Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e33372e302f32342d3234203d3e20313430373136.roa
File:                     3231382e39382e33372e302f32342d3234203d3e20313430373136.roa (raw, json)
Hash identifier:          5oXteQY9JG0rVcD16sTyxY393qsWaGZ/V81UI5cfsG4=
Subject key identifier:   50:52:8C:36:C3:CE:36:48:DF:FB:ED:48:E1:3A:E3:13:6C:DC:AE:B5
Certificate issuer:       /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial:       687A8D0AFCB756B98797E3C6E232C72B877C661F
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e33372e302f32342d3234203d3e20313430373136.roa
Signing time:             Wed 03 Jun 2026 07:30:33 +0000
ROA not before:           Wed 03 Jun 2026 07:25:33 +0000
ROA not after:            Wed 02 Jun 2027 07:30:33 +0000
asID:                     140716
IP address blocks:        218.98.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:7a:8d:0a:fc:b7:56:b9:87:97:e3:c6:e2:32:c7:2b:87:7c:66:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
        Validity
            Not Before: Jun  3 07:25:33 2026 GMT
            Not After : Jun  2 07:30:33 2027 GMT
        Subject: CN=50528C36C3CE3648DFFBED48E13AE3136CDCAEB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:db:53:2b:5e:9c:c3:d4:59:a6:76:cb:c5:d0:
                    e0:f7:78:7a:57:c8:9e:0c:98:c8:25:37:78:e2:87:
                    05:71:d5:63:ab:8c:36:4d:0a:24:2a:f5:15:38:3d:
                    d7:7a:e6:15:84:37:47:87:9c:47:9f:c1:26:28:72:
                    13:26:3b:be:54:a2:90:e8:c5:cb:83:75:39:b9:b9:
                    3e:e5:97:40:a2:ec:3e:c1:6f:5b:63:aa:a3:dd:08:
                    3a:f0:ea:bf:24:e9:2d:5a:31:5a:00:36:f6:04:c2:
                    6d:20:e2:f3:06:78:c1:7a:ea:8d:2a:5f:14:85:20:
                    5d:12:d6:ba:c2:8e:43:bb:97:39:ae:f6:75:4a:4d:
                    aa:18:c8:32:b6:fe:d3:c1:71:31:8b:5c:d7:9f:08:
                    ab:74:c5:d6:e8:25:e4:70:54:8f:bd:33:bd:b4:ee:
                    74:4e:e4:c4:8b:40:ea:f4:7e:d5:14:8f:6b:ac:4c:
                    d6:b2:dc:b9:16:d2:18:21:98:64:b5:06:c0:18:93:
                    50:66:66:c6:c4:5e:98:d9:b6:fc:50:1d:56:83:77:
                    55:24:4f:e3:5a:30:76:57:45:2a:67:e5:bd:29:18:
                    86:49:b9:7d:72:bf:62:08:14:cd:60:69:8b:fd:4e:
                    93:62:cb:5f:ef:a7:ee:d5:0f:14:f5:c6:44:db:f7:
                    04:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:52:8C:36:C3:CE:36:48:DF:FB:ED:48:E1:3A:E3:13:6C:DC:AE:B5
            X509v3 Authority Key Identifier:
                keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e33372e302f32342d3234203d3e20313430373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.98.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:e5:95:6c:40:e5:61:03:aa:c9:d3:91:6a:55:e8:df:cd:dc:
         fb:ac:69:99:60:63:06:3a:c3:2f:ab:3c:75:06:f8:d4:8b:88:
         2c:6b:c6:2d:17:b5:2f:83:16:2e:5d:19:c6:5e:89:d9:9b:19:
         eb:03:54:3d:8e:e5:ce:e7:bd:04:84:84:b6:f7:fc:a0:21:67:
         64:f3:94:eb:ef:bf:0c:45:67:c8:56:51:7b:19:a4:59:90:43:
         52:cb:e4:8a:b5:4e:9c:65:9e:cd:51:4e:1e:fb:cd:5f:11:22:
         d8:58:c4:cd:8b:07:5d:d1:73:6f:0f:6e:66:68:e1:4d:7f:b8:
         60:4a:b2:d2:a0:c5:5c:5e:6a:33:1e:ed:70:6b:48:b5:f2:c7:
         46:00:d3:10:05:2e:4a:41:4b:1b:69:48:29:43:19:f9:61:59:
         17:c6:5a:c4:35:03:a3:cb:e0:5b:f0:d1:7d:ee:74:22:9c:21:
         54:1b:c5:ca:54:2b:bc:01:e0:4a:91:b4:7f:21:fb:a8:2d:0b:
         40:d9:d4:ef:ce:11:71:af:b7:da:a7:8f:74:93:18:c9:b1:7d:
         d0:fb:e1:96:1d:55:00:d4:47:e6:95:ea:04:47:8e:fd:c9:29:
         43:c4:14:39:99:04:be:48:59:ed:37:e1:05:88:7d:c1:ed:ec:
         67:61:59:be
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:24 2026 by rpki-client