Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/3131362e3139362e36342e302f31382d3234203d3e203233373234.roa
File:                     3131362e3139362e36342e302f31382d3234203d3e203233373234.roa (raw, json)
Hash identifier:          db0i8U1aT9HCue6/dMr90KIYykuPMrp1SsD95K2F1w8=
Subject key identifier:   6C:AB:4A:37:1E:10:92:8E:16:67:64:57:2D:5D:65:EC:9F:B5:76:80
Certificate issuer:       /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
Certificate serial:       0BC8753565065EDC8C3B78AF5BEA3C3705A0AAE5
Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/3131362e3139362e36342e302f31382d3234203d3e203233373234.roa
Signing time:             Thu 09 Apr 2026 06:16:43 +0000
ROA not before:           Thu 09 Apr 2026 06:11:43 +0000
ROA not after:            Thu 08 Apr 2027 06:16:43 +0000
asID:                     23724
IP address blocks:        116.196.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 12:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c8:75:35:65:06:5e:dc:8c:3b:78:af:5b:ea:3c:37:05:a0:aa:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
        Validity
            Not Before: Apr  9 06:11:43 2026 GMT
            Not After : Apr  8 06:16:43 2027 GMT
        Subject: CN=6CAB4A371E10928E166764572D5D65EC9FB57680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a5:32:ce:c3:5a:90:4a:69:9a:d1:79:93:50:
                    be:0d:86:59:da:49:cc:c8:7d:64:63:e9:a5:b5:c4:
                    bc:85:ff:80:12:51:46:70:bd:cb:27:bb:bf:a1:b4:
                    b6:c2:f1:da:a3:76:39:77:b9:61:88:b1:90:60:8f:
                    9d:2e:ed:58:d4:3f:69:f5:c1:c3:67:62:89:3a:1b:
                    fe:df:54:e2:c9:a4:d8:b8:9b:d9:44:c8:53:5f:ee:
                    2b:c5:cf:23:c8:ca:76:d5:04:02:3c:9b:d0:03:d3:
                    69:b4:f1:37:76:4f:7d:6c:36:b5:1f:26:c5:29:1a:
                    a1:85:50:0e:d6:34:a2:40:a5:1e:6a:ec:87:6c:e4:
                    ac:19:da:b7:0a:85:06:6b:dc:5e:20:04:07:c8:bb:
                    9a:51:30:6a:13:ef:0f:19:05:c2:49:4b:7c:9c:7d:
                    9c:c5:6e:67:a0:80:71:d1:fd:0a:9f:27:ca:2a:b0:
                    96:64:13:f8:69:03:34:70:35:dc:29:55:56:4c:20:
                    66:1d:d1:e4:4f:47:20:2f:45:c4:99:66:39:dc:bd:
                    39:4b:8f:e6:53:b5:1c:da:76:38:53:80:7e:3f:8f:
                    b3:be:7f:4a:e7:c6:1a:5f:40:08:70:a0:a7:1b:ed:
                    35:30:3a:dd:e8:94:ae:28:fd:80:ef:95:5e:9d:fa:
                    7d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AB:4A:37:1E:10:92:8E:16:67:64:57:2D:5D:65:EC:9F:B5:76:80
            X509v3 Authority Key Identifier:
                keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/3131362e3139362e36342e302f31382d3234203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.196.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         21:39:44:b4:4b:18:4c:a6:8a:ad:15:83:1b:4a:ce:54:c3:d9:
         d1:40:57:2b:e0:5e:ee:7d:a5:51:c8:9d:3f:ed:01:ed:4f:c8:
         30:cd:9c:28:83:6e:a4:19:10:7e:bf:44:7d:c1:d8:1d:bf:a4:
         33:05:fe:4e:09:6b:59:db:0c:75:5b:1a:45:90:7f:63:35:c1:
         d5:ef:73:80:26:ec:76:40:ee:97:11:df:9b:8f:a6:13:0b:6a:
         e4:59:2f:09:3f:88:56:0b:b4:df:7b:5c:0f:fa:34:de:cf:84:
         f1:2e:e7:08:e7:02:60:6f:ac:a7:18:f7:13:0f:90:cd:1c:04:
         d2:20:2a:36:d9:42:e1:be:f2:f7:e6:45:7d:97:ed:06:73:c0:
         cd:1f:e4:23:85:8d:7f:cf:0c:2d:9e:b4:22:bb:e4:bc:fb:d1:
         da:e6:d6:d5:e6:ce:e5:14:b2:2f:71:2e:99:48:8a:a1:ab:ad:
         e9:f0:38:ab:98:43:21:51:5c:e7:9a:51:55:eb:f9:96:38:90:
         0a:7d:9f:9f:02:bd:1d:e7:0a:f3:a3:08:b8:58:5c:b1:4d:4f:
         77:12:de:21:ba:d1:1e:3f:63:69:18:5a:ee:17:b3:2f:0a:ed:
         26:35:70:35:9d:0d:b8:5f:95:c2:c3:9b:ab:9f:46:80:d6:91:
         68:fb:66:27
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUC8h1NWUGXtyMO3ivW+o8NwWgquUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNC
MEQzODlFNTAeFw0yNjA0MDkwNjExNDNaFw0yNzA0MDgwNjE2NDNaMDMxMTAvBgNV
BAMTKDZDQUI0QTM3MUUxMDkyOEUxNjY3NjQ1NzJENUQ2NUVDOUZCNTc2ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5pTLOw1qQSmma0XmTUL4Nhlna
SczIfWRj6aW1xLyF/4ASUUZwvcsnu7+htLbC8dqjdjl3uWGIsZBgj50u7VjUP2n1
wcNnYok6G/7fVOLJpNi4m9lEyFNf7ivFzyPIynbVBAI8m9AD02m08Td2T31sNrUf
JsUpGqGFUA7WNKJApR5q7Ids5KwZ2rcKhQZr3F4gBAfIu5pRMGoT7w8ZBcJJS3yc
fZzFbmeggHHR/QqfJ8oqsJZkE/hpAzRwNdwpVVZMIGYd0eRPRyAvRcSZZjncvTlL
j+ZTtRzadjhTgH4/j7O+f0rnxhpfQAhwoKcb7TUwOt3olK4o/YDvlV6d+n0vAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUbKtKNx4Qko4WZ2RXLV1l7J+1doAwHwYDVR0j
BBgwFoAU1oBdswkFdhLMknLLLIW6bLDTieUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
ODM2MzU5OTc5MDk5NzUwNi8wL0Q2ODA1REIzMDkwNTc2MTJDQzkyNzJDQjJDODVC
QTZDQjBEMzg5RTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNCMEQzODlFNS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2ODM2MzU5OTc5MDk5NzUwNi8wLzMxMzEzNjJlMzEz
OTM2MmUzNjM0MmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzIzMzM3MzIzNC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBnTEQDANBgkqhkiG9w0BAQsFAAOCAQEAITlEtEsYTKaKrRWDG0rOVMPZ
0UBXK+Be7n2lUcidP+0B7U/IMM2cKINupBkQfr9EfcHYHb+kMwX+TglrWdsMdVsa
RZB/YzXB1e9zgCbsdkDulxHfm4+mEwtq5FkvCT+IVgu033tcD/o03s+E8S7nCOcC
YG+spxj3Ew+QzRwE0iAqNtlC4b7y9+ZFfZftBnPAzR/kI4WNf88MLZ60IrvkvPvR
2ubW1ebO5RSyL3EumUiKoaut6fA4q5hDIVFc55pRVev5ljiQCn2fnwK9HecK86MI
uFhcsU1PdxLeIbrRHj9jaRha7hezLwrtJjVwNZ0NuF+VwsObq59GgNaRaPtmJw==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:25:03 2026 by rpki-client