Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3131342e3131332e3233372e302f32342d3234203d3e203633363134.roa
File:                     3131342e3131332e3233372e302f32342d3234203d3e203633363134.roa (raw, json)
Hash identifier:          bHaeh1TNLPqsa8hf7xh3CWK61xB14SjHDOWsDA2fB0g=
Subject key identifier:   B0:DA:BF:53:D9:38:E3:55:6B:92:DF:86:A7:08:CC:9B:F0:54:3E:94
Certificate issuer:       /CN=40D86726DB14F9E5E06610928FF6C77226F14874
Certificate serial:       49000478A4163B86EB016FA44923041EB1D5B2CE
Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3131342e3131332e3233372e302f32342d3234203d3e203633363134.roa
Signing time:             Mon 15 Jun 2026 01:48:02 +0000
ROA not before:           Mon 15 Jun 2026 01:43:02 +0000
ROA not after:            Mon 14 Jun 2027 01:48:02 +0000
asID:                     63614
IP address blocks:        114.113.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 08:29:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:00:04:78:a4:16:3b:86:eb:01:6f:a4:49:23:04:1e:b1:d5:b2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874
        Validity
            Not Before: Jun 15 01:43:02 2026 GMT
            Not After : Jun 14 01:48:02 2027 GMT
        Subject: CN=B0DABF53D938E3556B92DF86A708CC9BF0543E94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:42:26:5b:bc:e6:2b:d8:0a:73:2c:27:1a:4f:
                    b6:0d:37:d4:e8:5a:f0:29:f2:54:8f:02:76:2e:02:
                    4b:cb:f2:1f:fe:7c:c6:6c:d8:c2:6d:0f:b1:92:d9:
                    29:f2:5c:9d:e2:64:39:5f:c2:0c:7e:b5:c3:ac:a8:
                    ad:eb:d9:25:1e:6b:bb:70:9d:86:8b:58:e5:b9:a2:
                    15:3f:4a:a2:d3:54:a2:29:70:d4:77:d9:ca:8b:3f:
                    66:c1:31:35:a0:95:40:74:15:22:55:06:5b:29:2f:
                    4a:dd:23:48:64:7e:97:dd:a7:09:5e:3d:77:ef:ba:
                    42:32:36:8a:71:73:f0:f1:cf:13:39:c5:b8:9d:04:
                    aa:b0:9e:2f:82:95:1f:10:80:ca:2d:8a:e3:8e:54:
                    97:52:bc:74:36:28:b3:29:f8:ec:c0:cc:51:e0:f3:
                    07:6c:5e:45:0e:bb:12:44:e3:d6:e4:30:7e:dc:78:
                    c5:a7:02:91:94:2a:2f:1f:67:8b:3d:76:a4:29:89:
                    6c:62:b5:6b:75:e8:81:b0:6c:eb:69:5f:c9:77:24:
                    de:6d:2e:68:40:cf:3a:8e:9b:be:f1:01:0b:40:01:
                    db:5e:c7:49:60:04:dd:64:38:ab:ac:a4:ba:3a:4b:
                    b7:82:68:1b:3e:b3:83:37:5c:f9:31:64:e5:e7:b2:
                    61:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DA:BF:53:D9:38:E3:55:6B:92:DF:86:A7:08:CC:9B:F0:54:3E:94
            X509v3 Authority Key Identifier:
                keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3131342e3131332e3233372e302f32342d3234203d3e203633363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.113.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:2f:38:b1:59:d2:92:09:8b:9c:5d:b3:72:19:80:2a:4c:7e:
         de:c2:11:41:58:05:2a:a7:67:76:39:e0:5a:72:be:df:d6:94:
         c9:ae:88:00:5c:d9:00:be:76:dd:ab:15:20:cf:38:e8:bc:6a:
         2d:e6:c0:a1:87:6a:1b:5f:f7:c9:24:72:6b:95:a2:95:c0:d2:
         cd:be:86:8a:ab:1c:dc:e7:27:4a:82:47:ee:24:13:a7:70:2d:
         8d:93:94:c5:2e:be:23:bc:1f:3c:54:b5:33:d0:50:77:66:ce:
         2d:8a:37:f1:ec:d2:08:28:a0:e5:d3:34:6e:3b:5b:d2:e4:37:
         fc:80:aa:56:81:f7:b5:93:2b:bd:73:98:de:e9:c9:b8:01:f7:
         90:b0:9a:66:f3:c5:f8:69:41:d5:1c:b5:2a:eb:03:3d:a2:93:
         f3:42:3d:a5:83:d3:cc:84:38:78:da:7d:6c:b4:b9:b5:ee:75:
         41:3a:38:df:10:40:ff:68:22:b0:a3:69:9d:81:30:61:cd:1f:
         5b:fe:88:7b:74:5d:3a:a4:22:69:e8:d7:dc:bf:8c:ea:f5:f8:
         a2:6f:70:03:6d:b8:c9:22:46:12:10:9b:24:fb:59:d2:6c:5c:
         75:b6:d5:7c:f0:1b:a1:ec:33:63:b2:64:ec:11:a8:a5:69:14:
         7a:27:b1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:24 2026 by rpki-client