Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e322e3137362e302f32302d3230203d3e203538383334.roa
File:                     3131392e322e3137362e302f32302d3230203d3e203538383334.roa (raw, json)
Hash identifier:          v7UIXWg6m21dA7RzHu3MNgnWmVEDkpj9OtyudH3lNT8=
Subject key identifier:   56:BD:32:4B:8E:22:47:3D:D1:99:3F:A1:AD:EA:59:84:53:44:88:6A
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       304AAFD65CAE714199D024088BB1CF8261D7E6AB
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e322e3137362e302f32302d3230203d3e203538383334.roa
Signing time:             Mon 13 Apr 2026 03:24:00 +0000
ROA not before:           Mon 13 Apr 2026 03:19:00 +0000
ROA not after:            Mon 12 Apr 2027 03:24:00 +0000
asID:                     58834
IP address blocks:        119.2.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:4a:af:d6:5c:ae:71:41:99:d0:24:08:8b:b1:cf:82:61:d7:e6:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Apr 13 03:19:00 2026 GMT
            Not After : Apr 12 03:24:00 2027 GMT
        Subject: CN=56BD324B8E22473DD1993FA1ADEA59845344886A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:22:3d:e4:5c:ac:11:b7:56:2b:d4:c9:f7:74:
                    af:a1:43:16:9c:28:99:13:df:19:f2:af:39:8a:e2:
                    cf:e6:0a:de:ac:70:3d:5a:6f:1e:df:a6:8d:e8:30:
                    0b:64:7c:80:4a:91:db:0b:7f:f2:d0:92:a5:dc:b2:
                    e2:02:d1:74:b6:0f:1d:39:59:0f:a9:81:98:90:76:
                    13:4a:e8:ca:ac:23:18:c5:80:26:89:a2:66:cf:fc:
                    1a:91:94:36:5f:f3:8e:fe:db:96:db:ad:89:8a:ab:
                    28:98:ba:2e:0c:02:d0:cb:fe:bc:6f:30:ca:54:7b:
                    64:be:e9:be:d3:35:b8:c7:e1:49:c3:d5:06:1a:78:
                    9d:ba:b5:9f:81:6e:27:dc:c5:fa:8c:ad:85:bb:ae:
                    e4:56:42:95:12:e9:df:a4:f4:ec:f2:3b:e1:5c:b2:
                    91:73:01:36:72:74:83:4e:7e:0d:88:e5:ab:4a:f4:
                    e8:e7:2c:d0:3c:51:93:db:27:63:bb:a1:2e:27:0f:
                    b6:d6:04:00:f7:7b:aa:7b:70:39:ef:ff:3b:9c:1a:
                    09:81:6d:17:bc:ec:4f:dc:69:01:f1:05:e6:76:d8:
                    52:e6:2c:4e:d7:66:f3:6f:c5:6a:75:37:06:79:96:
                    50:8d:32:03:31:81:40:b2:3d:51:fa:ef:22:48:90:
                    a7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BD:32:4B:8E:22:47:3D:D1:99:3F:A1:AD:EA:59:84:53:44:88:6A
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e322e3137362e302f32302d3230203d3e203538383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.2.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         56:a0:bc:9c:ee:01:f8:d3:0c:e7:dd:20:37:30:f5:54:db:70:
         42:8d:d2:70:21:47:79:2c:d1:7a:2f:04:7f:ce:2f:1b:5f:54:
         2e:0f:af:8e:aa:a3:e3:22:54:d2:18:01:14:8f:af:9c:af:f9:
         4a:e4:fc:c9:ed:1f:12:11:c3:52:e8:e3:e0:e9:22:63:1f:1f:
         46:d7:8d:3a:9c:dc:3d:46:a1:e4:6e:15:be:4e:28:63:9a:d0:
         74:e8:06:33:bb:e1:52:25:88:5b:6f:dd:6c:50:ba:6a:12:c6:
         4e:30:21:47:47:f5:26:72:ba:44:c8:02:f7:ee:cc:c0:cb:70:
         8f:c4:15:1a:fe:10:9f:31:a6:76:7f:ab:d2:2b:73:62:ba:1f:
         89:4e:cf:f6:b3:59:29:80:80:bf:a9:e8:2d:f3:7b:12:3d:16:
         20:ca:2f:44:49:2a:4d:2f:54:a5:2b:d3:e4:d1:2f:7f:1e:3f:
         ca:1d:c0:e3:e0:03:42:d5:39:ea:7d:72:c9:62:6c:79:da:ca:
         13:f4:fa:5f:c6:ad:cf:58:92:bf:fc:27:6e:18:2f:b0:78:4c:
         7f:2a:74:15:2f:a3:26:eb:4a:88:95:1b:66:12:a5:15:b5:f4:
         85:0c:8d:0a:23:53:79:f0:1b:b3:0f:68:0e:fc:d0:18:5c:dd:
         92:8d:4a:1f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUMEqv1lyucUGZ0CQIi7HPgmHX5qswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3
OTBBOUUwRTAeFw0yNjA0MTMwMzE5MDBaFw0yNzA0MTIwMzI0MDBaMDMxMTAvBgNV
BAMTKDU2QkQzMjRCOEUyMjQ3M0REMTk5M0ZBMUFERUE1OTg0NTM0NDg4NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbIj3kXKwRt1Yr1Mn3dK+hQxac
KJkT3xnyrzmK4s/mCt6scD1abx7fpo3oMAtkfIBKkdsLf/LQkqXcsuIC0XS2Dx05
WQ+pgZiQdhNK6MqsIxjFgCaJombP/BqRlDZf847+25bbrYmKqyiYui4MAtDL/rxv
MMpUe2S+6b7TNbjH4UnD1QYaeJ26tZ+BbifcxfqMrYW7ruRWQpUS6d+k9OzyO+Fc
spFzATZydINOfg2I5atK9OjnLNA8UZPbJ2O7oS4nD7bWBAD3e6p7cDnv/zucGgmB
bRe87E/caQHxBeZ22FLmLE7XZvNvxWp1NwZ5llCNMgMxgUCyPVH67yJIkKclAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUVr0yS44iRz3RmT+hrepZhFNEiGowHwYDVR0j
BBgwFoAU+xS2GlNcSQAO7S3ZFlAKJnkKng4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDU1MzM0NS8wL0ZCMTRCNjFBNTM1QzQ5MDAwRUVEMkREOTE2NTAw
QTI2NzkwQTlFMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3OTBBOUUwRS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0NTUzMzQ1LzAvMzEzMTM5MmUzMjJl
MzEzNzM2MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzUzODM4MzMzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBHcCsDANBgkqhkiG9w0BAQsFAAOCAQEAVqC8nO4B+NMM590gNzD1VNtwQo3S
cCFHeSzRei8Ef84vG19ULg+vjqqj4yJU0hgBFI+vnK/5SuT8ye0fEhHDUujj4Oki
Yx8fRteNOpzcPUah5G4Vvk4oY5rQdOgGM7vhUiWIW2/dbFC6ahLGTjAhR0f1JnK6
RMgC9+7MwMtwj8QVGv4QnzGmdn+r0itzYrofiU7P9rNZKYCAv6noLfN7Ej0WIMov
REkqTS9UpSvT5NEvfx4/yh3A4+ADQtU56n1yyWJsedrKE/T6X8atz1iSv/wnbhgv
sHhMfyp0FS+jJutKiJUbZhKlFbX0hQyNCiNTefAbsw9oDvzQGFzdko1KHw==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:17 2026 by rpki-client