Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3131352e33312e36342e302f32332d3233203d3e203538353431.roa
File:                     3131352e33312e36342e302f32332d3233203d3e203538353431.roa (raw, json)
Hash identifier:          NfWhAlv3mtM4BOqRPgYpdJP/ZWxU7MyOBpXaY5O2w8M=
Subject key identifier:   82:14:78:DF:27:C8:1F:C7:AC:A0:5F:3F:64:F2:97:8E:86:E1:E3:47
Certificate issuer:       /CN=3C076DFC935A1839CC3375F6F211010DB1E4240A
Certificate serial:       3D85C585D1A97D8CEA3A52C7F5724A88EE4850B1
Authority key identifier: 3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3131352e33312e36342e302f32332d3233203d3e203538353431.roa
Signing time:             Fri 15 May 2026 14:25:58 +0000
ROA not before:           Fri 15 May 2026 14:20:58 +0000
ROA not after:            Fri 14 May 2027 14:25:58 +0000
asID:                     58541
IP address blocks:        115.31.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 06:13:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:85:c5:85:d1:a9:7d:8c:ea:3a:52:c7:f5:72:4a:88:ee:48:50:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C076DFC935A1839CC3375F6F211010DB1E4240A
        Validity
            Not Before: May 15 14:20:58 2026 GMT
            Not After : May 14 14:25:58 2027 GMT
        Subject: CN=821478DF27C81FC7ACA05F3F64F2978E86E1E347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:26:25:17:8f:b3:98:00:72:ee:4e:39:88:d8:
                    0f:4c:28:80:1d:ca:7d:b6:37:39:ff:64:d2:0b:fe:
                    cf:6a:9b:53:52:ce:f4:f9:48:fe:2f:e4:6b:bf:bb:
                    d8:00:f8:24:48:ec:d7:34:5b:61:88:b6:0a:9f:c9:
                    91:c7:fd:42:45:96:36:bd:9a:05:05:34:16:b1:05:
                    f6:f9:fc:9f:01:9d:49:06:3c:c5:6c:d3:3b:b3:ec:
                    6f:b2:43:17:25:92:2d:46:02:2b:a9:e8:cb:c6:f5:
                    55:20:b6:01:90:e6:1f:c9:25:92:59:37:2b:e5:1a:
                    8d:d8:c3:a3:97:be:b1:eb:41:4f:ea:1e:fd:d2:ce:
                    c4:66:b1:e9:84:0c:67:57:89:bd:91:4e:3a:cd:a1:
                    f8:2d:c4:2e:6a:89:84:e8:12:b7:b9:b0:c5:30:00:
                    b9:9c:03:eb:32:72:18:8f:11:b0:f6:71:50:d6:0a:
                    bf:fb:eb:b2:f5:ec:de:2a:3c:0a:96:3b:7a:2e:0e:
                    64:73:13:56:f2:6c:b4:00:4a:7c:e5:02:41:9e:e9:
                    14:08:7e:6e:e5:e8:0e:53:1d:01:96:2f:b8:17:ba:
                    70:a7:63:e9:3e:6f:c0:ac:b2:98:77:85:22:29:f7:
                    1a:36:61:da:84:00:7a:41:ac:ec:7d:a6:0b:c2:20:
                    17:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:14:78:DF:27:C8:1F:C7:AC:A0:5F:3F:64:F2:97:8E:86:E1:E3:47
            X509v3 Authority Key Identifier:
                keyid:3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3131352e33312e36342e302f32332d3233203d3e203538353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.31.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:19:63:4f:8b:26:d4:f6:fc:19:11:3f:22:0a:d3:62:35:0b:
         35:ae:54:9c:1d:99:92:1e:db:62:a3:99:a3:62:46:f5:a1:89:
         2c:b6:bc:1c:d3:e2:82:90:5d:d3:de:06:09:0c:83:5a:9a:3f:
         90:23:f9:c2:36:08:4d:e2:cf:3c:c8:31:e5:3a:2c:31:33:8a:
         00:33:7b:c3:f9:54:c2:62:da:8c:3e:14:da:df:8f:56:c7:06:
         72:77:0f:17:0f:af:63:3f:61:33:1c:fa:df:ec:85:79:76:9d:
         2b:72:70:9d:5b:cf:ec:7c:aa:4b:55:2a:1f:55:d0:db:e2:d5:
         f6:78:c5:cf:d1:af:c2:4f:b0:49:97:1b:29:e7:92:1e:8b:32:
         85:43:fc:63:38:9e:5c:fb:b1:a0:ab:b0:2b:10:1a:4d:6b:60:
         89:24:95:10:df:e8:3f:95:e3:4c:0a:00:c3:44:28:3a:97:be:
         5d:9f:70:47:fc:80:8b:5e:14:f8:cc:95:d6:67:1a:fe:3e:45:
         83:7f:8e:c2:f0:fa:9a:5c:30:db:5a:9c:8c:05:97:f8:cb:32:
         3d:05:23:68:d8:55:ef:74:b6:ce:c1:08:8c:c2:7b:06:42:16:
         9f:81:f6:5e:a5:63:4c:b8:47:14:29:a8:db:df:68:ed:af:91:
         b5:f1:c2:7a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUPYXFhdGpfYzqOlLH9XJKiO5IULEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0MwNzZERkM5MzVBMTgzOUNDMzM3NUY2RjIxMTAxMERC
MUU0MjQwQTAeFw0yNjA1MTUxNDIwNThaFw0yNzA1MTQxNDI1NThaMDMxMTAvBgNV
BAMTKDgyMTQ3OERGMjdDODFGQzdBQ0EwNUYzRjY0RjI5NzhFODZFMUUzNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqJiUXj7OYAHLuTjmI2A9MKIAd
yn22Nzn/ZNIL/s9qm1NSzvT5SP4v5Gu/u9gA+CRI7Nc0W2GItgqfyZHH/UJFlja9
mgUFNBaxBfb5/J8BnUkGPMVs0zuz7G+yQxclki1GAiup6MvG9VUgtgGQ5h/JJZJZ
NyvlGo3Yw6OXvrHrQU/qHv3SzsRmsemEDGdXib2RTjrNofgtxC5qiYToEre5sMUw
ALmcA+sychiPEbD2cVDWCr/767L17N4qPAqWO3ouDmRzE1bybLQASnzlAkGe6RQI
fm7l6A5THQGWL7gXunCnY+k+b8Cssph3hSIp9xo2YdqEAHpBrOx9pgvCIBfTAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUghR43yfIH8esoF8/ZPKXjobh40cwHwYDVR0j
BBgwFoAUPAdt/JNaGDnMM3X28hEBDbHkJAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTA0NjQ0NDM3MDI5NjgzOS8wLzNDMDc2REZDOTM1QTE4MzlDQzMzNzVGNkYyMTEw
MTBEQjFFNDI0MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvM0MwNzZERkM5MzVBMTgzOUNDMzM3NUY2RjIxMTAxMERCMUU0MjQwQS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA1MDQ2NDQ0MzcwMjk2ODM5LzAvMzEzMTM1MmUzMzMx
MmUzNjM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzODM1MzQzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAXMfQDANBgkqhkiG9w0BAQsFAAOCAQEAfxljT4sm1Pb8GRE/IgrTYjULNa5U
nB2Zkh7bYqOZo2JG9aGJLLa8HNPigpBd094GCQyDWpo/kCP5wjYITeLPPMgx5Tos
MTOKADN7w/lUwmLajD4U2t+PVscGcncPFw+vYz9hMxz63+yFeXadK3JwnVvP7Hyq
S1UqH1XQ2+LV9njFz9Gvwk+wSZcbKeeSHosyhUP8YzieXPuxoKuwKxAaTWtgiSSV
EN/oP5XjTAoAw0QoOpe+XZ9wR/yAi14U+MyV1mca/j5Fg3+OwvD6mlww21qcjAWX
+MsyPQUjaNhV73S2zsEIjMJ7BkIWn4H2XqVjTLhHFCmo299o7a+RtfHCeg==
-----END CERTIFICATE-----
Generated at Fri May 29 23:50:51 2026 by rpki-client