Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3235302e302f32332d3233203d3e20313430373136.roa
File:                     3131342e36362e3235302e302f32332d3233203d3e20313430373136.roa (raw, json)
Hash identifier:          9aQkJ65mTNmQ705vJwsy14JZgr/EeHURTyfS6NplLlw=
Subject key identifier:   F8:CA:56:81:89:E9:68:26:99:BB:53:A4:53:A9:71:4C:04:72:77:AB
Certificate issuer:       /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial:       2664959D672DEA62363B9C2E8A07337CA9D3715D
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3235302e302f32332d3233203d3e20313430373136.roa
Signing time:             Wed 03 Jun 2026 06:38:46 +0000
ROA not before:           Wed 03 Jun 2026 06:33:46 +0000
ROA not after:            Wed 02 Jun 2027 06:38:46 +0000
asID:                     140716
IP address blocks:        114.66.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:64:95:9d:67:2d:ea:62:36:3b:9c:2e:8a:07:33:7c:a9:d3:71:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
        Validity
            Not Before: Jun  3 06:33:46 2026 GMT
            Not After : Jun  2 06:38:46 2027 GMT
        Subject: CN=F8CA568189E9682699BB53A453A9714C047277AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c1:56:10:6b:0e:94:29:07:12:9c:89:57:b3:
                    a2:82:2c:3d:93:ad:14:77:be:f7:9f:0d:26:ab:c3:
                    9e:7f:39:ab:92:36:55:8c:15:5b:9e:2b:c2:9e:0a:
                    40:0a:a9:65:88:5d:a2:40:6a:db:69:79:2e:0c:3c:
                    c4:9c:57:44:cc:38:0e:c0:39:0a:10:64:6d:84:81:
                    73:65:99:ce:dc:12:6a:97:f3:47:f4:44:25:24:45:
                    f8:6d:26:f1:d2:51:dd:4d:2b:7d:50:5a:7c:7f:ac:
                    48:61:dd:a1:9c:c5:c4:62:f9:00:1e:aa:8a:be:93:
                    3c:f3:40:fb:01:35:45:95:d8:cc:b8:e2:ca:07:20:
                    83:42:71:c2:95:ed:3f:cf:ad:70:ff:cb:27:df:c4:
                    91:2b:31:3a:da:e2:cd:c8:8c:26:d2:4b:ac:db:d1:
                    3a:50:87:fa:5a:78:ff:f9:c0:4d:22:11:9a:ef:7d:
                    4a:62:a7:e4:eb:bb:98:2c:09:a1:e4:8c:4a:fd:4d:
                    93:1f:37:5e:90:a2:f0:3f:d1:6a:d5:b6:a0:e7:87:
                    bf:4f:67:de:fb:60:d4:b7:20:5e:d3:02:e5:cd:42:
                    bb:65:da:3d:6b:e2:61:2f:12:3d:37:b1:33:0d:8a:
                    f0:58:48:06:20:24:3f:c2:45:bc:92:f5:47:5c:86:
                    18:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CA:56:81:89:E9:68:26:99:BB:53:A4:53:A9:71:4C:04:72:77:AB
            X509v3 Authority Key Identifier:
                keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3235302e302f32332d3233203d3e20313430373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.66.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:3c:52:28:ba:6d:20:8e:9a:12:d1:18:f8:d3:49:7e:37:9b:
         a9:82:d3:61:1a:fb:87:37:81:e6:ca:49:da:90:fe:7b:f6:6f:
         1f:46:63:cd:cc:0a:c0:fd:f1:86:ef:ec:a2:d7:70:97:8a:b0:
         87:6a:c7:72:1e:83:00:54:8f:37:af:96:9f:2b:8a:90:57:f3:
         ae:ca:e8:02:0c:bf:77:e8:af:5b:e6:a6:50:9b:49:65:75:b1:
         11:ee:38:ed:cc:f5:7f:6d:f7:d1:7b:9f:a6:a7:ed:ae:4f:35:
         85:92:db:b0:09:44:04:0a:ec:3e:c6:d7:b8:3a:70:8d:d0:a8:
         29:45:b5:ff:97:eb:1f:2f:f0:5d:e5:89:ca:51:ea:a8:6e:03:
         eb:1e:bb:df:c2:dd:4c:ad:ec:46:df:d7:9c:ec:12:d7:06:40:
         b5:8d:10:89:d0:3e:fb:27:1f:c6:89:f1:e4:18:e9:34:d1:fa:
         e7:a1:5f:96:ca:5e:f0:0e:12:0a:04:f9:eb:52:14:33:ea:6e:
         ef:23:6c:f2:da:8b:83:3d:f8:34:1e:dd:9c:cb:d3:1c:c6:8a:
         0e:d3:81:64:c7:39:df:7b:34:15:f2:20:93:e6:58:20:39:0d:
         37:89:38:e3:66:59:b8:70:bf:77:95:a5:ee:bc:c1:1d:24:12:
         f5:6a:35:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:04 2026 by rpki-client