Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e35302e302f32332d3233203d3e20313430373136.roa
File:                     3132302e37322e35302e302f32332d3233203d3e20313430373136.roa (raw, json)
Hash identifier:          y1YSoeqJ4hXDfVcF2GoaEbe1l83lBva72QSUW6kMrMg=
Subject key identifier:   1C:4A:11:64:35:C3:FC:1B:88:1E:5A:F6:25:AD:E1:66:E9:7A:8C:FA
Certificate issuer:       /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial:       2C0D80BB9D53AE2A09A6E4BD51DCE9A57A47FC31
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e35302e302f32332d3233203d3e20313430373136.roa
Signing time:             Wed 03 Jun 2026 06:56:45 +0000
ROA not before:           Wed 03 Jun 2026 06:51:45 +0000
ROA not after:            Wed 02 Jun 2027 06:56:45 +0000
asID:                     140716
IP address blocks:        120.72.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:0d:80:bb:9d:53:ae:2a:09:a6:e4:bd:51:dc:e9:a5:7a:47:fc:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
        Validity
            Not Before: Jun  3 06:51:45 2026 GMT
            Not After : Jun  2 06:56:45 2027 GMT
        Subject: CN=1C4A116435C3FC1B881E5AF625ADE166E97A8CFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:94:ff:a6:4d:2e:01:8c:a2:e6:41:ba:8a:be:
                    b5:02:90:81:a5:97:0e:dc:f3:19:7b:fa:b7:a7:bc:
                    50:e4:30:dd:25:1f:40:93:aa:c9:10:b3:54:1e:0b:
                    00:16:31:39:2b:85:f8:fb:72:45:a8:df:b8:0e:a0:
                    c0:e7:b9:70:73:b5:bd:1e:85:8c:be:8f:34:98:74:
                    9e:da:f0:a4:23:37:b3:98:54:c5:99:65:58:a3:e8:
                    a1:1f:6b:54:a0:9e:09:37:8d:45:7f:f0:b1:fc:64:
                    24:6e:e3:47:c1:56:13:ca:c8:b4:64:af:78:1b:63:
                    85:bb:6a:2e:ab:72:f7:d9:a2:c6:17:0c:0e:98:1d:
                    82:89:54:65:80:97:4d:ca:28:cd:e0:54:91:89:d8:
                    f3:f1:d3:09:3d:7f:a3:ce:02:42:38:2b:03:a4:c9:
                    0c:f4:5e:54:cf:15:fd:5c:23:d4:95:ef:01:ce:af:
                    7c:b5:b7:45:8b:e5:d7:96:79:23:27:0f:6a:62:d9:
                    20:fc:65:24:5b:4a:e9:13:f1:b7:a3:a1:86:bc:1e:
                    8e:f7:5e:ca:52:f1:59:3f:b5:ec:7a:61:79:29:97:
                    21:92:e9:32:2c:64:a3:b4:c3:c9:39:5d:3e:49:8d:
                    8b:b9:37:4a:39:e6:3a:4f:60:09:fc:76:d4:11:3a:
                    cb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4A:11:64:35:C3:FC:1B:88:1E:5A:F6:25:AD:E1:66:E9:7A:8C:FA
            X509v3 Authority Key Identifier:
                keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e35302e302f32332d3233203d3e20313430373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.72.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:58:15:e5:c7:d0:54:d7:09:e3:41:0a:19:eb:fe:66:06:37:
         39:a4:da:82:2f:46:80:f4:51:65:38:f6:0e:24:82:21:5d:00:
         89:f0:31:de:ca:f7:b6:b9:0e:c0:c5:17:54:e1:b3:0d:ec:10:
         11:14:d5:80:52:b6:a0:f6:5a:d4:8f:9a:c0:09:cb:a5:e4:fc:
         b6:38:a6:86:67:96:84:fd:9a:e3:e2:24:97:0b:7c:ba:85:57:
         b4:37:7c:17:7e:71:2f:69:c2:03:01:cf:1e:6d:38:25:17:37:
         55:be:91:b1:de:7a:f0:06:ec:b3:f6:b6:6d:0b:cd:bb:f7:b0:
         42:8a:1e:d7:3c:0e:8c:6b:79:ad:a3:4b:35:d3:59:c8:c3:2a:
         7a:be:b9:3c:48:c9:3c:9e:dc:33:ac:33:56:3f:60:68:19:0d:
         ec:1b:5c:c6:e1:9e:61:7f:68:8d:5b:ef:df:65:0f:6f:97:e5:
         57:61:62:a9:b3:b5:ba:59:bf:7a:55:c0:f9:b1:2e:7d:c4:25:
         72:3d:0e:f8:26:1d:fc:d7:d2:72:13:5d:d3:6f:b0:15:b0:fe:
         63:81:db:ba:59:df:f6:01:6c:04:13:7f:19:e8:5d:ae:ed:16:
         33:e4:54:94:71:cd:49:4f:fe:6e:92:91:d5:a6:0b:bc:d2:bf:
         ed:f9:4f:5c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:02 2026 by rpki-client