Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3131362e3139332e31372e302f32342d3332203d3e2034383038.roa
File:                     3131362e3139332e31372e302f32342d3332203d3e2034383038.roa (raw, json)
Hash identifier:          xbiGnijzKG58oO/dKst1b6jdks5u5j6qHDY1MEeLEhQ=
Subject key identifier:   61:4B:FE:CD:2E:50:21:4E:40:F0:F6:BF:79:8D:94:6F:13:CE:A4:BA
Certificate issuer:       /CN=3789349FBAB7B9C74B292EDF5849BA368344B348
Certificate serial:       313F325CEB2E83FE4A79311E4F40AD9C753EE782
Authority key identifier: 37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3131362e3139332e31372e302f32342d3332203d3e2034383038.roa
Signing time:             Wed 03 Jun 2026 08:27:57 +0000
ROA not before:           Wed 03 Jun 2026 08:22:57 +0000
ROA not after:            Wed 02 Jun 2027 08:27:57 +0000
asID:                     4808
IP address blocks:        116.193.17.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:3f:32:5c:eb:2e:83:fe:4a:79:31:1e:4f:40:ad:9c:75:3e:e7:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3789349FBAB7B9C74B292EDF5849BA368344B348
        Validity
            Not Before: Jun  3 08:22:57 2026 GMT
            Not After : Jun  2 08:27:57 2027 GMT
        Subject: CN=614BFECD2E50214E40F0F6BF798D946F13CEA4BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:99:7f:9c:e2:e7:a8:76:5b:29:2a:1c:8d:36:
                    3f:b8:ac:a6:7a:85:c7:cd:47:f2:90:a1:d3:5f:3a:
                    58:85:a9:f8:b0:7b:b4:a4:7f:bb:6c:ea:f4:cb:f6:
                    54:df:98:a0:d5:4f:19:08:89:5c:cc:cc:5b:5a:70:
                    ec:fe:0f:b5:76:34:68:fe:60:3c:da:84:2f:61:0a:
                    a9:e3:57:6c:05:34:d9:90:5a:74:8f:df:db:66:c3:
                    c4:b9:22:cc:d1:c2:5f:fd:86:1f:aa:18:39:4e:66:
                    80:4b:f1:c3:25:a2:eb:53:5b:01:85:7a:32:26:a5:
                    86:79:61:f0:67:c4:40:82:89:47:65:28:46:d8:75:
                    a8:b5:77:97:96:10:6c:1e:f7:59:0f:49:57:1b:11:
                    28:5b:65:c1:53:33:04:16:4c:b4:7b:9c:8d:53:fe:
                    d6:3a:b3:40:52:5a:d8:d4:ff:b7:80:af:1c:cc:41:
                    88:ed:bf:90:59:fc:48:de:2b:3e:bf:09:2d:e5:68:
                    17:e7:13:5d:e2:5a:58:a0:97:48:63:7d:c0:07:72:
                    b6:b2:a8:42:49:dc:a0:70:e5:1a:fc:ab:17:1b:dc:
                    1c:d2:5e:71:cc:de:16:ec:a6:0f:80:4c:c2:2b:df:
                    15:24:72:0c:ae:e7:be:ab:e1:35:5a:35:d1:1d:77:
                    b8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4B:FE:CD:2E:50:21:4E:40:F0:F6:BF:79:8D:94:6F:13:CE:A4:BA
            X509v3 Authority Key Identifier:
                keyid:37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3131362e3139332e31372e302f32342d3332203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.193.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:b6:62:6d:35:48:0d:e3:a3:df:a0:0c:11:89:e8:d7:2a:10:
         eb:02:d5:e0:0c:57:a8:1b:fe:55:d4:a9:5b:89:24:e7:c4:a9:
         14:4c:09:af:fe:ee:5d:a3:08:43:53:40:d5:c4:c6:54:c4:e8:
         23:97:0c:59:d5:4f:54:f1:f0:1d:7f:0a:db:9d:8a:2b:70:56:
         98:7c:97:39:38:fc:bc:34:59:b5:87:44:fe:af:17:72:31:c6:
         36:6a:e1:69:91:6f:40:c8:df:8d:f7:5c:b7:94:0a:c5:bc:c2:
         92:4d:b8:55:a5:6c:03:be:f5:fe:75:ab:7f:25:f7:25:20:38:
         78:4e:6a:65:be:a1:18:78:3e:a3:0d:7e:8f:76:74:5a:a4:3c:
         e7:e6:4b:56:92:af:e1:0e:9a:aa:4b:01:d6:51:e2:87:7d:fd:
         2a:01:59:2f:98:f6:96:30:fa:32:e7:c4:27:bd:2e:a4:58:46:
         ca:dc:ae:ea:8a:58:7f:43:6a:42:38:be:f4:e2:cc:a9:b3:49:
         42:10:46:6f:22:fc:be:ec:10:f2:bc:c1:55:be:dc:62:c6:17:
         6c:62:fb:18:52:98:96:f6:2e:55:fa:45:29:38:ef:80:87:05:
         14:f6:70:6a:1f:f8:3a:0f:56:e6:d2:1c:8c:06:a2:ab:a8:b3:
         3b:ae:b0:15
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUMT8yXOsug/5KeTEeT0CtnHU+54IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4
MzQ0QjM0ODAeFw0yNjA2MDMwODIyNTdaFw0yNzA2MDIwODI3NTdaMDMxMTAvBgNV
BAMTKDYxNEJGRUNEMkU1MDIxNEU0MEYwRjZCRjc5OEQ5NDZGMTNDRUE0QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3mX+c4ueodlspKhyNNj+4rKZ6
hcfNR/KQodNfOliFqfiwe7Skf7ts6vTL9lTfmKDVTxkIiVzMzFtacOz+D7V2NGj+
YDzahC9hCqnjV2wFNNmQWnSP39tmw8S5IszRwl/9hh+qGDlOZoBL8cMloutTWwGF
ejImpYZ5YfBnxECCiUdlKEbYdai1d5eWEGwe91kPSVcbEShbZcFTMwQWTLR7nI1T
/tY6s0BSWtjU/7eArxzMQYjtv5BZ/EjeKz6/CS3laBfnE13iWligl0hjfcAHcray
qEJJ3KBw5Rr8qxcb3BzSXnHM3hbspg+ATMIr3xUkcgyu576r4TVaNdEdd7gZAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUYUv+zS5QIU5A8Pa/eY2UbxPOpLowHwYDVR0j
BBgwFoAUN4k0n7q3ucdLKS7fWEm6NoNEs0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NDQ2OTIzMjIxNDU0MDMxMS8wLzM3ODkzNDlGQkFCN0I5Qzc0QjI5MkVERjU4NDlC
QTM2ODM0NEIzNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4MzQ0QjM0OC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTE0NDY5MjMyMjE0NTQwMzExLzAvMzEzMTM2MmUzMTM5
MzMyZTMxMzcyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAHTBETANBgkqhkiG9w0BAQsFAAOCAQEAfrZibTVIDeOj36AMEYno1yoQ6wLV
4AxXqBv+VdSpW4kk58SpFEwJr/7uXaMIQ1NA1cTGVMToI5cMWdVPVPHwHX8K252K
K3BWmHyXOTj8vDRZtYdE/q8XcjHGNmrhaZFvQMjfjfdct5QKxbzCkk24VaVsA771
/nWrfyX3JSA4eE5qZb6hGHg+ow1+j3Z0WqQ85+ZLVpKv4Q6aqksB1lHih339KgFZ
L5j2ljD6MufEJ70upFhGytyu6opYf0NqQji+9OLMqbNJQhBGbyL8vuwQ8rzBVb7c
YsYXbGL7GFKYlvYuVfpFKTjvgIcFFPZwah/4Og9W5tIcjAaiq6izO66wFQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:19 2026 by rpki-client