Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e35322e302f32342d3234203d3e203137373735.roa
File:                     3132352e3231352e35322e302f32342d3234203d3e203137373735.roa (raw, json)
Hash identifier:          OLSgc8WRO/ZYswtcJi991HS2DJ/UYr7+RzMtfw5WRyw=
Subject key identifier:   57:66:5F:D7:EE:C8:59:10:9B:7E:27:67:20:E2:69:42:AC:D2:B8:71
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       759991ED0A75D4C4C1035819897A928B007D17E5
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e35322e302f32342d3234203d3e203137373735.roa
Signing time:             Wed 10 Jun 2026 07:06:42 +0000
ROA not before:           Wed 10 Jun 2026 07:01:42 +0000
ROA not after:            Wed 09 Jun 2027 07:06:42 +0000
asID:                     17775
IP address blocks:        125.215.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 23:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:99:91:ed:0a:75:d4:c4:c1:03:58:19:89:7a:92:8b:00:7d:17:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 10 07:01:42 2026 GMT
            Not After : Jun  9 07:06:42 2027 GMT
        Subject: CN=57665FD7EEC859109B7E276720E26942ACD2B871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9c:4d:59:d7:09:84:36:3a:66:62:78:9a:de:
                    65:9d:91:03:f6:03:d0:fb:92:ab:48:81:d4:68:73:
                    a6:3c:95:8c:13:f1:d3:7c:dc:e1:10:df:1e:5b:13:
                    14:ed:55:b6:fd:86:1f:eb:2c:99:3e:f2:76:f0:ca:
                    39:42:fc:d0:52:2f:18:14:e4:83:90:0f:67:0d:7a:
                    9f:b4:dd:6e:52:cf:ea:62:07:d8:eb:2b:47:6c:9e:
                    5d:fc:c8:fe:cf:10:94:eb:61:c0:9e:83:c3:8d:93:
                    34:5b:52:18:20:b7:ef:a6:9d:e0:98:dc:bd:c0:b5:
                    4f:15:77:8f:d6:50:0f:80:46:4b:8f:e4:26:62:71:
                    4b:8a:8d:82:9e:f4:13:63:8f:a6:fb:d7:e5:e0:70:
                    c8:67:1c:32:f4:80:0f:9a:b6:11:c0:09:58:3b:ba:
                    a3:65:b6:b2:e6:4b:b6:21:82:ad:5f:e3:89:0a:3a:
                    65:cc:36:03:33:c0:81:ce:f7:a4:f2:51:39:c3:a8:
                    b1:44:56:a8:b3:5e:ca:13:bd:c8:28:28:5c:87:09:
                    34:cf:15:ec:50:1b:f4:9e:06:ce:91:7c:38:ad:5b:
                    df:5b:e5:25:c9:c7:e8:77:4e:41:31:a2:58:98:dc:
                    1c:ee:02:7a:4c:d8:70:d7:00:a9:f6:3a:bd:7c:8b:
                    ec:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:66:5F:D7:EE:C8:59:10:9B:7E:27:67:20:E2:69:42:AC:D2:B8:71
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e35322e302f32342d3234203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.215.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:e7:86:57:ee:83:38:87:b1:0a:dc:46:e0:6b:76:08:05:c1:
         b6:c7:c5:29:75:49:a1:a5:8c:e6:4e:5a:3c:ce:f5:90:64:45:
         19:10:10:89:9b:57:69:8a:4a:96:97:72:c5:06:dd:7c:3f:c8:
         fa:4a:b7:12:e8:03:95:3a:90:55:d9:71:fa:92:9e:6a:26:42:
         d0:31:1a:8a:cb:ab:01:8f:1f:d0:67:0e:9c:93:90:a4:7e:4a:
         9b:74:cc:e4:3d:47:6d:08:29:33:7d:70:36:fc:16:bc:dd:6c:
         85:74:77:75:06:d8:fc:cd:db:28:bd:55:f8:07:5c:3d:79:0d:
         8a:e6:6f:9e:55:92:89:42:27:c2:33:90:93:19:ae:c3:9b:b6:
         32:4f:56:e8:28:20:03:7d:e5:56:8b:bb:6d:6e:6e:b4:7a:5f:
         77:6b:6d:8b:41:a9:74:c4:ae:06:e0:20:2f:8f:7b:4d:59:bf:
         f1:ec:37:2a:c1:02:fa:42:44:e6:82:92:28:94:60:83:d7:46:
         93:9e:4a:3c:91:eb:bc:53:54:93:fb:c0:af:ae:56:7a:27:db:
         9d:3c:25:ec:95:a3:83:fd:4d:d1:1e:1b:49:7c:a4:40:da:e6:
         a2:9f:77:56:f3:37:83:fb:8d:e5:9f:48:e1:f7:14:81:34:7b:
         85:42:07:0f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 11:05:51 2026 by rpki-client