Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e3131322e3230302e302f32312d3231203d3e2034383337.roa
File:                     3131342e3131322e3230302e302f32312d3231203d3e2034383337.roa (raw, json)
Hash identifier:          K4xf4cf2+ZznS4RIQlAiviMNsg3gjxddQubF3x2EYIQ=
Subject key identifier:   1F:3D:D5:1E:89:BF:1A:F0:2C:0A:6B:5C:E6:67:0F:A8:88:C5:E3:76
Certificate issuer:       /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial:       0C1FD46B2A7212370BDC00F832E0AB91E8B362E0
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e3131322e3230302e302f32312d3231203d3e2034383337.roa
Signing time:             Thu 04 Jun 2026 07:20:29 +0000
ROA not before:           Thu 04 Jun 2026 07:15:29 +0000
ROA not after:            Thu 03 Jun 2027 07:20:29 +0000
asID:                     4837
IP address blocks:        114.112.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:1f:d4:6b:2a:72:12:37:0b:dc:00:f8:32:e0:ab:91:e8:b3:62:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
        Validity
            Not Before: Jun  4 07:15:29 2026 GMT
            Not After : Jun  3 07:20:29 2027 GMT
        Subject: CN=1F3DD51E89BF1AF02C0A6B5CE6670FA888C5E376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5f:51:4a:b1:38:fe:56:d8:da:08:32:88:73:
                    4b:19:74:5c:65:59:68:14:f5:ee:08:b7:8d:f3:37:
                    7e:ef:d6:e4:91:24:f7:a2:8a:a3:8a:27:c4:a8:63:
                    3c:81:45:8f:94:eb:b7:62:3a:54:65:3b:6c:e1:77:
                    e1:2d:a2:90:42:f1:26:0e:2b:50:97:6b:12:32:ca:
                    b0:3e:2a:0c:21:ae:4b:b7:58:c3:72:1b:38:6f:72:
                    92:de:f3:aa:c9:59:c8:d9:78:67:3d:22:11:3a:33:
                    83:7d:b8:73:14:8b:55:89:3d:b5:7e:51:65:84:db:
                    9c:20:c7:b7:31:dd:18:d3:f5:25:e1:fd:04:c0:ff:
                    ef:6b:10:e8:40:57:23:01:9b:c5:c1:2e:c3:be:a3:
                    82:5e:94:46:90:7c:10:e9:64:a6:32:e6:51:4a:b7:
                    c2:ad:e4:14:1c:5a:02:c1:2e:22:82:60:3a:ff:a4:
                    d8:b8:6a:84:1c:55:db:a9:23:6b:ff:5c:6d:64:27:
                    64:cb:53:c2:58:2f:64:13:4d:f0:ed:00:3e:fe:23:
                    e0:74:ef:cd:48:a7:bb:ca:28:3a:e2:e7:49:f7:00:
                    48:05:ce:62:4a:6f:92:03:be:3f:dd:0e:a9:37:fe:
                    c6:00:12:e5:1f:3c:39:96:43:f2:31:68:2a:ec:8c:
                    7c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3D:D5:1E:89:BF:1A:F0:2C:0A:6B:5C:E6:67:0F:A8:88:C5:E3:76
            X509v3 Authority Key Identifier:
                keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e3131322e3230302e302f32312d3231203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.112.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:ff:51:5c:62:5f:d8:2f:76:28:0f:a4:01:14:28:b7:b2:98:
         91:86:21:70:b5:b4:72:1d:cd:dc:c5:2d:0a:97:57:c9:5c:dc:
         60:9f:1f:1f:a9:ce:0e:0d:7f:c2:85:ea:56:37:dd:f3:65:b1:
         0c:1c:86:bd:68:b2:9c:ba:fd:3a:28:36:98:76:fc:59:fb:26:
         5a:97:89:fd:41:5d:87:8e:bc:a6:27:4d:ee:2e:48:81:ac:9e:
         64:3c:00:ae:b6:84:c8:8c:50:cc:87:29:ee:13:6c:d3:f2:58:
         89:6c:6f:12:8e:34:af:b6:66:d4:14:cd:b6:f3:0e:24:15:02:
         5a:72:c7:19:1b:a6:e8:92:fa:b7:69:48:43:00:6d:d6:2e:c4:
         f2:33:5e:95:f8:f8:71:48:36:12:21:52:74:96:3f:38:98:75:
         71:b5:ab:92:0d:0c:1a:8d:5a:16:cc:90:e9:a0:e5:8a:4e:75:
         42:d5:35:42:05:47:c0:a6:ea:e1:aa:ba:5b:b1:0c:e2:1f:80:
         0a:56:7c:d4:b6:cf:ce:f5:fa:39:26:6d:0f:d4:07:b3:81:7b:
         d5:1f:c0:64:86:d0:34:64:fa:de:24:0c:8c:1a:a3:6f:70:bc:
         91:81:a6:15:79:5b:a8:07:d0:09:00:18:48:9a:df:22:ba:a8:
         d5:83:11:7d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:42:40 2026 by rpki-client