Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231302e31342e37322e302f32312d3231203d3e203137373735.roa
File:                     3231302e31342e37322e302f32312d3231203d3e203137373735.roa (raw, json)
Hash identifier:          X6dfOIKC4pZU/I1B2Run0Xdtx+UOs4H2IN8ffWpR7Sc=
Subject key identifier:   F8:BD:C9:D0:D7:F8:C1:6C:54:AE:56:9B:8E:FA:7B:A3:91:32:C5:53
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       5D81B100369915676293FC281D78F608F2D0AC9B
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231302e31342e37322e302f32312d3231203d3e203137373735.roa
Signing time:             Wed 10 Jun 2026 06:52:55 +0000
ROA not before:           Wed 10 Jun 2026 06:47:55 +0000
ROA not after:            Wed 09 Jun 2027 06:52:55 +0000
asID:                     17775
IP address blocks:        210.14.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:81:b1:00:36:99:15:67:62:93:fc:28:1d:78:f6:08:f2:d0:ac:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 10 06:47:55 2026 GMT
            Not After : Jun  9 06:52:55 2027 GMT
        Subject: CN=F8BDC9D0D7F8C16C54AE569B8EFA7BA39132C553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:83:37:dd:19:cb:1c:0c:b8:2d:c8:9f:ca:7e:
                    ec:1c:ab:e6:e7:70:3c:70:08:74:7b:23:6d:d9:10:
                    b8:7d:49:5a:71:5a:c8:ba:84:b7:e9:ec:c1:6c:88:
                    b6:82:33:f9:7c:f9:ac:07:4d:9a:f0:88:58:49:c1:
                    db:61:75:74:c3:10:72:dd:8f:62:88:fa:da:66:a3:
                    63:0e:50:1b:5f:45:7b:03:38:49:b6:d9:0a:4b:dd:
                    9a:42:75:61:56:1f:49:67:87:bd:a1:db:a1:67:28:
                    23:a4:e4:b1:2a:c2:44:e1:36:66:bb:84:74:35:00:
                    67:66:58:24:b0:4e:da:8c:34:5c:11:9a:30:8f:d1:
                    c8:33:99:08:73:44:c5:b6:a5:5f:f9:2e:c6:0b:ed:
                    cd:74:07:88:31:7f:82:91:af:e3:e2:aa:6f:b8:36:
                    9d:16:3f:d0:63:5a:e9:25:c0:65:38:b7:a9:46:45:
                    d3:78:80:a9:4b:7f:d3:c7:da:88:42:0b:ae:6b:57:
                    d8:77:c9:2f:26:13:ec:77:1f:05:20:67:0b:3e:28:
                    d1:b8:27:67:28:a4:48:d2:9d:21:9d:d5:50:ba:1e:
                    3f:da:63:95:c5:57:98:5d:43:ea:6e:37:82:92:34:
                    be:ab:b5:d8:94:43:d8:0a:c0:b2:cf:11:a0:13:a2:
                    dd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BD:C9:D0:D7:F8:C1:6C:54:AE:56:9B:8E:FA:7B:A3:91:32:C5:53
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231302e31342e37322e302f32312d3231203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.14.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9b:6d:19:71:d9:30:16:8b:80:61:bd:56:3a:1f:bf:19:73:33:
         30:62:83:4f:46:5f:94:48:a2:a8:93:b9:0e:42:8b:ff:6d:7b:
         09:c6:5e:5a:3f:1a:79:77:3c:a5:93:a0:9e:87:b1:14:50:ed:
         15:e2:c7:29:11:58:81:2d:70:35:94:4f:8b:3d:9c:32:d1:db:
         33:91:8d:e8:88:e3:d5:8e:64:90:b9:bf:3f:a5:26:1e:8b:a3:
         9d:c9:11:34:d4:eb:de:70:9e:74:3b:bf:f2:a6:ae:a9:02:fe:
         1a:c6:d6:ca:39:b3:74:7e:57:53:6e:10:2f:ef:34:b2:e9:45:
         f8:3d:ee:da:c0:44:35:1c:33:84:0b:1c:ae:4a:05:27:bf:f9:
         44:39:5c:e9:73:6a:88:a9:04:30:ae:ba:fe:2b:a4:bd:d1:53:
         4e:af:42:a2:6b:9e:dc:46:c4:10:a4:a6:ce:66:a0:35:0c:ef:
         1a:0e:ea:3f:78:c3:94:7b:36:33:ec:6c:f1:b0:d1:dc:02:7a:
         68:c9:01:10:3c:4d:be:79:45:c8:18:9a:2c:f2:42:df:6a:c4:
         36:fe:09:66:e9:4d:94:8f:e8:d8:f6:b2:3d:08:e3:a8:cd:7c:
         ee:dc:12:5f:19:db:00:c7:cb:6a:a1:c1:0c:fe:20:c7:10:3f:
         58:c1:4e:8a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUXYGxADaZFWdik/woHXj2CPLQrJswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NF
N0IwOEEwQjAeFw0yNjA2MTAwNjQ3NTVaFw0yNzA2MDkwNjUyNTVaMDMxMTAvBgNV
BAMTKEY4QkRDOUQwRDdGOEMxNkM1NEFFNTY5QjhFRkE3QkEzOTEzMkM1NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3gzfdGcscDLgtyJ/Kfuwcq+bn
cDxwCHR7I23ZELh9SVpxWsi6hLfp7MFsiLaCM/l8+awHTZrwiFhJwdthdXTDEHLd
j2KI+tpmo2MOUBtfRXsDOEm22QpL3ZpCdWFWH0lnh72h26FnKCOk5LEqwkThNma7
hHQ1AGdmWCSwTtqMNFwRmjCP0cgzmQhzRMW2pV/5LsYL7c10B4gxf4KRr+Piqm+4
Np0WP9BjWuklwGU4t6lGRdN4gKlLf9PH2ohCC65rV9h3yS8mE+x3HwUgZws+KNG4
J2copEjSnSGd1VC6Hj/aY5XFV5hdQ+puN4KSNL6rtdiUQ9gKwLLPEaATot2hAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU+L3J0Nf4wWxUrlabjvp7o5EyxVMwHwYDVR0j
BBgwFoAUVLMaxAnbBS/VAbcFCdhUzOewigswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
OTY0NTk1Mjk1Nzg3NDE5Ny8wLzU0QjMxQUM0MDlEQjA1MkZENTAxQjcwNTA5RDg1
NENDRTdCMDhBMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NFN0IwOEEwQi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA5NjQ1OTUyOTU3ODc0MTk3LzAvMzIzMTMwMmUzMTM0
MmUzNzMyMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzEzNzM3MzczNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA9IOSDANBgkqhkiG9w0BAQsFAAOCAQEAm20ZcdkwFouAYb1WOh+/GXMzMGKD
T0ZflEiiqJO5DkKL/217CcZeWj8aeXc8pZOgnoexFFDtFeLHKRFYgS1wNZRPiz2c
MtHbM5GN6Ijj1Y5kkLm/P6UmHoujnckRNNTr3nCedDu/8qauqQL+GsbWyjmzdH5X
U24QL+80sulF+D3u2sBENRwzhAscrkoFJ7/5RDlc6XNqiKkEMK66/iukvdFTTq9C
omue3EbEEKSmzmagNQzvGg7qP3jDlHs2M+xs8bDR3AJ6aMkBEDxNvnlFyBiaLPJC
32rENv4JZulNlI/o2PayPQjjqM187twSXxnbAMfLaqHBDP4gxxA/WMFOig==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:32:01 2026 by rpki-client