Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e33362e302f32332d3233203d3e20313430373136.roa
File:                     3132302e37322e33362e302f32332d3233203d3e20313430373136.roa (raw, json)
Hash identifier:          ccDPUI7R/ZABrg5e6VAEyoj5C1WhkRXTKOzr1L40osM=
Subject key identifier:   F0:D0:2E:A9:12:04:0C:F4:F6:8C:9C:BD:47:75:33:9A:AB:4E:15:05
Certificate issuer:       /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial:       7AEFD13DD677E7DAE71937577E42C7B2CDBB3A3A
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e33362e302f32332d3233203d3e20313430373136.roa
Signing time:             Wed 03 Jun 2026 06:56:45 +0000
ROA not before:           Wed 03 Jun 2026 06:51:45 +0000
ROA not after:            Wed 02 Jun 2027 06:56:45 +0000
asID:                     140716
IP address blocks:        120.72.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ef:d1:3d:d6:77:e7:da:e7:19:37:57:7e:42:c7:b2:cd:bb:3a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
        Validity
            Not Before: Jun  3 06:51:45 2026 GMT
            Not After : Jun  2 06:56:45 2027 GMT
        Subject: CN=F0D02EA912040CF4F68C9CBD4775339AAB4E1505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:e0:f8:fa:55:39:62:70:27:f9:be:22:5b:
                    90:68:2a:b4:23:a3:9c:2c:8a:19:b0:9a:71:59:69:
                    d6:7b:1f:5b:7b:9a:e2:1f:aa:5f:26:77:46:15:66:
                    7e:77:34:97:03:0a:28:43:7c:a1:85:e1:7d:cb:d3:
                    14:07:08:70:2b:8f:a0:ad:47:8f:64:fd:1e:ff:92:
                    f2:e4:7c:25:4c:c5:8f:a8:7b:db:94:71:54:1a:c1:
                    b8:d9:e5:ce:67:71:0b:85:dd:0a:3c:44:2c:87:d7:
                    ba:db:73:10:be:2b:40:2f:ae:ed:68:5a:b1:50:26:
                    60:8b:c8:09:f3:54:4a:9d:a5:1c:df:b3:2b:f2:6e:
                    8a:66:e6:99:d8:42:fe:1b:39:3b:ff:e3:a0:a5:d4:
                    43:cd:69:af:78:19:56:89:10:c0:dc:0b:e1:3d:ac:
                    4e:a7:10:d9:0e:ed:27:ca:08:d5:a5:2b:6e:80:5c:
                    e8:e0:15:51:1e:0f:8b:9f:6e:95:f7:68:73:ee:08:
                    0e:23:2c:40:1d:e0:72:11:d9:74:61:d3:b9:70:70:
                    50:ad:01:47:30:2c:b2:c5:86:fc:14:3b:d5:e2:1a:
                    3b:bd:b2:2a:d2:fb:98:f7:38:c2:0b:8f:f8:e6:75:
                    63:e7:39:91:c1:39:19:8f:23:15:ac:e1:e0:d9:4e:
                    25:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D0:2E:A9:12:04:0C:F4:F6:8C:9C:BD:47:75:33:9A:AB:4E:15:05
            X509v3 Authority Key Identifier:
                keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e33362e302f32332d3233203d3e20313430373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.72.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:6f:5c:2b:03:a1:54:a6:86:06:0c:c3:26:5e:82:7f:14:a4:
         ce:96:1c:a4:32:e3:fe:9c:fc:03:b1:ac:42:67:15:a5:39:24:
         8f:fe:69:a4:0d:a4:c6:75:d5:7d:80:a1:77:0c:fb:c0:a2:aa:
         18:f2:ac:7f:b6:2b:13:64:bc:34:c9:25:06:9a:74:02:a3:55:
         e3:b0:61:da:3d:19:c7:8a:9f:4e:4b:e9:67:98:ab:e0:e5:20:
         2f:cb:91:a9:b1:ef:f8:16:c1:9f:25:7b:35:54:12:7d:f1:63:
         53:3d:32:88:15:8a:26:81:08:23:0a:51:6a:2a:e9:3f:60:7e:
         37:75:05:4c:ac:b0:2b:9e:fd:55:4b:de:33:08:6f:70:6a:7a:
         35:a2:4a:18:35:80:d0:b0:84:1a:75:96:32:3c:39:8f:fe:75:
         cf:a5:fd:ad:f6:3d:f8:ae:c9:bb:dd:f0:b3:3d:e8:4e:ce:4f:
         60:0b:ab:f8:6f:d8:4c:87:52:27:98:c0:bc:47:d7:5b:d8:90:
         1e:33:e5:b6:dc:59:5f:2c:a9:28:a7:ab:de:ed:8c:fc:0b:d0:
         05:55:a4:bf:c7:cd:3b:c0:cb:86:c2:b5:bf:ae:35:b8:ac:c0:
         d6:80:24:92:20:41:db:56:22:ca:14:e2:88:59:97:66:87:cc:
         32:7a:4d:f1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:03 2026 by rpki-client