Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e34342e302f32342d3234203d3e203137373735.roa
File:                     3132352e3231352e34342e302f32342d3234203d3e203137373735.roa (raw, json)
Hash identifier:          NTwKd5jfm7Lmfi+LBX3glPoA+XdKqQa//KpmB6SGcfA=
Subject key identifier:   B8:50:A4:E7:C4:53:71:67:3C:EC:65:7D:8F:7D:74:09:82:7C:51:81
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       75F7C59757DCE8F7BD69CD1B45E377AFC076CB2B
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e34342e302f32342d3234203d3e203137373735.roa
Signing time:             Wed 10 Jun 2026 07:05:34 +0000
ROA not before:           Wed 10 Jun 2026 07:00:34 +0000
ROA not after:            Wed 09 Jun 2027 07:05:34 +0000
asID:                     17775
IP address blocks:        125.215.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f7:c5:97:57:dc:e8:f7:bd:69:cd:1b:45:e3:77:af:c0:76:cb:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 10 07:00:34 2026 GMT
            Not After : Jun  9 07:05:34 2027 GMT
        Subject: CN=B850A4E7C45371673CEC657D8F7D7409827C5181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8e:a2:ba:5e:a4:ec:b5:c2:43:e2:00:54:c5:
                    38:33:13:8f:f2:1d:1a:d9:b2:d2:46:5d:ea:81:32:
                    78:84:37:fe:97:9f:32:7c:73:7c:46:af:ba:75:2a:
                    d0:8d:d9:fa:46:26:e3:b9:22:ee:92:07:97:2c:75:
                    8f:4a:4c:e6:45:ee:70:dd:1e:0b:25:02:ed:e2:d3:
                    34:22:b5:7c:7a:20:0d:46:39:9e:39:d9:1f:cb:5c:
                    6c:db:13:79:6a:09:a4:1d:5d:e8:e2:64:3e:fd:a6:
                    c0:61:3c:c2:0c:7c:a7:00:1e:4d:1f:01:43:52:3f:
                    0e:31:eb:a9:46:35:18:70:b7:d9:41:2f:42:78:6b:
                    6b:d0:53:90:bd:61:2a:93:67:5e:9a:40:a0:f1:bd:
                    ef:01:5c:eb:e8:88:1f:c5:b9:d4:3e:a3:42:ae:af:
                    15:54:7c:5a:ec:e9:79:64:d7:10:96:8b:c7:69:af:
                    4d:99:6e:04:e2:5c:dd:e6:e2:e2:fe:34:91:7a:55:
                    78:fb:fb:eb:15:01:fb:2c:e2:cc:42:a2:9a:bb:95:
                    1b:96:d4:b3:6f:2e:f8:6b:ed:9e:69:61:48:0a:41:
                    4f:49:94:f1:c2:de:02:4b:07:38:76:dd:f1:f2:8d:
                    b0:8c:36:a7:67:ac:9b:01:66:fb:3b:da:c9:c6:41:
                    d0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:50:A4:E7:C4:53:71:67:3C:EC:65:7D:8F:7D:74:09:82:7C:51:81
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e34342e302f32342d3234203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.215.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:20:f0:16:00:a6:96:3c:ac:5c:fd:28:b2:46:87:78:2e:db:
         03:16:47:ea:d4:2b:d4:d7:76:79:63:98:26:10:d3:c7:5f:6c:
         33:ec:98:43:b9:26:47:f6:d0:66:ac:fb:b0:15:c0:92:58:58:
         cc:7a:47:85:43:7b:d4:f1:cd:16:ce:35:ed:93:39:3e:1c:60:
         04:df:17:05:3a:8a:27:71:f8:81:f3:4f:86:67:8e:aa:33:14:
         00:8a:83:af:eb:25:71:17:da:3c:73:2e:ed:c7:15:39:0c:5b:
         45:a0:d2:0a:7d:a5:f3:c6:67:03:f4:33:69:7b:75:90:58:0f:
         e1:14:df:9c:98:d5:3d:32:67:a1:47:58:55:d5:b3:7e:48:7a:
         1d:07:41:a4:49:6c:67:dc:61:49:d2:d5:15:20:2c:ea:7f:3e:
         6f:a6:cb:e0:68:5f:63:72:79:be:96:5b:67:78:29:9e:9e:f0:
         df:2b:a4:87:ca:a5:c5:df:3e:3e:60:b1:24:f0:2d:6d:40:54:
         e1:80:47:93:8f:6f:16:c8:4d:9c:a4:4d:90:4b:21:79:b3:ff:
         7e:f3:e6:df:5b:c4:72:1c:a7:e1:ad:86:78:ae:09:fc:72:bf:
         c9:e3:d1:33:25:58:45:e9:cf:9b:94:15:4f:a5:5a:c7:6c:6c:
         e3:9d:45:f8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:32:51 2026 by rpki-client