Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e34302e302f32342d3234203d3e203137373735.roa
File:                     3132352e3231352e34302e302f32342d3234203d3e203137373735.roa (raw, json)
Hash identifier:          7nrxPThdT2QC7YYNBoVdJ6IwBazPg89BrRXOnbd0Tbg=
Subject key identifier:   EA:D5:05:CD:8C:8D:68:BC:0A:D1:10:4F:D0:BA:5C:D5:44:D8:C8:7F
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       519F24892322255E7DF79EB65A2E22FFF82899EE
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e34302e302f32342d3234203d3e203137373735.roa
Signing time:             Wed 10 Jun 2026 07:05:13 +0000
ROA not before:           Wed 10 Jun 2026 07:00:13 +0000
ROA not after:            Wed 09 Jun 2027 07:05:13 +0000
asID:                     17775
IP address blocks:        125.215.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:9f:24:89:23:22:25:5e:7d:f7:9e:b6:5a:2e:22:ff:f8:28:99:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 10 07:00:13 2026 GMT
            Not After : Jun  9 07:05:13 2027 GMT
        Subject: CN=EAD505CD8C8D68BC0AD1104FD0BA5CD544D8C87F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ba:44:08:7d:a3:17:3e:9a:c6:20:a2:46:73:
                    01:c2:55:fa:fe:b9:08:37:6e:15:ca:b7:ff:47:ff:
                    c7:2d:47:27:fa:d5:4c:17:11:66:8d:39:26:f9:db:
                    ed:32:c6:43:58:ba:6c:73:1d:e9:a6:0a:b4:af:19:
                    b4:1f:05:6d:96:32:65:59:97:11:8d:c0:e5:69:61:
                    3d:66:8d:b2:0e:8e:a3:58:61:7a:a5:a2:da:03:35:
                    64:da:a1:76:6d:3e:d4:de:9b:1a:7d:9d:bb:6d:52:
                    bf:ff:90:61:4f:02:13:ed:05:38:90:37:66:3e:e5:
                    b7:a3:30:c0:7d:dc:ec:7b:ab:34:6b:30:51:f0:7c:
                    6c:4a:80:a7:cd:69:fe:54:b5:1f:61:15:32:19:36:
                    d5:e0:fa:b7:f1:61:23:46:3a:1e:52:0c:5c:17:5f:
                    17:de:01:bf:90:52:ee:ff:c3:7b:1a:8d:9e:7e:b8:
                    04:b1:06:b7:71:23:a1:45:22:fa:fc:a7:ce:e8:f1:
                    ca:aa:6b:45:a3:e7:fc:5a:90:d4:28:4d:89:a0:e8:
                    c4:a4:09:0e:27:39:1c:ee:f1:35:b9:0d:c5:d5:12:
                    40:8d:7f:76:ca:e5:06:2c:ec:76:9b:18:5f:da:7e:
                    7e:fa:66:46:55:04:50:5f:c5:7f:7a:f8:25:0b:39:
                    8f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D5:05:CD:8C:8D:68:BC:0A:D1:10:4F:D0:BA:5C:D5:44:D8:C8:7F
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e34302e302f32342d3234203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.215.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:61:17:24:e6:d2:29:08:91:1f:00:f3:3e:42:be:09:b0:31:
         30:c7:d7:49:d6:a5:28:4c:48:72:8a:88:28:12:84:ea:d6:ed:
         bf:36:c0:07:d9:69:b1:ac:1a:e9:1d:ee:f3:86:17:6d:a1:8f:
         5d:12:af:22:73:b7:6c:cc:86:12:00:ef:95:7c:1b:60:7c:c3:
         fe:42:f7:8c:47:31:a6:c7:3c:fb:83:f1:a9:aa:be:fd:cc:97:
         62:ac:3b:60:c1:91:f0:06:88:5f:f3:f8:11:cb:68:79:bb:6a:
         c9:ba:4e:60:5a:db:14:e6:c8:3d:05:b9:cc:61:6d:69:0e:61:
         05:8a:53:42:55:de:f7:bd:fd:55:3f:b6:95:d7:f7:cb:0e:9a:
         3f:54:31:79:96:76:a7:86:78:df:8a:21:49:cb:d0:45:73:f5:
         d9:43:0c:34:a6:24:bb:b1:5e:c6:1e:8c:2e:10:7b:e0:ac:f5:
         2a:7c:c9:f3:b8:76:8a:ec:73:16:77:26:8b:8f:1f:bf:ac:e9:
         63:23:70:d5:bc:8d:83:f1:42:38:4d:0a:fc:1b:fc:81:73:79:
         1b:9d:80:92:9f:bc:5b:a3:14:29:04:97:37:28:c0:6b:8f:21:
         8a:7b:12:65:3b:0f:1d:81:e0:5a:a3:5d:97:4f:6a:84:d9:53:
         94:61:1a:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:32:58 2026 by rpki-client