Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e33392e302f32342d3234203d3e20313430373136.roa
File:                     3132302e37322e33392e302f32342d3234203d3e20313430373136.roa (raw, json)
Hash identifier:          i9wEeb9eBtqgTZ+AhIHoommx7lMEWOBIlhNkq36aXbA=
Subject key identifier:   42:6E:F0:7E:27:E6:72:EA:A7:AF:6F:DF:42:E7:58:8F:1C:28:2C:28
Certificate issuer:       /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial:       590F7391BFAE071D487D9920F74DBB3627739106
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e33392e302f32342d3234203d3e20313430373136.roa
Signing time:             Wed 03 Jun 2026 06:56:46 +0000
ROA not before:           Wed 03 Jun 2026 06:51:46 +0000
ROA not after:            Wed 02 Jun 2027 06:56:46 +0000
asID:                     140716
IP address blocks:        120.72.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:0f:73:91:bf:ae:07:1d:48:7d:99:20:f7:4d:bb:36:27:73:91:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
        Validity
            Not Before: Jun  3 06:51:46 2026 GMT
            Not After : Jun  2 06:56:46 2027 GMT
        Subject: CN=426EF07E27E672EAA7AF6FDF42E7588F1C282C28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f6:b1:d6:7b:90:0f:4e:4d:03:e7:96:77:92:
                    66:86:1a:2a:ea:de:6a:7b:70:0d:72:0e:22:1c:3b:
                    83:1a:3e:d9:10:28:59:a5:e3:bc:51:df:09:49:1f:
                    bc:6f:0b:92:58:68:89:88:93:fc:1e:65:32:05:69:
                    a1:1d:c9:d6:3b:ca:ac:8b:c4:bf:79:db:01:4f:83:
                    95:82:ff:c3:16:b7:0b:c2:87:7b:8f:49:c4:49:19:
                    ca:96:9f:45:80:6f:76:d8:7f:0b:82:1b:2a:8a:7d:
                    5b:43:62:9f:39:13:2a:96:0b:82:28:77:5a:2e:c0:
                    78:e3:dc:44:44:2c:67:74:2b:32:b2:78:63:56:77:
                    93:ba:6f:38:3d:a8:c5:d5:0c:7e:9c:47:4a:6e:99:
                    fe:87:3c:d1:f1:24:ca:2e:66:4c:ba:82:fb:66:ea:
                    3a:00:c7:d2:c9:d0:99:60:de:bc:ad:7e:8d:df:0f:
                    56:5b:f3:d9:30:dc:54:7e:9d:24:d1:17:ed:9b:15:
                    c2:0e:60:31:69:e3:7f:24:b1:ca:bd:03:bd:02:13:
                    b6:cc:db:1d:f8:1d:97:ae:86:0e:62:2a:4b:1e:64:
                    c6:d7:67:0e:46:db:38:1f:66:5e:6b:af:b5:13:b8:
                    29:a6:c8:b7:6c:bc:64:5f:ab:40:99:ef:f0:eb:5d:
                    55:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6E:F0:7E:27:E6:72:EA:A7:AF:6F:DF:42:E7:58:8F:1C:28:2C:28
            X509v3 Authority Key Identifier:
                keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e33392e302f32342d3234203d3e20313430373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.72.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:1d:21:e4:81:48:2e:b4:6a:9a:84:30:d0:21:4a:91:10:fb:
         9a:74:45:97:c7:db:f2:3f:6e:cf:ac:22:65:ea:c5:90:60:b4:
         7f:96:4d:53:30:20:5e:d5:9c:dd:4f:6f:df:d7:66:89:2b:db:
         6f:ec:ce:7c:82:56:5c:32:30:84:d0:d8:10:e3:cc:15:9c:d3:
         f7:17:ba:f2:74:64:eb:99:f9:1e:47:2f:ac:67:f3:30:9b:b2:
         75:38:8a:7c:9e:c8:05:6c:1b:cb:cf:38:5e:61:94:79:b5:7e:
         79:92:8e:e1:d5:a4:4d:b1:05:1e:93:53:ab:36:1d:35:39:f2:
         a9:43:6e:6d:c6:56:1f:24:6b:ae:28:90:90:2e:5f:43:5e:22:
         3f:f7:8d:02:a0:0f:48:71:91:4a:24:fd:40:42:50:bb:8e:b6:
         5e:b0:25:e1:f5:33:89:8d:37:ed:11:3e:5d:c6:43:50:c8:ed:
         e0:bb:b1:2f:31:09:59:76:f5:58:33:78:18:f2:a7:25:33:03:
         21:ad:e6:0e:60:76:98:1e:60:8c:b0:b4:b6:28:5a:99:1c:dc:
         c4:13:96:17:c1:66:14:41:cb:77:e0:d0:d2:8a:b6:05:8f:9a:
         6a:bc:85:1d:d5:96:a0:9b:b9:1e:be:e5:48:d1:26:07:58:aa:
         68:f9:8f:84
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUWQ9zkb+uBx1IfZkg9027NidzkQYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYz
NUI3ODFERDAeFw0yNjA2MDMwNjUxNDZaFw0yNzA2MDIwNjU2NDZaMDMxMTAvBgNV
BAMTKDQyNkVGMDdFMjdFNjcyRUFBN0FGNkZERjQyRTc1ODhGMUMyODJDMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW9rHWe5APTk0D55Z3kmaGGirq
3mp7cA1yDiIcO4MaPtkQKFml47xR3wlJH7xvC5JYaImIk/weZTIFaaEdydY7yqyL
xL952wFPg5WC/8MWtwvCh3uPScRJGcqWn0WAb3bYfwuCGyqKfVtDYp85EyqWC4Io
d1ouwHjj3ERELGd0KzKyeGNWd5O6bzg9qMXVDH6cR0pumf6HPNHxJMouZky6gvtm
6joAx9LJ0Jlg3rytfo3fD1Zb89kw3FR+nSTRF+2bFcIOYDFp438kscq9A70CE7bM
2x34HZeuhg5iKkseZMbXZw5G2zgfZl5rr7UTuCmmyLdsvGRfq0CZ7/DrXVUlAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUQm7wfifmcuqnr2/fQudYjxwoLCgwHwYDVR0j
BBgwFoAUNyKsyLLlVAISHurgGUye1jW3gd0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NDM1Njg1NjI2NTk2NTU4NS8wLzM3MjJBQ0M4QjJFNTU0MDIxMjFFRUFFMDE5NEM5
RUQ2MzVCNzgxREQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYzNUI3ODFERC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTExNDM1Njg1NjI2NTk2NTU4NS8wLzMxMzIzMDJlMzcz
MjJlMzMzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMDM3MzEzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAHhIJzANBgkqhkiG9w0BAQsFAAOCAQEAVx0h5IFILrRqmoQw0CFKkRD7
mnRFl8fb8j9uz6wiZerFkGC0f5ZNUzAgXtWc3U9v39dmiSvbb+zOfIJWXDIwhNDY
EOPMFZzT9xe68nRk65n5HkcvrGfzMJuydTiKfJ7IBWwby884XmGUebV+eZKO4dWk
TbEFHpNTqzYdNTnyqUNubcZWHyRrriiQkC5fQ14iP/eNAqAPSHGRSiT9QEJQu462
XrAl4fUziY037RE+XcZDUMjt4LuxLzEJWXb1WDN4GPKnJTMDIa3mDmB2mB5gjLC0
tihamRzcxBOWF8FmFEHLd+DQ0oq2BY+aaryFHdWWoJu5Hr7lSNEmB1iqaPmPhA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:59 2026 by rpki-client