Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114949758058758169/0/3130332e31342e3133322e302f32342d3234203d3e20313430373236.roa
File:                     3130332e31342e3133322e302f32342d3234203d3e20313430373236.roa (raw, json)
Hash identifier:          Ph1dlsU1gsZp5Js2bzwU2W0EFG5DOnt4Suxc6EJUP4U=
Subject key identifier:   5F:8D:09:7F:D1:08:46:8E:EC:3D:09:2D:23:6C:AB:84:9E:F5:22:BA
Certificate issuer:       /CN=B65F792F84FA1E900DA4D2DA49DCC537F063FD6D
Certificate serial:       04F109A2D1EAB42D58B9A9BDAF4DE5BE91D33494
Authority key identifier: B6:5F:79:2F:84:FA:1E:90:0D:A4:D2:DA:49:DC:C5:37:F0:63:FD:6D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/3130332e31342e3133322e302f32342d3234203d3e20313430373236.roa
Signing time:             Thu 18 Jun 2026 16:08:14 +0000
ROA not before:           Thu 18 Jun 2026 16:03:14 +0000
ROA not after:            Thu 17 Jun 2027 16:08:14 +0000
asID:                     140726
IP address blocks:        103.14.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 Jul 2026 07:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f1:09:a2:d1:ea:b4:2d:58:b9:a9:bd:af:4d:e5:be:91:d3:34:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B65F792F84FA1E900DA4D2DA49DCC537F063FD6D
        Validity
            Not Before: Jun 18 16:03:14 2026 GMT
            Not After : Jun 17 16:08:14 2027 GMT
        Subject: CN=5F8D097FD108468EEC3D092D236CAB849EF522BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:15:84:83:fa:de:e9:ea:76:5a:15:5d:76:ee:
                    36:53:8d:57:f9:1c:bd:4d:e3:51:f7:e4:23:70:2a:
                    a9:4b:20:95:30:7a:a3:4e:56:9c:4a:be:27:9c:bd:
                    50:a5:d8:49:0f:b3:cd:5c:4b:54:00:e8:9f:d6:db:
                    fc:aa:49:ce:8d:a3:94:79:1a:51:2a:65:d3:bf:05:
                    50:64:bd:31:43:61:24:6b:58:9d:8b:6e:a1:b7:7c:
                    8f:8c:20:f2:2f:b4:dc:ed:19:c9:6e:49:8c:75:88:
                    26:e9:03:8a:e5:ad:69:34:e1:5d:1d:d4:d8:a8:fc:
                    41:1a:ff:90:ff:94:d3:52:81:c2:72:f2:13:2b:a3:
                    48:09:6d:c3:ed:e2:45:c0:43:51:d1:fe:36:8c:bd:
                    e2:bf:f5:9b:78:08:1a:fe:79:3b:1f:90:01:a4:11:
                    ad:eb:af:4f:77:90:3a:cb:30:4b:86:e8:8a:a5:db:
                    5a:69:d9:70:b4:0e:0d:fb:de:0b:2a:55:e1:62:0c:
                    7e:e6:3b:e1:ce:21:fa:ad:2f:b1:e9:87:bd:be:6e:
                    ac:b0:bd:d8:60:c5:7e:a3:94:0b:73:12:3b:ac:ba:
                    b3:0e:de:62:d4:fd:a9:4f:f8:ef:6f:05:be:b9:90:
                    32:41:d3:cb:9b:91:8b:40:ce:86:ba:b3:f0:85:0b:
                    2b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8D:09:7F:D1:08:46:8E:EC:3D:09:2D:23:6C:AB:84:9E:F5:22:BA
            X509v3 Authority Key Identifier:
                keyid:B6:5F:79:2F:84:FA:1E:90:0D:A4:D2:DA:49:DC:C5:37:F0:63:FD:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/3130332e31342e3133322e302f32342d3234203d3e20313430373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:00:40:30:71:47:37:a6:d3:a1:ee:43:f7:b5:c5:44:d7:97:
         0b:73:ad:35:a4:b7:cf:b1:0a:59:78:1a:4c:a0:3b:b4:5a:b0:
         4e:88:c2:1c:ea:dc:9d:eb:58:6d:2e:cc:8e:28:66:d9:b7:55:
         b0:74:77:c1:14:b5:a7:9f:0d:67:83:f2:10:3f:e5:07:39:e6:
         ef:af:97:26:7c:74:f1:f0:cd:a5:14:1d:c8:28:90:22:90:83:
         72:ec:d9:bf:5f:cc:07:ab:28:24:80:b8:f7:79:eb:18:b0:91:
         0e:c3:98:79:b5:c3:39:19:10:cd:d8:f5:1c:57:0f:4a:ee:da:
         bb:d5:60:d0:b6:03:1a:39:11:3e:1b:7d:ba:3e:e9:4e:4f:bf:
         d2:63:98:2b:1b:98:1b:9d:10:eb:20:47:d5:2b:18:33:d6:28:
         ac:68:92:e5:2e:03:27:9f:a7:0e:c0:6d:95:1a:99:3e:ea:5e:
         81:e1:7f:04:98:2e:7a:ad:65:c0:90:35:94:0f:7c:84:1b:9d:
         66:6c:86:65:fd:9a:2e:36:43:04:cd:ee:c4:fd:68:74:45:e3:
         c5:39:a8:e8:09:ed:b2:c2:0e:53:8d:79:64:18:e3:59:e3:49:
         39:0a:18:aa:07:c8:14:e3:ae:45:39:c3:e2:20:65:51:e6:2e:
         76:1c:8d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 21:52:48 2026 by rpki-client