Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e322e3136302e302f32302d3230203d3e203538383334.roa
File:                     3131392e322e3136302e302f32302d3230203d3e203538383334.roa (raw, json)
Hash identifier:          CNIeuaw0tFTrrm5ooNYc5hNAOxs/Po1qmgA0gL59sGs=
Subject key identifier:   63:53:DE:86:D1:D5:15:B6:34:BD:97:60:3E:DE:95:04:A7:DF:1F:2B
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       5FC461D7B87600ADEC80C5B2281092323D8DF950
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e322e3136302e302f32302d3230203d3e203538383334.roa
Signing time:             Mon 13 Apr 2026 03:24:00 +0000
ROA not before:           Mon 13 Apr 2026 03:19:00 +0000
ROA not after:            Mon 12 Apr 2027 03:24:00 +0000
asID:                     58834
IP address blocks:        119.2.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c4:61:d7:b8:76:00:ad:ec:80:c5:b2:28:10:92:32:3d:8d:f9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Apr 13 03:19:00 2026 GMT
            Not After : Apr 12 03:24:00 2027 GMT
        Subject: CN=6353DE86D1D515B634BD97603EDE9504A7DF1F2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c8:ce:15:a2:9b:bc:61:31:c9:1e:6d:85:ed:
                    ae:e3:21:9a:ac:c3:62:6e:c7:08:7e:89:4d:95:59:
                    c9:8e:7e:49:91:9b:4d:4e:ad:23:4f:ae:ee:b3:2a:
                    c3:ec:35:d6:4c:02:c4:d5:3f:ab:2c:fa:24:70:e3:
                    5a:07:a0:53:f4:a2:db:65:75:73:14:7f:70:30:21:
                    62:0a:71:9e:a8:e7:45:23:fe:d5:17:1e:7a:f7:67:
                    ea:82:fe:10:34:ad:c3:95:66:2b:73:1b:6b:8d:ab:
                    22:74:85:71:3b:d4:b1:86:44:97:16:73:04:5b:a0:
                    97:6b:04:0b:0f:18:cc:8e:3b:97:bc:bf:96:4e:23:
                    94:0c:12:a9:7c:4e:3f:e3:78:43:21:0e:c9:67:40:
                    f7:79:ca:55:f8:cb:7f:1d:14:cc:f9:8e:b1:49:9e:
                    b4:50:01:51:84:da:e7:09:4d:ba:65:5d:dc:31:f3:
                    0a:b4:2a:fd:31:1f:b8:e8:15:4a:30:86:0b:46:59:
                    e7:8f:2f:5e:9d:66:d3:28:8b:23:f2:d1:83:fe:d7:
                    33:f6:e1:d4:fa:1b:70:7a:34:32:b1:87:33:fe:aa:
                    52:e2:0e:52:3a:fe:08:1a:28:36:58:28:ba:7f:23:
                    0f:8f:01:a2:e5:77:0c:0d:c7:d6:a6:7d:20:0a:6c:
                    bc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:53:DE:86:D1:D5:15:B6:34:BD:97:60:3E:DE:95:04:A7:DF:1F:2B
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e322e3136302e302f32302d3230203d3e203538383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.2.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0e:be:13:1b:07:82:99:a4:7f:c9:55:88:80:2a:85:12:51:49:
         65:c5:f1:8b:1b:af:cf:40:5f:db:6a:fd:f6:1a:48:29:33:ae:
         2c:8a:01:e1:c8:05:46:f7:b0:95:ef:31:19:f7:ca:98:4c:d2:
         26:02:77:45:21:9a:ae:67:c3:7c:b8:b6:a0:bd:b4:aa:96:11:
         48:c6:c9:f5:43:9a:69:ad:f5:89:55:ea:d2:26:54:d6:d0:ef:
         63:d0:ed:01:bd:ce:e2:33:81:53:86:64:af:e1:fa:a7:1d:17:
         d7:b3:51:24:a2:97:b9:5c:06:29:a2:d0:00:62:91:48:e0:b1:
         ca:25:a8:11:3f:9b:ac:23:ec:35:e2:40:ea:6d:f1:97:95:a5:
         32:75:aa:10:88:49:53:6d:32:f2:d9:7e:fe:78:0c:e2:a1:e4:
         aa:61:9b:51:96:ab:bf:92:9e:cf:95:3b:f9:f9:49:f1:74:ff:
         41:66:00:d6:08:da:41:83:7f:0b:f0:d3:cc:54:a9:5b:db:45:
         51:ea:71:34:42:38:4d:bc:7f:25:51:42:f8:52:e2:ec:6c:26:
         cd:c8:be:77:56:b4:0f:81:6b:a6:19:61:0f:7b:18:e2:46:8b:
         4b:f9:99:29:3c:47:5d:4a:bf:70:6b:a3:f9:df:5c:7f:00:14:
         b1:2b:ce:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:20 2026 by rpki-client