Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3234382e302f32332d3233203d3e20313430373136.roa
File:                     3131342e36362e3234382e302f32332d3233203d3e20313430373136.roa (raw, json)
Hash identifier:          0zkxiP1750B6/6eYUN3GW9tF7lFfvuHh5H6GHwLu/50=
Subject key identifier:   FB:6B:35:6C:DF:74:95:70:DE:60:78:BE:F4:16:98:94:CD:B0:9E:6D
Certificate issuer:       /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial:       3D684091FCB234BC97521B84772E69BFDC86142F
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3234382e302f32332d3233203d3e20313430373136.roa
Signing time:             Wed 03 Jun 2026 06:38:46 +0000
ROA not before:           Wed 03 Jun 2026 06:33:46 +0000
ROA not after:            Wed 02 Jun 2027 06:38:46 +0000
asID:                     140716
IP address blocks:        114.66.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:68:40:91:fc:b2:34:bc:97:52:1b:84:77:2e:69:bf:dc:86:14:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
        Validity
            Not Before: Jun  3 06:33:46 2026 GMT
            Not After : Jun  2 06:38:46 2027 GMT
        Subject: CN=FB6B356CDF749570DE6078BEF4169894CDB09E6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bd:c2:04:b0:db:1a:01:31:e4:4d:03:ec:c3:
                    96:a2:db:e1:f5:b7:fe:7c:a4:c7:8c:d5:cb:5a:6a:
                    c8:f7:13:6d:71:9f:4d:bb:a8:0b:85:ba:da:33:18:
                    6c:49:58:25:c0:75:8d:1b:e2:b6:63:f2:f9:9f:10:
                    46:23:a5:42:4c:f2:eb:57:55:66:00:96:bf:5c:7f:
                    44:80:f8:1f:d1:65:eb:a9:57:f9:bb:6e:7b:78:f1:
                    1a:a8:a6:33:33:ce:f8:19:2c:ef:0e:eb:3b:05:61:
                    f7:1b:9c:20:3d:ec:53:47:52:cb:f2:f2:60:a9:2a:
                    a1:21:42:9d:74:fd:b5:34:79:64:d3:21:e6:7e:6d:
                    ea:13:87:55:22:cf:ed:48:42:a9:a4:7e:e1:cb:14:
                    10:3c:68:44:ae:ba:1f:42:69:98:03:0b:2b:62:17:
                    59:70:07:45:b3:bf:73:53:a7:b4:a7:5b:21:fa:dd:
                    2a:7b:1f:1e:70:d6:55:df:34:6a:d7:88:1a:49:39:
                    bb:2a:ee:94:87:4d:39:ed:eb:94:3a:e3:f7:5b:33:
                    b5:85:02:10:cb:a1:24:38:a0:4f:34:71:3b:66:c9:
                    0e:df:e2:a2:af:fe:e6:89:8c:61:a9:4e:7b:e3:de:
                    63:99:34:6d:ef:22:93:13:08:2e:ab:21:29:dc:f6:
                    78:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6B:35:6C:DF:74:95:70:DE:60:78:BE:F4:16:98:94:CD:B0:9E:6D
            X509v3 Authority Key Identifier:
                keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3234382e302f32332d3233203d3e20313430373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.66.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:3e:cc:49:a0:6e:2a:f2:52:b6:6d:23:99:1d:f0:08:6f:ea:
         25:a1:67:6d:bf:87:25:01:5e:fe:c0:19:09:74:93:a3:72:e0:
         de:57:00:da:35:71:19:e3:ec:ea:2d:e8:9c:d4:2d:61:77:8c:
         3b:8e:d4:e1:84:30:e2:3c:ba:bb:bf:79:68:eb:82:64:52:c7:
         d0:c2:30:49:f4:f4:32:fd:9f:d9:4a:a3:52:ab:a3:b2:29:57:
         4f:f5:29:d4:1c:df:5a:4d:7c:7b:14:74:21:e1:25:a0:b9:be:
         a8:62:72:2d:2d:aa:59:99:27:8c:5c:b1:74:ec:58:82:bb:2a:
         3e:87:19:3a:d5:60:0e:50:63:c8:ee:81:eb:6e:97:c5:08:95:
         8b:51:84:24:04:5f:59:da:65:f4:49:75:f5:9d:e2:d5:b1:97:
         f8:4c:af:a6:32:67:67:17:01:71:55:fe:a0:8c:4e:56:4f:2d:
         44:e3:ea:a5:5d:b5:62:6c:04:40:79:02:8b:4e:09:28:68:89:
         c1:76:01:8f:f9:b3:80:b7:71:83:75:91:3d:55:a2:85:61:69:
         5c:e6:50:ae:56:a0:f8:47:a3:55:6c:0c:a3:72:92:83:47:1d:
         10:80:c2:37:da:d9:9d:60:57:11:a9:ec:5b:39:f0:04:09:b6:
         83:b9:b6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:04 2026 by rpki-client