Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3131342e3131332e3139362e302f32322d3234203d3e203435303632.roa
File:                     3131342e3131332e3139362e302f32322d3234203d3e203435303632.roa (raw, json)
Hash identifier:          4C85hVxnwZWxkppIpmRx4HNmE2aKQNGkUSiEdNYSdMw=
Subject key identifier:   90:D4:82:16:31:E8:5B:88:4E:C1:36:B0:35:E4:1E:B9:91:D3:50:7F
Certificate issuer:       /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial:       2139C2BF0523B369FDE23C56EFA0A27CA03ABF4D
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3131342e3131332e3139362e302f32322d3234203d3e203435303632.roa
Signing time:             Fri 10 Apr 2026 05:49:15 +0000
ROA not before:           Fri 10 Apr 2026 05:44:15 +0000
ROA not after:            Fri 09 Apr 2027 05:49:15 +0000
asID:                     45062
IP address blocks:        114.113.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:39:c2:bf:05:23:b3:69:fd:e2:3c:56:ef:a0:a2:7c:a0:3a:bf:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
        Validity
            Not Before: Apr 10 05:44:15 2026 GMT
            Not After : Apr  9 05:49:15 2027 GMT
        Subject: CN=90D4821631E85B884EC136B035E41EB991D3507F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:75:7c:00:f2:26:06:ea:16:fc:4b:e3:2c:cf:
                    bd:68:92:45:83:6e:c6:d3:87:c5:16:bd:ec:2b:98:
                    60:e9:bc:e1:c8:bf:de:80:03:8a:59:4f:5c:c5:84:
                    a0:7f:8a:b3:a0:5b:62:a1:d0:aa:a4:d0:49:4e:a7:
                    2f:93:10:29:79:7a:5e:79:22:45:e0:0e:a3:69:ed:
                    a5:02:4c:77:7d:06:e5:9f:94:31:36:f6:16:93:b9:
                    e9:bd:76:5b:16:d0:a5:fa:47:21:7f:d6:e1:4e:93:
                    c4:10:85:be:9c:15:05:83:16:55:7a:84:1b:7f:f0:
                    93:f7:99:da:fd:a2:a4:0c:d2:60:f3:35:74:6b:e9:
                    96:1d:20:4e:03:f7:9f:0c:7b:69:86:c5:2b:bf:30:
                    c8:d0:2a:1d:22:34:d8:56:2c:b3:30:06:ed:6e:65:
                    4a:c7:af:bd:41:92:75:4f:38:17:e2:22:f8:79:5b:
                    6e:20:0d:d5:31:bd:90:55:45:66:bd:17:c9:42:b7:
                    6a:f5:bd:2b:53:e3:03:1c:fb:2a:b6:26:ad:df:4e:
                    3a:31:cd:de:83:8a:46:06:b3:17:ef:5b:96:dc:7b:
                    c5:f6:07:25:5d:95:ec:be:79:fe:c7:78:2a:30:9a:
                    e6:09:1f:1e:9a:0b:36:44:47:f8:a5:ca:34:27:38:
                    06:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D4:82:16:31:E8:5B:88:4E:C1:36:B0:35:E4:1E:B9:91:D3:50:7F
            X509v3 Authority Key Identifier:
                keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3131342e3131332e3139362e302f32322d3234203d3e203435303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.113.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:9a:b0:f2:65:50:12:48:2f:8e:fb:64:d3:d4:e6:2e:96:0e:
         c7:a5:b4:26:5a:96:bd:83:c3:31:0f:b4:f2:00:3d:4d:db:89:
         49:ea:15:40:8a:cd:e0:f0:46:f3:f5:e7:44:67:db:6f:27:e2:
         ab:bd:85:89:d1:34:bc:cc:e5:ec:5a:f2:4f:a0:bc:16:54:47:
         29:58:1f:f5:eb:05:42:9d:a1:0c:a3:3d:03:53:27:63:7f:fd:
         35:3f:1d:bb:a2:e3:ff:a8:89:67:a2:7b:50:f2:1d:97:32:f3:
         27:b7:c3:e3:3f:d2:8e:8b:aa:28:e5:bf:b9:9f:3f:f7:28:f2:
         37:e9:fc:f7:71:7f:a0:1c:5e:c9:34:4b:68:5e:fc:f5:6b:8f:
         e9:b7:13:07:2a:c2:23:e8:6f:38:36:63:9c:ac:ae:dc:73:e5:
         c8:8d:e5:e6:91:cc:31:be:3c:6f:13:ab:c4:28:c7:df:55:15:
         d2:1a:79:1c:ac:a7:d2:54:e5:35:b7:db:a6:1a:c6:14:52:3a:
         dd:5d:76:27:d0:04:8d:dd:85:92:5a:7d:92:dd:41:87:c5:64:
         4d:45:d6:3d:16:d4:f9:b2:d5:b8:c8:81:e4:1e:40:e7:54:06:
         94:82:7d:9f:d8:29:c8:be:bc:cf:b5:f2:fb:c1:26:f3:3d:db:
         62:dc:20:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:18 2026 by rpki-client