Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3134362e3139362e37302e302f32332d3233203d3e20313430373136.roa
File:                     3134362e3139362e37302e302f32332d3233203d3e20313430373136.roa (raw, json)
Hash identifier:          u/ZVzIJZtvaeCAqqsSrGuYXwcX8DqJMYtlPdeaJ93Gs=
Subject key identifier:   06:6B:A3:3C:91:B5:04:57:E3:D1:89:50:16:4E:A9:AB:5C:C4:90:DD
Certificate issuer:       /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial:       307FE4F9EC7642EF6479346D6467E2724AE6EE5B
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3134362e3139362e37302e302f32332d3233203d3e20313430373136.roa
Signing time:             Wed 03 Jun 2026 07:25:43 +0000
ROA not before:           Wed 03 Jun 2026 07:20:43 +0000
ROA not after:            Wed 02 Jun 2027 07:25:43 +0000
asID:                     140716
IP address blocks:        146.196.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:7f:e4:f9:ec:76:42:ef:64:79:34:6d:64:67:e2:72:4a:e6:ee:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
        Validity
            Not Before: Jun  3 07:20:43 2026 GMT
            Not After : Jun  2 07:25:43 2027 GMT
        Subject: CN=066BA33C91B50457E3D18950164EA9AB5CC490DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a8:c1:d2:6c:0f:66:d9:e2:26:f5:f8:cc:45:
                    b4:ec:72:81:25:de:ea:69:9a:ab:65:14:3b:6b:36:
                    f9:59:4e:d9:2e:9a:b7:35:0e:b7:61:ea:7e:2c:e8:
                    a7:73:a3:5f:01:e9:91:c7:a2:fd:76:c8:a7:44:96:
                    63:f2:40:8a:7b:b1:67:cf:86:c0:55:de:49:12:8d:
                    b9:58:6b:be:12:5b:be:01:05:e3:13:db:4b:a7:8c:
                    d5:01:39:44:a3:c7:0f:91:60:d4:20:b9:4f:22:75:
                    b2:06:7e:53:fa:20:40:d3:c3:58:4b:44:42:d8:e7:
                    51:64:a2:e4:5c:44:dc:34:87:98:7b:6c:b5:e3:7c:
                    6d:a5:56:95:6a:df:6f:ad:41:6e:be:04:6f:08:f4:
                    a6:33:b1:9f:a0:51:59:1a:1d:9e:69:d5:e0:1d:2b:
                    1f:9e:85:03:de:34:7d:af:1e:26:44:a8:4e:59:1a:
                    ea:69:30:ed:43:40:94:22:19:7a:64:e7:c4:38:4e:
                    e1:72:db:68:97:6b:20:d7:8f:b6:7b:38:11:08:c2:
                    4a:18:92:77:07:37:01:72:7e:48:d3:60:20:48:83:
                    b7:9c:8a:8e:12:d6:89:c5:a1:8a:bb:00:5c:04:66:
                    72:da:34:29:1d:45:6c:94:90:33:79:2c:ed:cd:d4:
                    23:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6B:A3:3C:91:B5:04:57:E3:D1:89:50:16:4E:A9:AB:5C:C4:90:DD
            X509v3 Authority Key Identifier:
                keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3134362e3139362e37302e302f32332d3233203d3e20313430373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.196.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:cf:0e:6f:82:3b:a8:cb:c4:32:96:88:5b:16:fd:a6:75:18:
         a6:ad:a0:a1:58:d0:bc:d2:92:77:b6:c3:bc:cf:52:62:61:25:
         f8:b7:f4:b2:a3:17:48:14:4d:1f:83:d6:e7:f4:ac:f3:29:07:
         30:79:6b:fe:72:0e:ec:7e:9d:bd:2a:57:af:55:2f:f4:13:86:
         cc:6b:94:9c:47:06:74:ee:1d:f3:e1:9f:18:f3:70:1f:ca:6a:
         d6:68:e4:b8:8e:1c:7c:61:71:72:ce:cd:93:ab:4e:4e:1f:94:
         43:02:d5:41:19:74:38:e4:52:fc:cc:65:70:de:72:3e:74:4e:
         3d:cf:c5:82:dd:e5:ee:df:fa:4c:1e:10:b8:03:5c:cb:e7:94:
         57:bf:f1:cb:e8:80:a3:75:87:c7:d6:51:4c:af:00:ae:d1:ed:
         0a:34:1f:a0:cd:e2:df:a4:b4:d4:6d:5c:0d:ac:0d:a0:94:68:
         d8:51:c7:1a:51:a3:e6:be:22:bb:3a:15:c6:da:3c:19:f1:95:
         de:80:16:37:53:65:f7:8e:46:0b:59:21:76:61:4c:44:64:76:
         5e:de:00:d1:f2:b1:8f:b9:df:55:1f:78:4b:a1:db:5f:3d:56:
         b9:51:be:2a:45:df:f9:99:a7:e6:60:13:b9:92:83:ef:1f:6b:
         2c:09:88:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:25 2026 by rpki-client