Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097412865305870337/0/3136302e3235302e31342e302f32332d3233203d3e203233383430.roa
File:                     3136302e3235302e31342e302f32332d3233203d3e203233383430.roa (raw, json)
Hash identifier:          fKSczNccDUKIQy/8S0odbvgqqmyXGLwFDG576iUJ3sk=
Subject key identifier:   97:39:AD:B4:1B:5A:B6:BD:D0:F0:CF:A7:C2:A2:13:FB:9F:49:B7:7D
Certificate issuer:       /CN=4E7B315B0F1461798439074524DE185E057B324F
Certificate serial:       021262DEF1946FC7518B5BEFF8089E37F16C8508
Authority key identifier: 4E:7B:31:5B:0F:14:61:79:84:39:07:45:24:DE:18:5E:05:7B:32:4F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/3136302e3235302e31342e302f32332d3233203d3e203233383430.roa
Signing time:             Fri 17 Apr 2026 06:50:19 +0000
ROA not before:           Fri 17 Apr 2026 06:45:19 +0000
ROA not after:            Fri 16 Apr 2027 06:50:19 +0000
asID:                     23840
IP address blocks:        160.250.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 10:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:12:62:de:f1:94:6f:c7:51:8b:5b:ef:f8:08:9e:37:f1:6c:85:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E7B315B0F1461798439074524DE185E057B324F
        Validity
            Not Before: Apr 17 06:45:19 2026 GMT
            Not After : Apr 16 06:50:19 2027 GMT
        Subject: CN=9739ADB41B5AB6BDD0F0CFA7C2A213FB9F49B77D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:56:c0:19:ae:06:8d:f4:16:49:d5:41:f2:a7:
                    c2:48:0f:0a:72:d6:73:69:dd:f4:2b:2d:2e:ae:01:
                    7b:d4:3b:69:6d:98:fd:ad:b8:76:08:64:7a:ab:55:
                    a4:12:15:9f:ed:e8:da:44:79:e9:de:40:57:bd:fa:
                    4a:88:bc:fe:11:2c:74:19:e0:cb:37:fd:4d:03:6a:
                    f2:d5:ad:98:ec:29:3f:7d:88:3d:33:b2:e7:e1:74:
                    2c:fa:38:42:93:24:c9:95:86:a3:cc:e8:b5:e0:f8:
                    1d:f3:7f:c0:3d:14:0f:b5:37:de:16:aa:1c:c5:80:
                    45:1c:f5:e1:4a:c2:51:90:e4:af:ab:19:6e:73:cc:
                    c6:b0:97:f9:5a:64:78:aa:f5:b9:38:47:82:79:08:
                    e5:ad:60:85:5d:4f:3b:01:29:db:34:f3:92:d3:5c:
                    33:00:a8:09:26:fc:e8:2f:31:38:1b:54:f4:30:55:
                    d3:1c:6a:15:a4:52:0f:9e:5e:ff:b9:2e:44:8e:cf:
                    94:e0:ab:59:62:ad:bc:38:a7:f5:a8:86:3b:7d:72:
                    d4:ea:e5:49:f7:22:aa:94:22:ff:57:8e:43:14:b8:
                    26:4e:54:39:95:4c:f8:e0:c7:a7:a2:7f:89:50:b5:
                    b6:30:d8:84:54:db:5c:58:fc:08:0f:be:94:bf:3b:
                    7a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:39:AD:B4:1B:5A:B6:BD:D0:F0:CF:A7:C2:A2:13:FB:9F:49:B7:7D
            X509v3 Authority Key Identifier:
                keyid:4E:7B:31:5B:0F:14:61:79:84:39:07:45:24:DE:18:5E:05:7B:32:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/3136302e3235302e31342e302f32332d3233203d3e203233383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:40:6d:d2:7c:f7:1d:09:bc:f1:7e:b8:49:73:b6:2f:6f:7f:
         cf:6f:06:3a:47:92:6a:66:78:0e:38:95:d9:d1:35:a0:fa:6a:
         91:c3:e7:e5:0b:14:f2:11:dc:04:a4:fc:8d:91:c4:07:94:f7:
         d7:d1:97:d8:a0:4d:7c:de:ff:fb:11:87:3f:9e:c7:e1:9a:80:
         d9:76:4d:62:f3:51:0a:89:63:27:a3:58:a1:24:00:d7:82:f1:
         46:81:31:74:f2:50:ab:68:c2:b4:3b:f6:6f:a2:63:ed:68:74:
         6b:19:77:cc:04:a8:8a:e0:11:98:ca:fc:bd:b4:77:73:a6:0e:
         15:c5:65:7b:9d:c1:28:f1:36:4e:a0:f4:1d:29:d7:31:f5:a8:
         e9:ee:c4:cf:ca:6f:a5:6e:4e:1d:5b:f3:7b:1d:2a:5a:ab:66:
         2c:00:9e:e4:bf:83:28:c2:7c:59:86:63:7d:c9:75:c5:dd:11:
         4d:b9:26:51:9c:24:d6:eb:d4:5e:a6:d0:87:c9:fe:81:29:bf:
         b7:f9:eb:0c:52:10:86:74:66:29:7d:64:1d:9a:7e:bc:ff:b5:
         36:ea:82:89:84:68:2f:53:b4:b9:ed:dc:6f:58:e3:86:a2:22:
         c3:e4:54:b6:07:7b:f7:8a:f1:65:76:41:d4:30:3f:68:45:39:
         d0:7a:ad:3b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 19 02:19:38 2026 by rpki-client