Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3131362e36362e33322e302f32302d3230203d3e2030.roa
File:                     3131362e36362e33322e302f32302d3230203d3e2030.roa (raw, json)
Hash identifier:          wNT1DQAFsp8Zs52N3h30+NLAy/kRLoWVPBBLRjJSqcQ=
Subject key identifier:   B6:4E:B1:50:69:FA:F6:A0:4E:9B:F2:D2:2C:0E:8B:25:2B:9C:60:D3
Certificate issuer:       /CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
Certificate serial:       68ACE06FAC04BC1500F907C2DBC741E3D17F7E20
Authority key identifier: AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3131362e36362e33322e302f32302d3230203d3e2030.roa
Signing time:             Wed 22 Apr 2026 04:53:59 +0000
ROA not before:           Wed 22 Apr 2026 04:48:59 +0000
ROA not after:            Wed 21 Apr 2027 04:53:59 +0000
asID:                     0
IP address blocks:        116.66.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Apr 2026 23:41:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ac:e0:6f:ac:04:bc:15:00:f9:07:c2:db:c7:41:e3:d1:7f:7e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
        Validity
            Not Before: Apr 22 04:48:59 2026 GMT
            Not After : Apr 21 04:53:59 2027 GMT
        Subject: CN=B64EB15069FAF6A04E9BF2D22C0E8B252B9C60D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bf:5f:0d:2b:86:8c:a9:a6:1f:5a:df:ca:5c:
                    a3:5e:1a:05:a4:f9:eb:bc:88:9c:af:eb:2a:29:f5:
                    52:7b:ad:f1:9a:6c:bb:8b:3d:0a:58:21:d0:78:ae:
                    1e:47:2a:b2:29:2f:1d:ff:7c:3c:a0:eb:e0:7e:ff:
                    48:d5:e8:74:1d:69:66:ec:f7:e0:c1:e4:68:3c:18:
                    53:da:22:25:a9:61:fb:f3:e4:9f:99:a5:1e:01:4e:
                    b7:b4:d0:a0:56:97:ae:b0:86:ab:75:28:21:07:df:
                    07:c9:c3:15:22:89:6e:70:be:16:b4:44:54:75:f5:
                    05:94:15:f2:b2:1d:a9:42:1f:c5:8e:8f:0b:c5:11:
                    1a:b1:14:39:b3:f7:be:91:31:00:19:f0:61:8b:51:
                    51:ec:77:d0:c4:b2:69:78:d7:72:66:5d:b6:23:73:
                    c0:f0:8e:8d:4f:08:24:0f:d7:a2:8f:26:05:21:5c:
                    14:19:ee:ff:2a:b5:41:8c:b7:72:c5:6f:cc:6e:57:
                    03:79:f9:45:99:2f:db:03:3f:aa:e3:23:d4:d6:6b:
                    69:f2:b9:35:a1:60:27:f2:c8:bc:6d:a7:99:98:5d:
                    2d:9a:41:23:ac:33:7e:35:9b:1f:c4:07:0b:58:4a:
                    76:df:14:d2:d9:62:44:d6:e1:f2:26:58:8a:19:18:
                    29:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:4E:B1:50:69:FA:F6:A0:4E:9B:F2:D2:2C:0E:8B:25:2B:9C:60:D3
            X509v3 Authority Key Identifier:
                keyid:AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3131362e36362e33322e302f32302d3230203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.66.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d1:9c:f6:1c:e3:97:a2:5a:03:ad:11:5f:b0:7b:fe:26:d9:98:
         6d:e9:2b:3a:61:a5:a5:be:3d:7b:d2:cd:a8:45:bd:89:ee:11:
         8d:bc:c4:94:fe:c9:00:1f:bc:03:8c:12:36:9d:8f:75:3a:62:
         87:92:46:82:87:7f:e7:94:de:a5:ea:3a:85:a2:7b:78:1c:89:
         8e:6e:37:d6:42:d0:25:a6:97:41:0d:12:7d:c5:c5:f3:a5:d7:
         36:2a:36:c5:8a:c3:65:d7:8d:02:12:3c:0f:b0:38:27:ce:92:
         7a:6e:52:1a:35:9b:cd:d6:1c:c9:20:db:a0:8e:16:22:1f:f7:
         ce:1d:3f:55:5c:2b:7d:63:dc:49:fc:c5:71:ef:ef:75:e0:01:
         80:5e:02:99:91:1b:0c:94:e5:4e:4b:0a:22:0a:d0:5b:c9:01:
         35:67:22:68:19:79:5e:3c:23:62:2a:d5:19:f3:4a:e0:c0:19:
         1e:76:5c:e6:74:db:66:55:d5:0e:09:b5:01:24:ca:5e:3d:a2:
         1e:77:b6:e5:93:cb:8d:55:65:76:cb:3a:cb:bd:34:c3:c2:72:
         b4:46:c9:c5:f3:5e:8d:40:09:78:99:13:ac:a6:a9:5a:48:78:
         f5:f8:40:14:d7:68:c5:6e:5d:24:b2:43:94:15:23:9d:c6:e4:
         2f:13:b2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:59:26 2026 by rpki-client