Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3131342e3131332e3233312e302f32342d3234203d3e203633363134.roa
File:                     3131342e3131332e3233312e302f32342d3234203d3e203633363134.roa (raw, json)
Hash identifier:          ZRtGc8nPpYatduA3uU5SMsf2FFFvYyFWGcooZJgV+r0=
Subject key identifier:   3A:6B:90:F2:A1:FB:78:25:A7:60:B6:E3:6B:1E:F4:4C:2A:DF:49:DC
Certificate issuer:       /CN=40D86726DB14F9E5E06610928FF6C77226F14874
Certificate serial:       1763E6942F4749E118E2940B1B9D0BE4A9F87895
Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3131342e3131332e3233312e302f32342d3234203d3e203633363134.roa
Signing time:             Mon 15 Jun 2026 01:48:02 +0000
ROA not before:           Mon 15 Jun 2026 01:43:02 +0000
ROA not after:            Mon 14 Jun 2027 01:48:02 +0000
asID:                     63614
IP address blocks:        114.113.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 08:29:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:63:e6:94:2f:47:49:e1:18:e2:94:0b:1b:9d:0b:e4:a9:f8:78:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874
        Validity
            Not Before: Jun 15 01:43:02 2026 GMT
            Not After : Jun 14 01:48:02 2027 GMT
        Subject: CN=3A6B90F2A1FB7825A760B6E36B1EF44C2ADF49DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:60:7c:61:00:e1:1b:e2:7a:b3:33:ce:5c:56:
                    2a:e3:4c:85:65:85:44:be:de:c2:1c:25:1f:a8:36:
                    fb:53:00:07:5f:49:52:d3:af:17:da:c6:09:db:dc:
                    9d:97:77:34:f4:6d:05:a4:04:c9:b0:fc:f6:71:29:
                    5b:da:b3:23:f3:5c:8b:32:02:19:9f:3f:43:c4:53:
                    24:40:bd:cf:82:44:7a:ab:2f:fa:de:a1:83:25:a8:
                    d5:4a:15:1c:23:62:08:ad:39:e1:7e:43:ee:08:ba:
                    3e:eb:e7:4c:11:13:bd:08:ac:37:98:7d:98:a8:7a:
                    7f:13:79:1d:27:2c:64:04:34:c0:dc:c2:e5:f0:bc:
                    c2:0a:18:82:d5:42:12:8f:58:20:ef:82:ce:55:a7:
                    77:82:10:77:76:51:2e:db:14:23:5a:8b:39:56:bb:
                    a8:57:2e:ab:59:dd:6d:10:6a:56:8e:d8:2c:e2:da:
                    e4:1e:f0:1f:82:ce:28:51:98:fa:be:0e:4f:dc:c3:
                    75:9d:14:89:f6:e0:e5:ae:b1:ed:f7:6e:76:dc:b4:
                    4b:e4:cf:e6:d7:86:a9:7b:72:79:41:e6:21:ac:b4:
                    f5:2b:e1:e8:e6:6e:9d:63:85:b0:37:db:a9:cc:34:
                    f2:fa:d6:cf:b5:aa:09:b0:ad:66:4c:f3:27:c9:dd:
                    cf:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6B:90:F2:A1:FB:78:25:A7:60:B6:E3:6B:1E:F4:4C:2A:DF:49:DC
            X509v3 Authority Key Identifier:
                keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3131342e3131332e3233312e302f32342d3234203d3e203633363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.113.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:6c:a3:f7:00:0d:08:a7:46:19:dc:a8:af:ef:1f:cd:af:a6:
         b6:f3:b0:ed:fa:5e:3c:01:a8:0e:52:46:97:e8:92:ff:e5:c1:
         73:31:cd:92:2a:fc:30:da:ef:51:02:b3:61:7b:ab:94:3e:dc:
         f6:30:63:1e:6e:45:0b:03:7c:32:fe:38:99:9f:65:8d:c8:6f:
         81:76:ae:bc:b8:e6:e9:bf:e1:ed:9b:1d:77:1e:3a:69:b6:4e:
         ae:9c:08:24:1a:3e:9d:94:e9:b9:14:df:86:52:6a:95:76:ff:
         68:73:74:3e:27:f1:7b:e4:3b:6e:23:b5:e7:86:7b:32:41:ba:
         2d:70:16:21:6a:1e:b9:15:36:d9:0c:66:ab:ee:54:9d:56:ad:
         47:4a:5b:29:a8:2b:7d:d7:d8:75:ef:8d:36:08:33:48:8b:cc:
         4c:63:c6:8a:c8:38:55:7d:26:49:56:46:fe:92:48:cd:91:1d:
         5c:47:1e:df:70:17:d9:91:8d:ad:ed:a0:0f:40:2e:b3:5c:2a:
         82:bd:a3:a1:08:a4:f0:b6:c6:e4:89:5c:77:b9:66:8e:f0:a5:
         9b:30:ec:68:62:d6:bd:43:58:43:83:5c:8b:28:f6:27:0b:7e:
         86:5f:86:fe:1e:64:49:5e:29:36:15:47:a7:ea:90:dd:20:58:
         bd:68:fe:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:26 2026 by rpki-client