Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3131362e3139332e31382e302f32342d3332203d3e2034383038.roa
File:                     3131362e3139332e31382e302f32342d3332203d3e2034383038.roa (raw, json)
Hash identifier:          x26iTmQooXd+PnkcvWD3ibaxk9/BG4j5lamK8yOEqCo=
Subject key identifier:   04:01:DE:D4:88:2F:F0:70:43:90:E9:C1:5A:7A:6E:98:14:D6:D5:53
Certificate issuer:       /CN=3789349FBAB7B9C74B292EDF5849BA368344B348
Certificate serial:       66F912D94820C7236328DFAE884D1A5082A48159
Authority key identifier: 37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3131362e3139332e31382e302f32342d3332203d3e2034383038.roa
Signing time:             Wed 03 Jun 2026 08:27:57 +0000
ROA not before:           Wed 03 Jun 2026 08:22:57 +0000
ROA not after:            Wed 02 Jun 2027 08:27:57 +0000
asID:                     4808
IP address blocks:        116.193.18.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f9:12:d9:48:20:c7:23:63:28:df:ae:88:4d:1a:50:82:a4:81:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3789349FBAB7B9C74B292EDF5849BA368344B348
        Validity
            Not Before: Jun  3 08:22:57 2026 GMT
            Not After : Jun  2 08:27:57 2027 GMT
        Subject: CN=0401DED4882FF0704390E9C15A7A6E9814D6D553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:78:43:b2:68:1a:02:8a:b3:0c:87:59:76:84:
                    bd:a8:26:8c:2f:ec:fc:21:dd:da:f4:11:8b:39:7c:
                    5d:fe:d4:16:b0:4a:86:8c:ee:4d:66:70:11:c1:0c:
                    56:3f:b7:de:d0:f9:c5:2d:3a:33:c9:5e:ab:12:a8:
                    63:29:2d:f4:4e:2e:44:e9:f4:c2:7a:59:94:1e:1d:
                    3f:e1:52:fb:f6:57:01:6a:ba:4c:ea:5d:ab:4a:24:
                    c2:57:9d:40:b9:c9:05:8a:e9:28:42:06:95:26:31:
                    7c:ba:2a:2d:20:25:ff:4a:cf:71:af:24:4a:61:88:
                    be:01:7f:90:1b:de:14:b3:19:b6:af:2d:d0:d6:4c:
                    67:2d:25:c7:0b:ee:2e:6e:a3:fd:e1:c3:ae:e3:d6:
                    42:1f:6f:6f:1f:99:b2:1d:de:33:3e:2a:29:2e:76:
                    f8:ed:0d:7b:3a:2b:34:f5:3a:35:a7:7d:8d:2a:93:
                    2d:f5:2c:da:e5:80:45:eb:8b:c0:f8:03:15:51:3f:
                    f4:5b:fa:c9:c1:c6:4c:7b:46:77:d3:1c:6e:58:87:
                    6f:53:92:1c:5e:e6:a8:4b:ef:4f:5c:28:f4:cd:6d:
                    27:d9:7b:e5:6f:46:8f:f7:d0:b5:bd:cb:dc:a2:15:
                    27:e8:7c:35:71:fa:d8:d7:12:87:9a:0c:f7:83:89:
                    50:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:01:DE:D4:88:2F:F0:70:43:90:E9:C1:5A:7A:6E:98:14:D6:D5:53
            X509v3 Authority Key Identifier:
                keyid:37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3131362e3139332e31382e302f32342d3332203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.193.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:2e:66:fd:8c:2c:dc:20:b0:cf:62:6d:71:b3:3c:01:24:68:
         6c:01:0c:80:b2:8a:65:78:ff:43:ee:17:db:86:23:31:7b:b4:
         ef:f0:1e:37:04:05:1e:79:72:a6:e8:17:09:b0:a6:69:ab:11:
         a7:cd:b0:56:a8:5c:3f:2b:aa:61:db:d7:7d:34:27:d3:28:e7:
         3e:9b:5b:cd:6a:5a:f6:56:dc:8b:bd:c1:1e:07:b6:8e:fb:dc:
         2c:3a:fc:9d:b1:37:13:4b:86:ea:95:7f:2e:ca:d7:cc:ca:ea:
         2a:cf:4f:c6:d3:f0:15:e8:ca:14:92:30:c9:77:48:eb:fb:f1:
         f4:a6:14:1c:7b:68:2b:82:2d:64:5e:fb:04:d7:9f:83:06:ae:
         5d:ce:57:45:17:54:76:fb:10:57:32:6c:00:14:3a:46:5e:d5:
         6d:e6:d3:e2:19:9d:d9:64:07:27:0e:be:86:3c:30:69:42:b6:
         f8:d9:c3:52:8f:3e:b0:9c:d8:da:5d:15:4f:2e:19:8e:0f:2a:
         9d:96:79:2b:ee:ae:a0:dc:00:cc:a1:c2:66:f6:7f:73:8c:21:
         9b:e0:c4:ef:31:cd:c9:c4:00:9d:4f:da:2c:93:94:5f:0b:35:
         f5:06:58:cf:b6:f6:7f:c6:26:2a:b3:0b:23:f8:4f:38:4b:60:
         85:57:08:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:20 2026 by rpki-client