Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114861900895617051/0/3131342e3131322e3134342e302f32312d3231203d3e203538383531.roa
File:                     3131342e3131322e3134342e302f32312d3231203d3e203538383531.roa (raw, json)
Hash identifier:          iYYYGCpOqt0aQJSSD8PSpzbRMdT6sgK2gSOfuxf7KWY=
Subject key identifier:   70:ED:E9:98:FF:90:E4:02:5E:C5:14:E7:D9:7E:33:D2:1D:6D:74:9A
Certificate issuer:       /CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2
Certificate serial:       5C3C01631086466BB052B75F2E415173F1192B9D
Authority key identifier: 2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/3131342e3131322e3134342e302f32312d3231203d3e203538383531.roa
Signing time:             Thu 04 Jun 2026 10:26:11 +0000
ROA not before:           Thu 04 Jun 2026 10:21:11 +0000
ROA not after:            Thu 03 Jun 2027 10:26:11 +0000
asID:                     58851
IP address blocks:        114.112.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 04:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:3c:01:63:10:86:46:6b:b0:52:b7:5f:2e:41:51:73:f1:19:2b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2
        Validity
            Not Before: Jun  4 10:21:11 2026 GMT
            Not After : Jun  3 10:26:11 2027 GMT
        Subject: CN=70EDE998FF90E4025EC514E7D97E33D21D6D749A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:05:73:9f:af:fa:0f:93:d9:ef:b5:cc:f6:51:
                    fe:fa:f3:6b:69:0e:92:85:36:4c:dd:9a:cf:e3:45:
                    90:fb:d8:70:45:bf:da:2e:a4:a3:c0:79:0f:ea:78:
                    ee:49:ad:13:a4:5f:43:0b:dd:1f:34:fe:77:a8:94:
                    21:f8:c9:40:8a:cf:55:a8:69:e9:45:01:9d:d9:2f:
                    af:52:0d:72:00:4c:0b:f9:f3:36:3c:11:b7:3a:0a:
                    a4:ca:54:d9:5d:0c:21:ee:5c:8a:36:fe:92:2b:c8:
                    d9:0c:2f:c0:0d:dc:02:cc:dd:90:b6:a0:4e:df:f0:
                    d1:e8:2c:db:e3:7b:ad:2d:67:a1:b6:92:53:f1:7f:
                    10:a2:fd:9a:f9:43:e9:e7:79:f4:eb:09:05:33:da:
                    66:09:7e:6b:0a:31:9b:bb:ed:87:ac:d9:b4:fe:72:
                    39:0c:e4:39:f9:8e:13:36:f9:dd:44:77:4f:44:a9:
                    94:b4:2f:73:9c:2c:7b:7e:03:3a:f2:53:fb:e0:5d:
                    2d:60:d3:b7:21:7c:76:0d:2c:39:06:52:c6:ce:51:
                    8e:c9:41:49:f7:2c:c9:0f:65:03:ae:67:53:d4:68:
                    45:d7:12:a9:64:c6:c6:5f:8e:3d:71:4a:85:e8:c4:
                    a0:5b:ac:32:5e:52:ff:60:93:57:ff:e2:f2:0a:69:
                    48:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:ED:E9:98:FF:90:E4:02:5E:C5:14:E7:D9:7E:33:D2:1D:6D:74:9A
            X509v3 Authority Key Identifier:
                keyid:2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/3131342e3131322e3134342e302f32312d3231203d3e203538383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.112.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         03:a5:e5:52:fa:9e:fe:76:7b:84:44:05:b7:a4:d1:72:ab:9b:
         84:38:a7:68:c0:91:d2:a0:7f:80:66:8e:02:b7:f8:68:d1:51:
         c5:c1:aa:71:7b:cd:9a:dc:cf:07:88:2b:b5:fe:c8:a0:6e:28:
         2d:a1:f9:8d:88:1e:ef:77:07:1c:e4:0e:ee:2e:2e:48:36:59:
         de:88:f2:7a:d9:d6:d8:9d:d0:51:65:85:75:c8:ce:00:86:c1:
         fd:6f:4b:90:18:2a:2c:c4:1a:ff:96:b1:be:76:b3:69:fd:82:
         66:0f:b2:6c:e4:13:cb:10:15:af:12:62:42:55:16:00:78:5c:
         da:9f:7a:50:83:89:91:21:fb:77:b8:16:34:f4:5a:af:f7:13:
         7c:c7:9f:13:7c:f9:79:9f:0d:68:c6:5c:a2:d2:a0:69:9c:46:
         6f:a7:ce:a2:c6:a4:bb:e2:af:94:19:9d:85:79:ce:77:29:6f:
         5e:7a:81:1c:56:9d:2b:3f:b9:92:22:b5:ef:8f:b4:9d:89:95:
         00:ed:5f:45:a6:d0:b7:74:cf:7c:e2:25:d7:e5:2a:42:f3:e1:
         fd:74:96:de:cd:07:3c:c0:d2:46:52:6e:10:64:03:39:97:18:
         aa:0d:13:2c:83:5e:7b:37:4a:92:8a:06:4e:53:13:79:df:dd:
         51:00:a0:19
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUXDwBYxCGRmuwUrdfLkFRc/EZK50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5
MDRDNUVDMjAeFw0yNjA2MDQxMDIxMTFaFw0yNzA2MDMxMDI2MTFaMDMxMTAvBgNV
BAMTKDcwRURFOTk4RkY5MEU0MDI1RUM1MTRFN0Q5N0UzM0QyMUQ2RDc0OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtBXOfr/oPk9nvtcz2Uf7682tp
DpKFNkzdms/jRZD72HBFv9oupKPAeQ/qeO5JrROkX0ML3R80/neolCH4yUCKz1Wo
aelFAZ3ZL69SDXIATAv58zY8Ebc6CqTKVNldDCHuXIo2/pIryNkML8AN3ALM3ZC2
oE7f8NHoLNvje60tZ6G2klPxfxCi/Zr5Q+nnefTrCQUz2mYJfmsKMZu77Yes2bT+
cjkM5Dn5jhM2+d1Ed09EqZS0L3OcLHt+AzryU/vgXS1g07chfHYNLDkGUsbOUY7J
QUn3LMkPZQOuZ1PUaEXXEqlkxsZfjj1xSoXoxKBbrDJeUv9gk1f/4vIKaUhnAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUcO3pmP+Q5AJexRTn2X4z0h1tdJowHwYDVR0j
BBgwFoAULeeMlF4rUzdLhsCnveWt5pBMXsIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NDg2MTkwMDg5NTYxNzA1MS8wLzJERTc4Qzk0NUUyQjUzMzc0Qjg2QzBBN0JERTVB
REU2OTA0QzVFQzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5MDRDNUVDMi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMTQ4NjE5MDA4OTU2MTcwNTEvMC8zMTMxMzQyZTMx
MzEzMjJlMzEzNDM0MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzUzODM4MzUzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEA3JwkDANBgkqhkiG9w0BAQsFAAOCAQEAA6XlUvqe/nZ7hEQFt6TR
cqubhDinaMCR0qB/gGaOArf4aNFRxcGqcXvNmtzPB4grtf7IoG4oLaH5jYge73cH
HOQO7i4uSDZZ3ojyetnW2J3QUWWFdcjOAIbB/W9LkBgqLMQa/5axvnazaf2CZg+y
bOQTyxAVrxJiQlUWAHhc2p96UIOJkSH7d7gWNPRar/cTfMefE3z5eZ8NaMZcotKg
aZxGb6fOosaku+KvlBmdhXnOdylvXnqBHFadKz+5kiK174+0nYmVAO1fRabQt3TP
fOIl1+UqQvPh/XSW3s0HPMDSRlJuEGQDOZcYqg0TLINeezdKkooGTlMTed/dUQCg
GQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:29 2026 by rpki-client