Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3234302e302f32322d3232203d3e20313430373136.roa
File:                     3131342e36362e3234302e302f32322d3232203d3e20313430373136.roa (raw, json)
Hash identifier:          bw+EnACZZYWMgTaIMwL0tX7tCOMyECZC8lmOBP7GohE=
Subject key identifier:   C1:47:B9:BE:28:51:C7:25:5A:71:7C:22:40:BB:CC:93:0E:88:65:C6
Certificate issuer:       /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial:       1C5A574BF9140B2D073AFCAE5E1A45D4265C29EC
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3234302e302f32322d3232203d3e20313430373136.roa
Signing time:             Wed 03 Jun 2026 06:38:46 +0000
ROA not before:           Wed 03 Jun 2026 06:33:46 +0000
ROA not after:            Wed 02 Jun 2027 06:38:46 +0000
asID:                     140716
IP address blocks:        114.66.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:5a:57:4b:f9:14:0b:2d:07:3a:fc:ae:5e:1a:45:d4:26:5c:29:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
        Validity
            Not Before: Jun  3 06:33:46 2026 GMT
            Not After : Jun  2 06:38:46 2027 GMT
        Subject: CN=C147B9BE2851C7255A717C2240BBCC930E8865C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:35:20:2f:b5:0e:43:37:b5:94:3e:95:49:52:
                    43:ae:1e:46:80:47:30:c9:b8:81:47:47:81:f0:1a:
                    fe:9c:5b:0c:1c:a0:ec:3e:d2:fe:4f:38:b2:83:39:
                    f6:3e:b6:16:cb:0a:4b:c3:cf:89:dc:30:13:7d:54:
                    31:5a:59:92:93:dd:ee:4a:dc:ef:6a:ca:6e:16:ff:
                    1c:21:44:40:8e:42:0d:52:7e:26:e7:ca:8a:05:5a:
                    69:5d:79:e2:d5:a4:cf:a1:64:ea:65:64:74:31:04:
                    f1:11:8a:c3:04:39:3a:e2:ad:50:11:8e:06:f5:b0:
                    a0:06:1e:ed:ae:ac:98:2f:41:b8:e0:d6:ec:21:13:
                    63:b2:f4:64:fd:77:c0:f3:00:5c:53:88:55:c3:0c:
                    8b:d5:94:1a:eb:48:66:a9:d0:39:8e:6c:10:5e:6b:
                    d0:b6:00:ba:1f:58:ca:ba:4d:42:24:6c:ad:fe:de:
                    a3:c9:c5:59:43:a2:c7:a0:cb:30:dd:d4:ac:f2:f7:
                    0f:be:a5:d7:28:6b:a7:bb:6e:71:5f:ff:c7:69:5e:
                    aa:34:43:65:dd:b7:02:60:27:4c:be:78:3b:cc:96:
                    e5:6e:25:74:f7:64:26:8d:19:fd:77:3d:bd:34:df:
                    75:18:3a:a4:42:e9:20:35:1d:33:b7:97:95:e1:4a:
                    ef:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:47:B9:BE:28:51:C7:25:5A:71:7C:22:40:BB:CC:93:0E:88:65:C6
            X509v3 Authority Key Identifier:
                keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3234302e302f32322d3232203d3e20313430373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.66.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:21:2c:e5:2e:e9:16:67:e4:00:a0:84:da:6a:1f:cb:8f:53:
         79:6a:2d:8a:b3:27:49:93:79:a2:3a:77:8a:23:6f:29:81:f7:
         94:92:3d:1b:c3:cd:ea:50:c4:53:f3:3f:e2:3e:93:ce:3d:94:
         9a:ae:69:d8:50:57:7d:c2:ea:72:4f:65:3c:ef:e9:d9:9b:fb:
         b0:a8:3d:39:ec:1a:66:e6:9d:5f:70:64:1b:30:a9:a6:61:71:
         85:a6:4f:02:00:07:50:d0:26:20:67:f5:3c:d7:ff:37:ec:a8:
         2a:74:26:01:a0:60:bc:29:55:a4:25:33:17:5b:27:db:5e:d1:
         98:02:ff:dc:5e:7f:52:96:a7:1b:4b:c8:1a:6b:6f:ce:3e:be:
         f2:f8:31:f9:7b:46:80:70:9b:ba:23:75:97:7d:1e:d5:a9:cd:
         b6:2a:a8:7a:bf:ca:f2:a5:e7:d4:07:8d:4f:97:da:a0:3b:b3:
         9c:20:4c:7e:e5:86:5d:19:b3:cd:54:cd:12:34:ec:9c:85:3e:
         77:18:37:1e:92:54:c6:b5:79:9a:c4:93:d4:b9:3e:61:a0:b5:
         06:d7:36:e6:3f:19:5b:3b:09:6b:1a:ff:17:05:d1:d7:6f:3e:
         c9:ee:7e:12:0f:50:7f:49:ab:14:56:a0:32:d8:c6:9a:46:5a:
         8b:59:87:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:03 2026 by rpki-client