Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e33362e302f32332d3233203d3e203137373735.roa
File:                     3132352e3231352e33362e302f32332d3233203d3e203137373735.roa (raw, json)
Hash identifier:          V1G2gJL4KYvPQHiXj/b1JUvjNYKKoYcFsL6bBrHZ5jA=
Subject key identifier:   60:0E:53:14:F8:1A:6D:3A:E8:72:03:9B:E4:D6:57:53:FF:2F:5D:87
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       177B151FF34DD12E782A0D756E64589B8133F809
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e33362e302f32332d3233203d3e203137373735.roa
Signing time:             Wed 10 Jun 2026 07:04:56 +0000
ROA not before:           Wed 10 Jun 2026 06:59:56 +0000
ROA not after:            Wed 09 Jun 2027 07:04:56 +0000
asID:                     17775
IP address blocks:        125.215.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:7b:15:1f:f3:4d:d1:2e:78:2a:0d:75:6e:64:58:9b:81:33:f8:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 10 06:59:56 2026 GMT
            Not After : Jun  9 07:04:56 2027 GMT
        Subject: CN=600E5314F81A6D3AE872039BE4D65753FF2F5D87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bf:c1:0c:fe:95:b0:d0:dc:24:e6:81:19:d9:
                    c4:1f:e2:6a:67:f2:3f:5b:27:4f:bf:71:53:cb:74:
                    32:0f:2d:83:fb:bd:1d:2e:0e:14:96:68:a4:b9:5a:
                    4d:62:ad:9d:cf:de:83:3b:45:60:ba:aa:5a:5f:d8:
                    32:e8:47:a6:85:6e:83:5d:d6:e9:00:73:ac:9e:c8:
                    4f:32:58:4a:ea:93:ce:c7:cc:c9:73:5d:95:f3:d5:
                    a0:33:19:50:f5:9a:ca:ff:30:c1:66:22:41:e9:10:
                    9d:ed:b0:ee:be:02:90:fd:58:a0:a2:2d:6d:e1:e8:
                    d5:de:fb:c4:7b:71:c2:a1:94:25:76:7f:03:ab:1a:
                    29:61:06:20:3b:f6:b2:3a:3e:50:95:46:55:da:bc:
                    c1:0e:d1:eb:f0:9d:ab:4f:0b:5d:fe:b4:b4:0a:ca:
                    86:13:07:d3:cf:11:da:ca:cd:85:32:50:61:52:18:
                    f7:c1:0e:8a:00:8d:21:1f:1b:06:36:93:b5:b6:0d:
                    28:b3:79:5b:82:66:0e:e9:b1:d3:b8:eb:c8:ef:37:
                    93:bf:c4:61:07:90:07:3c:02:6e:ee:7a:d0:e4:7c:
                    d1:47:81:5c:96:84:82:3b:40:6d:82:6b:76:80:b7:
                    21:02:21:c3:47:fa:28:15:85:62:69:23:dd:db:1b:
                    d1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0E:53:14:F8:1A:6D:3A:E8:72:03:9B:E4:D6:57:53:FF:2F:5D:87
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e33362e302f32332d3233203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.215.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:58:e5:0e:64:f9:23:e2:ce:23:07:2a:b0:3d:63:50:c6:f0:
         5d:b2:d0:e6:d0:af:88:54:7b:9a:26:79:21:f8:76:96:93:0b:
         62:5a:cb:e4:c1:7e:a9:90:cf:f4:f4:e9:6d:e3:61:aa:85:7a:
         c0:72:7c:fd:c5:d9:bd:f1:1e:00:47:0f:36:da:00:90:5b:99:
         79:68:0e:4f:aa:94:5c:18:30:cb:16:22:5a:a3:3f:ef:7c:4d:
         91:44:d2:cd:ae:3b:e3:ab:73:93:d0:f3:9d:58:3e:f3:f6:26:
         c8:b8:77:f9:dd:40:ef:28:e1:15:4c:99:2d:d0:a5:e9:62:47:
         d3:07:d7:02:2e:a6:fa:93:52:27:16:c6:eb:f3:ca:4f:77:91:
         e4:56:61:09:bd:3b:6c:88:76:cf:33:27:9e:55:39:fb:97:c6:
         31:a0:85:72:fe:04:c8:3c:f9:41:4d:e8:51:3b:86:65:5e:d4:
         f5:08:ed:88:0a:c0:70:ae:7c:19:43:6c:da:7c:e8:e1:47:83:
         fc:05:05:39:ad:c1:9c:8a:af:b9:6c:6d:ef:c5:0c:15:2d:c5:
         73:f1:4e:d6:28:d1:9c:6e:da:67:88:9f:31:91:b0:12:e9:cb:
         ae:ad:ca:e9:dd:36:24:a5:90:70:8c:8e:c2:28:3b:fd:0f:71:
         ca:77:f7:cc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:52:01 2026 by rpki-client