Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3131342e3131332e3233392e302f32342d3234203d3e203633363134.roa
File:                     3131342e3131332e3233392e302f32342d3234203d3e203633363134.roa (raw, json)
Hash identifier:          Q6qqkklKXuvcMJlp9EcVx2nUCPbs9Ldm6soTA8Lx8so=
Subject key identifier:   1B:A0:EA:6E:8D:BA:F2:12:F1:04:B7:AE:56:75:C7:56:B7:5C:67:7F
Certificate issuer:       /CN=40D86726DB14F9E5E06610928FF6C77226F14874
Certificate serial:       55687F6DBBFF03F31A96AC886DA3FCFF77E3212A
Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3131342e3131332e3233392e302f32342d3234203d3e203633363134.roa
Signing time:             Mon 15 Jun 2026 01:48:02 +0000
ROA not before:           Mon 15 Jun 2026 01:43:02 +0000
ROA not after:            Mon 14 Jun 2027 01:48:02 +0000
asID:                     63614
IP address blocks:        114.113.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 08:29:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:68:7f:6d:bb:ff:03:f3:1a:96:ac:88:6d:a3:fc:ff:77:e3:21:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874
        Validity
            Not Before: Jun 15 01:43:02 2026 GMT
            Not After : Jun 14 01:48:02 2027 GMT
        Subject: CN=1BA0EA6E8DBAF212F104B7AE5675C756B75C677F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:31:72:60:74:ff:08:e9:05:f8:81:78:45:4e:
                    20:3d:01:8a:de:29:a6:11:dc:0a:9d:01:2f:16:92:
                    bc:5f:00:53:ba:71:01:08:49:e8:d4:04:4d:a3:9f:
                    23:16:36:29:b9:3f:9f:97:eb:13:7d:22:a8:a6:7f:
                    97:24:4a:5f:59:6c:e5:16:b4:2b:e2:f9:c7:70:88:
                    e8:b0:d9:ec:4f:c5:33:ce:e4:d6:aa:4c:e4:5f:72:
                    a0:b5:b5:7c:34:56:3a:d1:f8:32:39:21:f1:10:97:
                    b8:dc:24:53:79:2f:4a:82:4f:15:d5:36:ab:cf:a3:
                    1c:e1:36:77:e0:3a:e1:d1:0b:9e:93:4c:20:b6:01:
                    b2:d4:4f:d9:5f:c9:28:2f:68:9f:88:a5:de:cb:ac:
                    64:78:b7:27:b1:a5:1d:ab:41:74:d7:e3:a0:94:e6:
                    1c:42:6d:a1:b6:47:ee:e7:3a:26:a4:36:a0:48:af:
                    2c:69:e6:e8:1b:c9:8f:84:12:e6:a4:fb:10:74:a6:
                    f4:2e:62:b8:08:e3:a3:95:64:aa:9b:34:29:a5:4b:
                    a9:e8:a9:9e:79:18:51:46:0b:53:e0:b1:81:9b:6b:
                    50:58:40:3a:7b:d1:39:eb:ea:b4:57:70:2e:4c:af:
                    8b:b7:59:2a:98:b8:df:e2:8b:93:d6:85:9c:2a:30:
                    70:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A0:EA:6E:8D:BA:F2:12:F1:04:B7:AE:56:75:C7:56:B7:5C:67:7F
            X509v3 Authority Key Identifier:
                keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3131342e3131332e3233392e302f32342d3234203d3e203633363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.113.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:0d:d3:b9:09:42:bb:4d:25:26:28:24:1e:ed:39:85:cc:9e:
         04:69:c0:25:a1:40:78:1a:d3:bb:48:7c:a5:c3:2f:b9:e4:c2:
         0b:a1:d9:ff:ff:23:21:8e:ee:89:fa:9a:32:04:ff:10:ac:b7:
         d3:89:be:6e:ba:79:65:e7:b6:42:d3:64:83:9e:e1:a3:76:4b:
         f6:5d:cc:ce:88:a4:74:b0:2f:cb:cd:1d:9e:97:ca:7b:84:a0:
         04:31:f7:6a:1c:b6:a3:5d:ba:19:21:9a:24:59:af:63:44:8e:
         85:e9:0c:e8:4e:56:93:07:c3:ee:15:6e:ce:93:23:bb:2e:17:
         76:77:09:d3:60:20:32:f2:e4:aa:4a:6c:af:c3:67:ce:12:83:
         e6:f6:ae:7c:23:fa:5d:19:43:07:f3:a4:60:56:a0:50:5f:53:
         09:ae:94:80:31:6e:3d:af:20:2a:72:32:58:1e:b8:de:b5:14:
         6a:a2:2e:22:89:7b:82:9c:5b:db:dd:d9:da:c0:fd:82:2b:c2:
         2e:b6:fa:95:52:52:32:87:09:c0:54:f7:23:08:82:7c:87:cf:
         3e:15:35:9e:39:95:a1:b0:d9:b4:95:2c:03:2d:bd:5d:a5:aa:
         2a:a3:fa:7c:c3:3b:77:87:51:30:93:f8:0b:42:91:fd:73:e4:
         ff:52:c6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:24 2026 by rpki-client