Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e382e302f32332d3233203d3e20313430373137.roa
File:                     3231382e39382e382e302f32332d3233203d3e20313430373137.roa (raw, json)
Hash identifier:          +/eNlx/Nc+n6qF0is48heaJfoxvcgjqohyBmel2ur1M=
Subject key identifier:   CE:25:33:04:D9:37:A0:EC:94:3D:50:B3:B5:59:DF:F6:AA:E7:33:76
Certificate issuer:       /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial:       5C426C9125A1889E8DCC669BBD0581A26FF35E75
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e382e302f32332d3233203d3e20313430373137.roa
Signing time:             Wed 03 Jun 2026 07:29:39 +0000
ROA not before:           Wed 03 Jun 2026 07:24:39 +0000
ROA not after:            Wed 02 Jun 2027 07:29:39 +0000
asID:                     140717
IP address blocks:        218.98.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:42:6c:91:25:a1:88:9e:8d:cc:66:9b:bd:05:81:a2:6f:f3:5e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
        Validity
            Not Before: Jun  3 07:24:39 2026 GMT
            Not After : Jun  2 07:29:39 2027 GMT
        Subject: CN=CE253304D937A0EC943D50B3B559DFF6AAE73376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7e:60:94:4f:6b:9f:74:3c:20:bc:32:be:f9:
                    ee:7b:f6:31:53:bc:a0:45:85:98:d1:d3:bc:f4:4f:
                    71:de:8a:10:07:b8:d7:ed:e3:e6:38:fb:25:80:8c:
                    db:a9:ff:44:20:f8:51:3d:4e:f9:b4:40:90:73:66:
                    56:1e:97:fa:0b:4d:f2:01:4d:2d:87:f4:e1:ff:2e:
                    37:95:85:3e:19:eb:fa:28:57:52:75:aa:1d:ee:22:
                    81:8d:16:a5:6e:a8:13:af:ca:1e:29:18:fb:35:47:
                    e0:f3:e7:e2:79:fb:77:b9:6b:0b:fb:e6:fd:4f:78:
                    20:bc:92:8a:cb:70:fa:f4:94:1e:4b:66:28:f8:ce:
                    26:aa:95:ff:a4:ea:eb:16:31:ce:c5:ff:07:43:1c:
                    b9:9e:7f:d2:16:8a:f4:65:38:0d:b0:83:92:8d:80:
                    15:ed:3f:af:e4:8a:77:f5:d7:ff:8b:bf:ff:36:25:
                    c7:79:d7:f7:44:ee:6d:f5:e7:fb:25:bf:e6:27:d3:
                    97:1d:4b:98:55:ee:06:b5:7a:50:34:e2:b1:b4:35:
                    a4:be:3b:c9:4b:99:f7:99:ee:cf:05:ff:92:cf:93:
                    77:22:ca:fc:36:8d:61:4e:6f:4a:13:b2:39:23:2e:
                    16:27:3c:f7:c7:6d:4f:46:b4:d1:ad:d6:2a:b3:46:
                    a9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:25:33:04:D9:37:A0:EC:94:3D:50:B3:B5:59:DF:F6:AA:E7:33:76
            X509v3 Authority Key Identifier:
                keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e382e302f32332d3233203d3e20313430373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.98.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:0a:ca:ad:a2:ed:b2:55:db:d8:44:06:49:47:17:ef:52:9d:
         a0:25:4f:08:3b:06:df:cc:9e:c9:18:ae:45:46:38:38:30:c7:
         5e:f8:18:59:c1:e0:59:53:f6:6f:10:50:5b:46:39:46:27:31:
         17:bf:f8:49:02:61:b5:6f:a5:28:4b:0f:62:3f:0a:fe:e5:e6:
         e0:1f:dc:01:17:40:11:68:01:3d:67:81:c9:3e:db:da:e3:cb:
         14:76:dc:1a:68:b4:55:0d:0d:b4:0b:b4:ff:9d:61:61:bf:7b:
         a5:be:f1:7b:86:9e:ac:07:02:ef:a3:16:b1:ab:bb:9f:29:8a:
         b8:b5:46:6e:58:17:4c:22:14:7d:c5:a3:ae:0f:70:5c:80:50:
         f1:63:1f:55:24:4f:5c:7e:cd:87:4d:f3:61:f5:5e:0a:46:a7:
         6d:07:44:c8:ce:4f:d8:f6:31:22:98:40:a3:7a:a2:11:72:85:
         20:f0:8a:eb:e0:50:83:38:dd:86:18:66:70:66:37:c7:41:50:
         43:00:a3:66:31:46:f9:18:06:2c:d4:6b:0a:7f:a9:db:38:c8:
         c9:6d:c5:46:e0:1c:6b:15:0b:46:87:7b:fc:17:b3:37:54:fa:
         ec:8f:7e:f8:18:a3:8c:07:df:42:92:fb:08:96:30:a5:b9:20:
         17:8b:98:6c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUXEJskSWhiJ6NzGabvQWBom/zXnUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYz
NUI3ODFERDAeFw0yNjA2MDMwNzI0MzlaFw0yNzA2MDIwNzI5MzlaMDMxMTAvBgNV
BAMTKENFMjUzMzA0RDkzN0EwRUM5NDNENTBCM0I1NTlERkY2QUFFNzMzNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvfmCUT2ufdDwgvDK++e579jFT
vKBFhZjR07z0T3HeihAHuNft4+Y4+yWAjNup/0Qg+FE9Tvm0QJBzZlYel/oLTfIB
TS2H9OH/LjeVhT4Z6/ooV1J1qh3uIoGNFqVuqBOvyh4pGPs1R+Dz5+J5+3e5awv7
5v1PeCC8korLcPr0lB5LZij4ziaqlf+k6usWMc7F/wdDHLmef9IWivRlOA2wg5KN
gBXtP6/kinf11/+Lv/82Jcd51/dE7m315/slv+Yn05cdS5hV7ga1elA04rG0NaS+
O8lLmfeZ7s8F/5LPk3ciyvw2jWFOb0oTsjkjLhYnPPfHbU9GtNGt1iqzRqlrAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUziUzBNk3oOyUPVCztVnf9qrnM3YwHwYDVR0j
BBgwFoAUNyKsyLLlVAISHurgGUye1jW3gd0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NDM1Njg1NjI2NTk2NTU4NS8wLzM3MjJBQ0M4QjJFNTU0MDIxMjFFRUFFMDE5NEM5
RUQ2MzVCNzgxREQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYzNUI3ODFERC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTE0MzU2ODU2MjY1OTY1NTg1LzAvMzIzMTM4MmUzOTM4
MmUzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzQzMDM3MzEzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAdpiCDANBgkqhkiG9w0BAQsFAAOCAQEAIwrKraLtslXb2EQGSUcX71KdoCVP
CDsG38yeyRiuRUY4ODDHXvgYWcHgWVP2bxBQW0Y5RicxF7/4SQJhtW+lKEsPYj8K
/uXm4B/cARdAEWgBPWeByT7b2uPLFHbcGmi0VQ0NtAu0/51hYb97pb7xe4aerAcC
76MWsau7nymKuLVGblgXTCIUfcWjrg9wXIBQ8WMfVSRPXH7Nh03zYfVeCkanbQdE
yM5P2PYxIphAo3qiEXKFIPCK6+BQgzjdhhhmcGY3x0FQQwCjZjFG+RgGLNRrCn+p
2zjIyW3FRuAcaxULRod7/BezN1T67I9++BijjAffQpL7CJYwpbkgF4uYbA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:26 2026 by rpki-client