Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3233362e302f32332d3233203d3e20313430373136.roa
File:                     3131342e36362e3233362e302f32332d3233203d3e20313430373136.roa (raw, json)
Hash identifier:          fme9eJuh4JjPQ9Mh38mB2Lz2hF21MvhwYdYMMknfkt8=
Subject key identifier:   2E:10:A2:BC:A2:2A:2E:C2:5B:7D:14:C9:E8:DA:22:F5:6B:DC:59:EF
Certificate issuer:       /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial:       67F44D0E76F26209A091E26888FF738AFF5427D2
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3233362e302f32332d3233203d3e20313430373136.roa
Signing time:             Wed 03 Jun 2026 06:38:46 +0000
ROA not before:           Wed 03 Jun 2026 06:33:46 +0000
ROA not after:            Wed 02 Jun 2027 06:38:46 +0000
asID:                     140716
IP address blocks:        114.66.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f4:4d:0e:76:f2:62:09:a0:91:e2:68:88:ff:73:8a:ff:54:27:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
        Validity
            Not Before: Jun  3 06:33:46 2026 GMT
            Not After : Jun  2 06:38:46 2027 GMT
        Subject: CN=2E10A2BCA22A2EC25B7D14C9E8DA22F56BDC59EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fd:ab:6a:07:f1:ff:8f:6f:6a:44:e9:1a:d0:
                    c0:9a:d9:52:2f:dd:ac:23:0b:ef:13:77:7b:8a:73:
                    1e:0e:73:2a:a8:ce:16:93:01:ed:3b:9d:c3:e6:fc:
                    18:6a:4b:b0:ec:2f:8a:22:80:95:18:c6:da:5f:7a:
                    7f:bc:34:48:2f:fc:c5:7c:1e:c1:a3:0c:85:b6:82:
                    88:c7:0e:e8:dd:6b:f2:5e:59:06:fd:5a:81:9f:54:
                    93:74:5e:2a:92:65:47:15:d0:31:6d:aa:e9:20:b0:
                    13:0e:37:8f:9e:9a:46:97:c9:01:59:89:68:05:33:
                    90:69:b9:e8:4c:cf:a0:6b:4c:79:7c:6b:d0:97:43:
                    c8:4e:0d:57:d3:81:81:4a:4c:78:25:df:e4:5f:46:
                    64:de:d0:cd:3f:09:dc:cc:d3:71:eb:51:4a:f3:cb:
                    f2:40:6f:d6:20:e3:66:4b:b3:14:3a:14:54:f5:c7:
                    47:79:80:93:b4:c2:13:75:20:ac:85:cc:bb:18:c8:
                    1a:c3:8c:5a:8f:0e:c0:b0:86:6c:1e:a7:3a:22:a8:
                    ad:4d:78:19:74:17:64:15:c7:1a:06:37:49:c9:80:
                    1b:85:32:96:0e:a0:d7:18:17:c5:d5:1c:47:74:2e:
                    e0:f3:37:ba:74:a2:7f:00:b3:21:a5:50:c9:6a:65:
                    01:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:10:A2:BC:A2:2A:2E:C2:5B:7D:14:C9:E8:DA:22:F5:6B:DC:59:EF
            X509v3 Authority Key Identifier:
                keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3233362e302f32332d3233203d3e20313430373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.66.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:6d:d4:9a:a4:80:8d:88:87:11:57:55:c8:b7:2b:5f:2d:a4:
         7b:32:dc:a1:cd:26:b6:90:80:37:26:ce:08:a8:75:ac:43:6c:
         17:13:3f:44:03:df:17:c2:57:5b:d8:00:75:f3:da:99:f5:b8:
         d9:34:e6:d1:25:d5:f0:44:56:e0:51:ea:51:c1:6d:10:d3:fe:
         29:5b:b7:25:e1:04:9f:98:84:cb:9d:e4:14:80:60:e5:21:b1:
         bb:76:de:d1:6b:4c:38:8b:62:32:20:c8:64:43:aa:4b:ec:6b:
         4b:43:32:98:42:39:0a:e8:e7:99:d6:e1:14:db:25:d9:36:9e:
         1c:2e:a5:1e:fe:cf:01:e2:51:ad:05:d4:5d:2f:57:5b:a3:58:
         a3:d7:d3:2d:be:6f:74:d0:13:45:da:95:74:c7:47:ca:b4:57:
         cf:03:de:1a:39:1d:0d:15:17:4c:1d:b6:b4:ca:e0:b3:7a:60:
         13:16:34:71:93:a1:a0:64:45:e8:18:55:92:16:0e:d9:73:a2:
         7c:b0:0b:03:29:48:83:0f:58:03:d2:38:fb:4c:8c:a2:b5:c4:
         4b:9a:10:20:c4:f0:7c:8b:fa:dc:ab:b3:1c:a7:80:34:0e:96:
         e0:9c:ba:18:57:cd:81:f9:7b:04:7e:50:2a:97:56:ed:dd:90:
         69:fe:c6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:42:28 2026 by rpki-client