Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3233362e302f32332d3233203d3e203137373735.roa
File:                     3132322e3134342e3233362e302f32332d3233203d3e203137373735.roa (raw, json)
Hash identifier:          hS62HmlmwgxYrCx+3I+UOVKADuxfDcUaVeRWMSjNjl0=
Subject key identifier:   C6:9E:01:CD:74:6A:BA:7F:CB:46:C1:F0:AF:C9:AA:C0:C2:90:13:1C
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       23E74A506356427EAD8C5BBE797818E9529A66E6
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3233362e302f32332d3233203d3e203137373735.roa
Signing time:             Tue 02 Jun 2026 12:24:31 +0000
ROA not before:           Tue 02 Jun 2026 12:19:31 +0000
ROA not after:            Tue 01 Jun 2027 12:24:31 +0000
asID:                     17775
IP address blocks:        122.144.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e7:4a:50:63:56:42:7e:ad:8c:5b:be:79:78:18:e9:52:9a:66:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun  2 12:19:31 2026 GMT
            Not After : Jun  1 12:24:31 2027 GMT
        Subject: CN=C69E01CD746ABA7FCB46C1F0AFC9AAC0C290131C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:74:38:59:03:7a:5e:91:43:1f:e9:fb:c1:6b:
                    b4:c3:0d:39:ec:1a:d7:3c:78:57:a9:98:eb:dc:5b:
                    ac:78:8c:f1:52:65:31:76:bf:2f:ba:8b:ee:fb:cb:
                    bc:61:32:83:bc:09:c5:36:87:b1:a1:eb:15:e3:38:
                    26:07:db:4d:8e:4b:bb:5a:9e:55:29:f2:3c:fe:fb:
                    03:ed:48:11:a5:3c:3d:5b:81:63:af:78:c6:3a:ab:
                    42:b4:d2:85:d7:57:6b:30:c3:4d:47:17:d9:ac:07:
                    17:8c:a0:6c:76:be:a6:32:0c:4a:e0:18:ea:60:fb:
                    67:cf:64:bd:b8:c7:f4:ec:56:01:80:e6:84:9b:7d:
                    a8:a8:cd:55:8c:22:64:ae:97:1a:5a:fe:8e:04:3a:
                    0b:73:43:4c:0a:c7:84:8e:c5:c9:7e:7c:db:5e:57:
                    ca:f7:5b:62:24:bc:3c:ce:1b:e2:87:c6:31:7e:4d:
                    1e:54:bc:2b:2f:82:21:93:a8:16:01:4f:ac:14:88:
                    46:68:2c:ec:91:44:41:ad:a6:b1:b1:32:e4:25:7d:
                    a3:dc:2f:ec:21:35:d2:50:9c:28:ad:d9:ec:58:ff:
                    ab:e4:aa:ce:82:3c:b3:8f:c0:b1:01:1c:8e:05:b3:
                    66:f0:5b:4b:5e:55:d8:1b:b2:22:25:69:bb:6d:8c:
                    5b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9E:01:CD:74:6A:BA:7F:CB:46:C1:F0:AF:C9:AA:C0:C2:90:13:1C
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3233362e302f32332d3233203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.144.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:ec:be:11:29:43:5c:08:7b:c2:c8:4d:7f:6c:14:76:2f:01:
         da:00:de:88:a0:7d:0e:6b:13:32:de:60:be:de:27:72:21:5a:
         ec:82:01:12:d3:1f:92:aa:48:7a:91:5d:aa:72:d9:f3:86:8b:
         89:0c:6f:8c:e5:0e:e6:c3:d9:6e:d2:e0:2b:e9:2f:29:85:cc:
         43:d0:2b:f1:da:09:77:db:09:be:2a:68:22:92:76:d4:63:d3:
         d0:51:db:5d:77:08:8d:96:ef:2f:ca:9b:0a:67:be:56:a6:c0:
         44:26:e7:ad:71:2d:4b:b2:07:60:43:87:f4:2d:e1:5d:ad:00:
         f6:fe:64:e4:6c:70:bf:bb:05:cb:e1:bc:fe:d9:ca:71:d9:8d:
         11:10:b8:d6:25:48:63:cc:65:79:87:a3:5a:0e:32:34:8c:dd:
         47:f2:f9:97:c0:30:53:af:ae:8a:a4:65:a3:77:8c:75:d5:67:
         f7:7d:bd:96:38:af:6f:8f:5f:d5:f5:4c:e8:90:9d:25:08:00:
         4a:7f:28:b2:de:f4:56:e4:b1:8d:c4:11:e9:29:ab:6c:c0:9f:
         ff:a8:a6:ef:84:e5:73:06:db:ed:2f:a3:07:b0:0c:31:3c:c2:
         f5:22:75:fc:d8:0e:c9:e1:d5:4a:01:de:d5:22:8e:ff:12:a3:
         a2:21:cf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:33:06 2026 by rpki-client