Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e3131322e302f32302d3230203d3e203538383334.roa
File:                     3132342e3234302e3131322e302f32302d3230203d3e203538383334.roa (raw, json)
Hash identifier:          8vjTtzziGfu/ngmZunGEeO0JiQFTfyauFha81IqepA0=
Subject key identifier:   4C:C1:8A:03:CD:9F:31:D2:C9:3E:C0:5F:B7:7C:F5:E4:DA:4D:54:0F
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       4E016ADF0D593D5746EE0555353C7BCEDA586136
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e3131322e302f32302d3230203d3e203538383334.roa
Signing time:             Mon 13 Apr 2026 03:17:58 +0000
ROA not before:           Mon 13 Apr 2026 03:12:58 +0000
ROA not after:            Mon 12 Apr 2027 03:17:58 +0000
asID:                     58834
IP address blocks:        124.240.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:01:6a:df:0d:59:3d:57:46:ee:05:55:35:3c:7b:ce:da:58:61:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Apr 13 03:12:58 2026 GMT
            Not After : Apr 12 03:17:58 2027 GMT
        Subject: CN=4CC18A03CD9F31D2C93EC05FB77CF5E4DA4D540F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:aa:03:02:c7:15:27:c8:3c:1b:a2:e8:05:11:
                    ff:b7:9a:48:d0:f8:d5:a0:2c:ef:c8:da:57:48:48:
                    c2:74:04:3a:d4:62:1e:57:21:46:67:ff:25:4f:ef:
                    c5:86:9b:12:f7:e0:c1:4e:a2:1f:cd:e3:67:83:a0:
                    d7:b2:e3:51:04:05:a9:1e:26:74:91:6c:4f:f7:9d:
                    7b:10:35:6a:2b:b5:4d:8b:2d:45:85:fb:14:e7:57:
                    ad:25:e2:e5:b3:be:3a:59:3f:1f:26:1e:20:0b:b4:
                    0c:b7:63:ef:89:f4:d8:f3:aa:04:88:c7:90:7a:30:
                    17:d0:50:d6:35:23:d0:fb:2c:12:9f:f8:cd:6f:f9:
                    29:be:04:8f:fa:eb:4a:f3:22:a5:8d:ca:7a:17:d6:
                    21:0d:51:fc:78:75:13:33:1b:69:05:0c:58:b0:8c:
                    63:be:15:87:0c:78:05:bf:8e:c2:a7:0e:2d:4e:b2:
                    d8:58:25:7e:4f:d0:31:96:56:72:da:ee:81:1a:19:
                    bc:b7:74:c8:75:e3:1b:85:84:80:4b:08:c5:e0:3a:
                    e3:d3:c3:05:eb:d4:d6:0a:8c:57:c4:96:4f:57:21:
                    16:1d:07:57:da:4f:06:cf:52:b0:f6:1c:27:65:da:
                    40:d7:87:d2:27:ad:3e:26:ca:e2:5b:b8:9c:c8:1a:
                    00:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C1:8A:03:CD:9F:31:D2:C9:3E:C0:5F:B7:7C:F5:E4:DA:4D:54:0F
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e3131322e302f32302d3230203d3e203538383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.240.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9a:cb:3c:2c:00:08:b9:14:2e:4a:23:66:50:ce:5c:d1:51:db:
         22:77:1f:06:a1:9f:6a:ec:4d:9e:2e:0d:81:a4:73:cd:95:94:
         b1:7b:3e:a0:53:8e:e7:54:ac:5b:e0:b9:41:4d:46:cf:8f:3b:
         1c:5c:da:32:8c:9f:d5:60:5a:1e:19:08:57:37:d7:5c:89:c8:
         76:ac:e5:80:e1:1e:ec:f9:be:7b:ab:24:53:40:9a:fc:37:9b:
         e6:06:15:9a:c0:fb:3e:3c:24:37:cb:20:b3:c0:08:4a:e4:ca:
         34:63:16:2b:81:cb:f8:4e:a2:04:ab:61:c9:27:e7:6e:e3:52:
         dd:4d:80:1c:6f:f8:92:f3:50:41:e2:0f:c8:b0:5a:45:b7:dd:
         0c:4d:73:b1:23:b9:4e:89:e2:75:62:cc:4d:44:ec:64:24:f7:
         f2:43:a2:31:80:06:4f:22:95:0b:3a:34:7c:2a:f4:2c:9f:e0:
         6f:dc:7a:76:2c:8e:86:3f:8a:09:76:37:34:2b:45:1e:c0:19:
         ed:d3:0c:8b:b9:36:fe:c7:a2:37:84:6d:e0:d7:75:ae:a6:42:
         41:0d:cc:59:49:98:84:85:e2:e7:f4:aa:15:6c:af:8e:4f:99:
         51:3e:1d:c5:8f:0c:26:32:4d:ab:5c:1d:ed:e6:af:e9:09:9f:
         58:e2:34:b0
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUTgFq3w1ZPVdG7gVVNTx7ztpYYTYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3
OTBBOUUwRTAeFw0yNjA0MTMwMzEyNThaFw0yNzA0MTIwMzE3NThaMDMxMTAvBgNV
BAMTKDRDQzE4QTAzQ0Q5RjMxRDJDOTNFQzA1RkI3N0NGNUU0REE0RDU0MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTqgMCxxUnyDwbougFEf+3mkjQ
+NWgLO/I2ldISMJ0BDrUYh5XIUZn/yVP78WGmxL34MFOoh/N42eDoNey41EEBake
JnSRbE/3nXsQNWortU2LLUWF+xTnV60l4uWzvjpZPx8mHiALtAy3Y++J9NjzqgSI
x5B6MBfQUNY1I9D7LBKf+M1v+Sm+BI/660rzIqWNynoX1iENUfx4dRMzG2kFDFiw
jGO+FYcMeAW/jsKnDi1OsthYJX5P0DGWVnLa7oEaGby3dMh14xuFhIBLCMXgOuPT
wwXr1NYKjFfElk9XIRYdB1faTwbPUrD2HCdl2kDXh9InrT4myuJbuJzIGgB/AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUTMGKA82fMdLJPsBft3z15NpNVA8wHwYDVR0j
BBgwFoAU+xS2GlNcSQAO7S3ZFlAKJnkKng4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDU1MzM0NS8wL0ZCMTRCNjFBNTM1QzQ5MDAwRUVEMkREOTE2NTAw
QTI2NzkwQTlFMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3OTBBOUUwRS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ1NTMzNDUvMC8zMTMyMzQyZTMy
MzQzMDJlMzEzMTMyMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzUzODM4MzMzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBHzwcDANBgkqhkiG9w0BAQsFAAOCAQEAmss8LAAIuRQuSiNmUM5c
0VHbIncfBqGfauxNni4NgaRzzZWUsXs+oFOO51SsW+C5QU1Gz487HFzaMoyf1WBa
HhkIVzfXXInIdqzlgOEe7Pm+e6skU0Ca/Deb5gYVmsD7PjwkN8sgs8AISuTKNGMW
K4HL+E6iBKthySfnbuNS3U2AHG/4kvNQQeIPyLBaRbfdDE1zsSO5TonidWLMTUTs
ZCT38kOiMYAGTyKVCzo0fCr0LJ/gb9x6diyOhj+KCXY3NCtFHsAZ7dMMi7k2/sei
N4Rt4Nd1rqZCQQ3MWUmYhIXi5/SqFWyvjk+ZUT4dxY8MJjJNq1wd7eav6QmfWOI0
sA==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:51:36 2026 by rpki-client