Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e35342e302f32332d3233203d3e20313430373137.roa
File:                     3132302e37322e35342e302f32332d3233203d3e20313430373137.roa (raw, json)
Hash identifier:          iXziDa6hNrWdmbvJuJnEKxK1Yt+ielcJFZP+WElrWKM=
Subject key identifier:   9A:63:72:1C:84:33:F2:D8:04:0A:6B:2C:8A:12:99:84:26:C4:36:4C
Certificate issuer:       /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial:       65AD2C2D69FFA4D370D0F73657185D9CCB431D88
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e35342e302f32332d3233203d3e20313430373137.roa
Signing time:             Wed 03 Jun 2026 06:56:46 +0000
ROA not before:           Wed 03 Jun 2026 06:51:46 +0000
ROA not after:            Wed 02 Jun 2027 06:56:46 +0000
asID:                     140717
IP address blocks:        120.72.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ad:2c:2d:69:ff:a4:d3:70:d0:f7:36:57:18:5d:9c:cb:43:1d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
        Validity
            Not Before: Jun  3 06:51:46 2026 GMT
            Not After : Jun  2 06:56:46 2027 GMT
        Subject: CN=9A63721C8433F2D8040A6B2C8A12998426C4364C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8b:bd:86:fb:15:d0:bc:e2:1f:e7:e1:4f:d8:
                    78:10:61:85:e6:90:9c:b0:cc:a4:26:3e:18:a5:1c:
                    a7:57:96:77:74:c2:92:5c:37:8e:3f:30:c5:c6:66:
                    bc:10:b3:5e:c8:0c:47:09:52:b4:3e:93:5c:68:a7:
                    51:fc:c6:10:4c:18:ad:b9:ba:aa:fe:e3:23:f7:4b:
                    9c:bd:49:3c:39:0d:bf:81:e8:ae:4e:6d:39:6e:42:
                    7d:4a:1b:1d:ef:e1:68:cf:77:7c:f7:09:e4:22:7d:
                    63:f1:ce:41:e8:87:c3:0d:bb:c5:18:85:1a:79:37:
                    89:48:ab:8d:97:4d:3c:41:21:97:60:f1:cc:b6:fa:
                    b1:e6:eb:51:12:db:79:3f:26:cd:50:72:f8:87:80:
                    89:2b:cc:4f:d5:fa:19:76:6b:1b:4c:45:aa:25:68:
                    f5:b3:35:0c:dc:ed:10:8c:68:c8:a1:40:75:22:1c:
                    a2:c7:34:8b:b0:f7:c2:1d:9e:dc:d9:19:7a:2c:12:
                    13:ec:4c:36:3a:93:52:4b:d3:0c:d0:68:74:01:d0:
                    89:2f:91:ae:1a:55:6a:b2:fb:75:bb:cd:d3:84:de:
                    fe:a8:da:57:bb:13:05:60:8b:b5:60:96:5e:5b:bb:
                    f8:9e:84:d8:4a:4f:ab:fb:58:fb:a0:97:63:3f:32:
                    64:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:63:72:1C:84:33:F2:D8:04:0A:6B:2C:8A:12:99:84:26:C4:36:4C
            X509v3 Authority Key Identifier:
                keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e35342e302f32332d3233203d3e20313430373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.72.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:33:89:4e:f0:aa:7a:44:f7:d1:8d:f2:17:46:17:3b:66:a7:
         44:d3:fe:10:ac:ab:18:68:b1:16:88:53:e1:05:13:28:dd:95:
         b4:44:14:2f:02:78:21:f4:22:20:e1:4a:9f:e9:dd:02:53:3c:
         44:c4:00:b9:fe:13:51:d1:89:c2:14:4c:8f:5c:8c:91:6e:10:
         04:b7:60:f0:0f:62:18:ec:9f:ba:1a:80:a1:db:9f:ca:5f:31:
         ff:21:67:b3:0c:7c:a4:f0:7d:96:61:05:0a:6c:d2:30:08:a0:
         d5:97:fd:2b:54:fe:eb:6c:cb:8a:8a:e4:8b:08:0f:ae:b4:5e:
         2a:ab:f9:58:8e:02:e4:c7:c2:b4:0a:65:c4:aa:38:25:3e:d6:
         76:9f:6b:27:af:1f:3d:9a:af:3a:eb:4c:b2:a2:29:6a:53:b2:
         6f:8b:26:4e:13:d3:7d:30:f6:d1:1a:32:8d:ad:bc:3c:0c:9f:
         64:8c:7b:03:1a:01:b2:55:8e:e5:ae:c2:f5:0a:50:94:81:fc:
         be:52:16:bd:34:5b:a4:7a:75:08:be:c6:73:8c:9a:ef:8b:50:
         d8:99:34:2e:89:33:86:4a:bf:69:9a:99:f8:b2:01:a8:c7:a4:
         41:54:5b:d4:3f:7e:28:1b:40:47:21:83:5a:ea:39:57:fd:bd:
         a2:76:45:87
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUZa0sLWn/pNNw0Pc2VxhdnMtDHYgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYz
NUI3ODFERDAeFw0yNjA2MDMwNjUxNDZaFw0yNzA2MDIwNjU2NDZaMDMxMTAvBgNV
BAMTKDlBNjM3MjFDODQzM0YyRDgwNDBBNkIyQzhBMTI5OTg0MjZDNDM2NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDki72G+xXQvOIf5+FP2HgQYYXm
kJywzKQmPhilHKdXlnd0wpJcN44/MMXGZrwQs17IDEcJUrQ+k1xop1H8xhBMGK25
uqr+4yP3S5y9STw5Db+B6K5ObTluQn1KGx3v4WjPd3z3CeQifWPxzkHoh8MNu8UY
hRp5N4lIq42XTTxBIZdg8cy2+rHm61ES23k/Js1QcviHgIkrzE/V+hl2axtMRaol
aPWzNQzc7RCMaMihQHUiHKLHNIuw98IdntzZGXosEhPsTDY6k1JL0wzQaHQB0Ikv
ka4aVWqy+3W7zdOE3v6o2le7EwVgi7Vgll5bu/iehNhKT6v7WPugl2M/MmQ7AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUmmNyHIQz8tgECmssihKZhCbENkwwHwYDVR0j
BBgwFoAUNyKsyLLlVAISHurgGUye1jW3gd0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NDM1Njg1NjI2NTk2NTU4NS8wLzM3MjJBQ0M4QjJFNTU0MDIxMjFFRUFFMDE5NEM5
RUQ2MzVCNzgxREQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYzNUI3ODFERC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTExNDM1Njg1NjI2NTk2NTU4NS8wLzMxMzIzMDJlMzcz
MjJlMzUzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzQzMDM3MzEzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAXhINjANBgkqhkiG9w0BAQsFAAOCAQEASTOJTvCqekT30Y3yF0YXO2an
RNP+EKyrGGixFohT4QUTKN2VtEQULwJ4IfQiIOFKn+ndAlM8RMQAuf4TUdGJwhRM
j1yMkW4QBLdg8A9iGOyfuhqAodufyl8x/yFnswx8pPB9lmEFCmzSMAig1Zf9K1T+
62zLiorkiwgPrrReKqv5WI4C5MfCtAplxKo4JT7Wdp9rJ68fPZqvOutMsqIpalOy
b4smThPTfTD20Royja28PAyfZIx7AxoBslWO5a7C9QpQlIH8vlIWvTRbpHp1CL7G
c4ya74tQ2Jk0Lokzhkq/aZqZ+LIBqMekQVRb1D9+KBtARyGDWuo5V/29onZFhw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:02 2026 by rpki-client