Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3233382e302f32332d3233203d3e20313430373136.roa
File:                     3131342e36362e3233382e302f32332d3233203d3e20313430373136.roa (raw, json)
Hash identifier:          TeFG0LhKnfgvAPDAh5lP/YFqlTbsqM+f8h5+ukW9eQM=
Subject key identifier:   C6:C7:B4:4B:D2:0E:1B:EC:54:CE:CD:43:1D:48:B1:B6:26:49:B7:75
Certificate issuer:       /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial:       7DBA72594ECA43E6D63F59D63BD013EA71B2A94F
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3233382e302f32332d3233203d3e20313430373136.roa
Signing time:             Wed 03 Jun 2026 06:38:46 +0000
ROA not before:           Wed 03 Jun 2026 06:33:46 +0000
ROA not after:            Wed 02 Jun 2027 06:38:46 +0000
asID:                     140716
IP address blocks:        114.66.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ba:72:59:4e:ca:43:e6:d6:3f:59:d6:3b:d0:13:ea:71:b2:a9:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
        Validity
            Not Before: Jun  3 06:33:46 2026 GMT
            Not After : Jun  2 06:38:46 2027 GMT
        Subject: CN=C6C7B44BD20E1BEC54CECD431D48B1B62649B775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9a:58:a7:03:50:96:02:0e:d8:a7:af:66:6f:
                    7e:a9:88:4d:3a:aa:7d:27:75:78:6a:38:91:b8:7f:
                    b1:cb:7c:74:d7:ac:ef:6f:3a:db:e4:98:dc:ac:97:
                    31:2b:8b:e9:6c:ff:5b:59:60:7e:80:88:38:dd:1b:
                    0c:f9:bf:d6:a4:d4:0e:0c:fd:24:d6:96:03:8e:93:
                    00:3b:9f:08:13:39:b2:e5:05:8f:d6:2a:48:72:35:
                    b5:84:90:a6:ea:24:fb:60:96:88:0c:dc:f0:6f:6d:
                    3b:92:f1:b9:c8:29:be:f9:41:ae:ec:26:24:4e:84:
                    7b:20:47:8f:d5:68:79:3b:01:ce:76:87:73:71:25:
                    9d:fd:92:24:dd:fa:fd:f0:68:28:3a:13:a8:53:cd:
                    78:ae:9c:e9:72:f2:33:cc:cb:be:ad:62:27:ae:31:
                    64:6b:38:30:a0:ef:50:af:97:10:3d:ae:67:7a:38:
                    ca:ae:40:80:99:df:34:af:09:7e:f6:8e:b4:f1:51:
                    3b:b1:1b:44:06:cf:32:61:b1:2b:5d:f5:7f:fa:85:
                    a3:64:7a:d3:cf:d9:81:5b:a1:95:77:ca:ba:40:f7:
                    82:14:70:c5:9a:5c:9e:59:00:be:1d:53:a1:0d:d7:
                    ae:46:30:29:07:96:83:0f:5b:26:9d:6d:c7:6c:a1:
                    02:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C7:B4:4B:D2:0E:1B:EC:54:CE:CD:43:1D:48:B1:B6:26:49:B7:75
            X509v3 Authority Key Identifier:
                keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3233382e302f32332d3233203d3e20313430373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.66.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:89:8f:97:7d:b4:de:c8:50:fe:0c:4b:da:d5:96:68:18:47:
         66:30:6a:6d:e3:9b:54:fe:78:00:2a:3d:fe:71:c0:e3:3d:1e:
         ca:fd:b0:72:a5:de:14:01:51:17:da:a9:0b:cd:6c:32:de:1f:
         e7:6e:46:5b:3c:c8:ee:9b:cb:3a:e2:62:b5:17:da:99:0e:4d:
         1f:76:3b:5a:8f:e2:90:ba:31:e3:57:07:2e:4c:25:6b:5c:83:
         2b:32:b2:23:26:ee:1b:9e:9a:65:ff:b7:1c:22:6a:8a:e6:60:
         2d:7a:4b:68:df:39:3c:d0:c0:6f:be:7d:cd:ee:d7:dd:34:c8:
         51:b6:5d:aa:0d:bb:63:64:e4:1f:a8:cf:57:d0:78:8d:18:bd:
         2f:12:55:67:a2:4a:68:76:d3:b3:49:e8:8a:69:1b:5a:9e:73:
         ec:a1:f3:4b:68:5c:23:6c:a8:49:43:4b:23:18:a4:d2:13:33:
         11:a8:2f:a9:8c:2a:82:ce:42:e0:e3:4e:50:51:b4:d1:fe:4a:
         eb:46:1e:26:62:a9:e3:dd:6a:45:be:a4:42:c9:49:f7:7d:1f:
         3d:c0:4e:23:51:6b:9a:f9:91:8e:82:28:13:29:51:95:e6:02:
         82:c6:9f:49:a8:39:3c:48:72:92:18:2a:a5:47:1e:be:3f:22:
         9c:43:04:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:42:29 2026 by rpki-client