Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3131362e3139332e31362e302f32342d3332203d3e2034383038.roa
File:                     3131362e3139332e31362e302f32342d3332203d3e2034383038.roa (raw, json)
Hash identifier:          Qkvxv68HtdU7mIpnoZn4rl5W/LvvEvY8bVnmMzO+lp8=
Subject key identifier:   05:4E:D4:CE:4D:8A:29:D5:B0:8B:CC:FC:3B:FE:2D:41:71:75:86:1C
Certificate issuer:       /CN=3789349FBAB7B9C74B292EDF5849BA368344B348
Certificate serial:       41E5FC30D57CCF967636C79E42EEF2FA4B617C9F
Authority key identifier: 37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3131362e3139332e31362e302f32342d3332203d3e2034383038.roa
Signing time:             Wed 03 Jun 2026 08:27:57 +0000
ROA not before:           Wed 03 Jun 2026 08:22:57 +0000
ROA not after:            Wed 02 Jun 2027 08:27:57 +0000
asID:                     4808
IP address blocks:        116.193.16.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e5:fc:30:d5:7c:cf:96:76:36:c7:9e:42:ee:f2:fa:4b:61:7c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3789349FBAB7B9C74B292EDF5849BA368344B348
        Validity
            Not Before: Jun  3 08:22:57 2026 GMT
            Not After : Jun  2 08:27:57 2027 GMT
        Subject: CN=054ED4CE4D8A29D5B08BCCFC3BFE2D417175861C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a3:b5:81:4f:fe:e2:a4:8b:55:8d:c7:10:e9:
                    c0:eb:6a:74:6d:6c:2d:29:ef:d8:b2:72:9f:79:ae:
                    e9:26:76:d5:f1:97:43:c2:82:10:f7:f6:0d:0e:6c:
                    3b:ca:94:92:85:c8:ec:80:50:48:48:a0:69:0f:b6:
                    e7:ef:f1:e5:80:d7:a6:05:db:50:79:3d:a1:ce:95:
                    e6:74:b1:c4:6c:96:6c:2a:15:75:3b:37:c5:33:17:
                    77:43:05:ac:b4:f5:be:95:0d:ff:67:39:31:06:f0:
                    f9:af:bb:10:61:9e:32:5a:9b:e5:69:b2:0b:ea:8b:
                    f2:92:c6:ef:19:9e:86:3d:5d:44:f7:8b:c5:c8:b2:
                    07:3e:7f:8d:cb:f3:93:a3:6f:1a:45:bd:73:fe:99:
                    15:e4:28:f3:5b:75:66:4d:1f:1e:eb:8f:0d:91:ad:
                    82:eb:19:86:d0:c0:a9:f7:3a:ca:9e:94:aa:b2:47:
                    9b:8c:02:be:b8:b8:9b:c6:e6:e8:a0:37:5d:18:39:
                    7d:64:ec:37:4e:2d:41:53:9f:f0:83:75:b7:d2:08:
                    18:f0:8b:6a:10:8b:56:b9:92:09:f9:5f:d6:30:c9:
                    e6:65:43:09:fc:1b:94:5f:f9:b7:d9:54:62:ad:f2:
                    51:cb:08:87:19:cc:87:fb:7a:4c:4c:8a:cb:e5:80:
                    8f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:4E:D4:CE:4D:8A:29:D5:B0:8B:CC:FC:3B:FE:2D:41:71:75:86:1C
            X509v3 Authority Key Identifier:
                keyid:37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3131362e3139332e31362e302f32342d3332203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.193.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:de:b6:02:9d:62:93:34:d9:4c:7b:e9:c5:5b:0a:2e:2a:46:
         62:ea:5f:cc:52:9c:b8:6a:2a:b5:f9:d0:b7:f4:9f:35:a5:45:
         c5:18:54:ff:bf:49:22:78:60:a2:35:8a:48:4c:1d:19:87:ad:
         84:6e:c6:5d:d4:36:b5:5b:45:9f:e6:04:72:68:9f:bd:db:4f:
         ea:e2:aa:03:a8:b0:e0:ab:9f:e8:d9:72:53:12:7d:cf:82:be:
         d2:a6:cb:82:a3:fc:55:d4:b6:1c:e5:21:41:30:ff:5e:ba:f6:
         0a:94:eb:be:51:d4:1a:e2:40:31:d9:0e:e2:6b:30:88:04:8f:
         14:a7:34:c3:8c:7a:62:c4:9e:db:ce:4c:1d:29:74:a6:8b:9a:
         a8:b9:b1:10:39:1f:8c:af:36:31:dd:b3:9e:c0:b8:aa:15:17:
         b6:7b:e5:ce:37:b3:f7:89:51:bf:56:05:94:7c:6a:5a:83:80:
         90:b3:00:c5:a7:62:8f:f9:7a:00:07:ce:75:4d:14:56:8b:6a:
         e5:e1:31:07:7d:59:e6:26:d2:0c:72:ca:8e:8f:63:07:9e:9d:
         4f:1a:e4:5d:bc:ce:40:10:13:60:62:2d:31:81:79:70:68:e7:
         a8:38:50:2d:e6:e6:99:b0:dd:a5:43:ba:7b:2c:83:3b:63:15:
         c3:27:12:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:19 2026 by rpki-client