e2:13:fe:05:2e:3e:85:14:c2:99:1d:e3:bd:2e:
                    a8:df:78:f0:ec:af:75:98:32:54:2b:7f:15:dd:ad:
                    e5:8c:1e:15:4a:d0:56:a2:b6:68:f6:e1:91:ab:ac:
                    5e:24:94:0a:35:dc:bc:7a:94:24:26:2a:d9:b9:b8:
                    68:be:8e:ae:a1:f6:cd:3d:c0:78:08:0c:1d:9b:4c:
                    f1:1c:bb:e6:31:75:cc:2f:2e:4e:24:f7:fc:b5:8c:
                    56:ea:77:7c:15:0d:ee:a1:dd:6a:72:bb:c6:8a:34:
                    24:e0:f3:25:56:a9:18:87:1e:f9:46:f5:10:a5:38:
                    7b:df:b4:8a:d7:5e:eb:11:96:57:63:cb:f6:da:fa:
                    74:b5:96:51:4d:6f:87:cb:97:b9:9c:5d:68:50:cd:
                    d7:44:03:3e:4c:31:f6:2a:fc:01:3b:e3:65:36:82:
                    44:b0:3c:6d:72:b4:6c:a6:30:4f:9c:e9:b5:7f:56:
                    f7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E2:2A:A4:48:85:38:8B:43:1B:0A:49:8B:3A:50:74:51:CC:BC:E0
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e36312e302f32342d3234203d3e203538343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.67.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:f3:80:22:c4:e8:71:65:8a:89:7a:35:2c:8d:47:df:25:96:
         77:f1:f9:01:f3:1f:ef:d1:df:f8:38:2a:80:ce:73:49:78:5c:
         08:e2:da:1b:97:28:48:5e:c3:d8:44:2e:48:92:78:ad:94:10:
         ef:9e:6f:67:43:54:89:11:b7:e5:48:04:bd:14:fd:b7:49:bb:
         c3:66:ad:5f:61:e8:cc:11:42:07:bd:b2:26:87:30:c7:d7:ca:
         6d:e3:9d:4b:e9:ac:7b:93:74:34:fd:74:11:72:25:c3:c5:15:
         e2:c4:47:42:e7:17:f1:1b:f1:b7:d3:14:84:60:e8:c7:e7:79:
         fb:48:b0:b9:fa:46:c1:54:72:d1:c4:cc:45:83:03:c3:6a:10:
         91:6a:d7:d9:b1:9a:fd:ea:c3:d7:4e:6c:c3:1f:65:d5:89:bb:
         e1:9d:5e:42:dd:1b:81:8e:fd:e5:50:90:19:1b:f1:ff:af:b9:
         66:8c:bd:e4:ca:c8:26:78:e6:ab:55:d4:79:90:ce:0c:f7:dd:
         8d:bc:8c:c6:23:a9:4e:ab:5d:bc:e1:49:05:f2:1c:22:47:52:
         eb:3f:12:00:f6:82:de:53:a0:d6:6e:25:67:c5:42:b9:35:4f:
         ec:14:a0:78:11:69:37:0d:2a:b2:f4:9f:d3:99:3f:72:9c:ef:
         05:80:6c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:41:51 2026 by rpki-client