Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3230332e39352e302e302f32332d3233203d3e203137373735.roa
File:                     3230332e39352e302e302f32332d3233203d3e203137373735.roa (raw, json)
Hash identifier:          2IEQXDtO8gLNMVz3qPZmtzRgh9V4IkjQWxPIOLaGZCg=
Subject key identifier:   5A:61:1F:6A:17:AB:99:58:B2:71:F9:40:42:AD:5A:C6:C8:FF:F1:15
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       360E8FB3D083E893B35C0F8A740DE4657E4C6DD7
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3230332e39352e302e302f32332d3233203d3e203137373735.roa
Signing time:             Wed 10 Jun 2026 07:07:54 +0000
ROA not before:           Wed 10 Jun 2026 07:02:54 +0000
ROA not after:            Wed 09 Jun 2027 07:07:54 +0000
asID:                     17775
IP address blocks:        203.95.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:0e:8f:b3:d0:83:e8:93:b3:5c:0f:8a:74:0d:e4:65:7e:4c:6d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 10 07:02:54 2026 GMT
            Not After : Jun  9 07:07:54 2027 GMT
        Subject: CN=5A611F6A17AB9958B271F94042AD5AC6C8FFF115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7c:49:9d:f2:02:65:df:33:2a:6e:37:08:d9:
                    33:4b:5d:95:ca:eb:ac:f4:96:ba:1d:70:7b:39:7a:
                    a4:87:d9:84:ac:cc:d5:b3:7a:95:ed:77:1b:a5:69:
                    df:8b:95:90:ed:6a:99:1e:79:57:26:b7:ab:ea:66:
                    5b:50:85:7b:88:de:38:4a:77:65:f1:a3:dc:0d:29:
                    22:9d:11:89:56:f8:19:34:a6:fe:f3:94:59:18:df:
                    62:53:ee:98:e3:cf:1b:1b:60:d6:b2:2f:82:26:97:
                    c2:85:42:dc:7a:b4:10:ce:e0:f5:ad:8a:71:70:2f:
                    9f:24:db:4d:eb:60:26:02:87:79:35:c8:5d:a8:81:
                    82:19:e5:8a:d3:16:72:8f:03:e0:54:5a:91:a6:d0:
                    92:84:92:a1:f8:4c:f6:b7:15:2c:09:42:ed:f1:1d:
                    6f:ac:48:16:43:63:d7:e6:f5:ff:bd:56:d8:3c:4b:
                    c6:d8:c5:e1:f8:b7:81:fc:d6:75:d3:a5:e1:d5:3c:
                    ca:b3:25:35:59:f5:c9:96:ad:eb:97:6b:f8:f3:5e:
                    a0:0e:15:8b:96:c3:42:22:eb:ff:7d:9e:f0:64:ce:
                    9e:f3:ae:4f:3c:86:09:f6:d8:21:cc:0d:8d:54:8b:
                    2f:77:49:f8:64:60:75:10:82:d8:18:86:04:fc:c8:
                    d0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:61:1F:6A:17:AB:99:58:B2:71:F9:40:42:AD:5A:C6:C8:FF:F1:15
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3230332e39352e302e302f32332d3233203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.95.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:44:91:73:6c:ac:78:7e:4f:b7:69:cb:5d:7d:dc:96:51:53:
         a6:f5:5e:e0:2e:31:55:11:db:ef:63:c1:12:42:96:b6:f8:b2:
         c9:2f:6c:d4:b0:3a:ff:71:97:b5:28:9f:f2:c1:76:b3:4b:24:
         a6:da:c5:61:ff:78:80:ec:25:88:8e:11:57:f8:10:24:19:6b:
         0e:c1:00:37:2d:a1:b2:b0:f3:3d:c4:f4:6b:a9:8b:94:f2:ed:
         28:28:08:c9:8a:ba:e9:4f:fd:47:66:a4:32:50:30:da:b7:66:
         b0:38:3e:6d:e4:25:dd:f8:c4:97:7f:3f:f2:42:f9:58:ad:3d:
         9b:c7:f9:f8:15:ea:c1:9b:81:7d:2b:81:82:51:bf:4d:84:b3:
         5c:a7:a9:59:4f:24:a1:d2:00:40:e7:d6:dd:1c:e6:23:6e:3e:
         6f:9c:eb:0b:63:49:47:4e:ee:2d:99:04:76:d1:31:4a:5e:48:
         ed:ba:35:b8:5d:00:45:a0:fd:f4:4d:9e:f0:4b:e0:ae:78:99:
         47:70:77:f9:9e:82:46:fc:f7:e9:5e:56:75:84:84:6d:c7:cc:
         e7:ff:ff:42:5a:35:ba:1d:96:70:33:0a:9a:a8:6c:24:61:93:
         80:18:f6:bc:fd:3f:e3:06:58:82:5a:53:50:24:49:cc:de:f0:
         0f:42:ac:7d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUNg6Ps9CD6JOzXA+KdA3kZX5MbdcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NF
N0IwOEEwQjAeFw0yNjA2MTAwNzAyNTRaFw0yNzA2MDkwNzA3NTRaMDMxMTAvBgNV
BAMTKDVBNjExRjZBMTdBQjk5NThCMjcxRjk0MDQyQUQ1QUM2QzhGRkYxMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCffEmd8gJl3zMqbjcI2TNLXZXK
66z0lrodcHs5eqSH2YSszNWzepXtdxulad+LlZDtapkeeVcmt6vqZltQhXuI3jhK
d2Xxo9wNKSKdEYlW+Bk0pv7zlFkY32JT7pjjzxsbYNayL4Iml8KFQtx6tBDO4PWt
inFwL58k203rYCYCh3k1yF2ogYIZ5YrTFnKPA+BUWpGm0JKEkqH4TPa3FSwJQu3x
HW+sSBZDY9fm9f+9Vtg8S8bYxeH4t4H81nXTpeHVPMqzJTVZ9cmWreuXa/jzXqAO
FYuWw0Ii6/99nvBkzp7zrk88hgn22CHMDY1Uiy93SfhkYHUQgtgYhgT8yND/AgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUWmEfahermViycflAQq1axsj/8RUwHwYDVR0j
BBgwFoAUVLMaxAnbBS/VAbcFCdhUzOewigswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
OTY0NTk1Mjk1Nzg3NDE5Ny8wLzU0QjMxQUM0MDlEQjA1MkZENTAxQjcwNTA5RDg1
NENDRTdCMDhBMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NFN0IwOEEwQi5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA5NjQ1OTUyOTU3ODc0MTk3LzAvMzIzMDMzMmUzOTM1
MmUzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzczNzM3MzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAHLXwAwDQYJKoZIhvcNAQELBQADggEBACNEkXNsrHh+T7dpy1193JZRU6b1XuAu
MVUR2+9jwRJClrb4sskvbNSwOv9xl7Uon/LBdrNLJKbaxWH/eIDsJYiOEVf4ECQZ
aw7BADctobKw8z3E9Gupi5Ty7SgoCMmKuulP/UdmpDJQMNq3ZrA4Pm3kJd34xJd/
P/JC+VitPZvH+fgV6sGbgX0rgYJRv02Es1ynqVlPJKHSAEDn1t0c5iNuPm+c6wtj
SUdO7i2ZBHbRMUpeSO26NbhdAEWg/fRNnvBL4K54mUdwd/megkb89+leVnWEhG3H
zOf//0JaNbodlnAzCpqobCRhk4AY9rz9P+MGWIJaU1AkScze8A9CrH0=
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:32:02 2026 by rpki-client