Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231302e31342e38302e302f32322d3232203d3e203137373735.roa
File:                     3231302e31342e38302e302f32322d3232203d3e203137373735.roa (raw, json)
Hash identifier:          YL75jEjLu9pfsqbrfMRditfEraEjSYLUOxT9OkT/FrU=
Subject key identifier:   BD:2B:1A:2E:29:2F:10:BA:19:8D:41:59:07:55:DA:DB:34:CE:83:76
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       58DA1559D085A69387AAB4FC0C6ED3E17D03754A
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231302e31342e38302e302f32322d3232203d3e203137373735.roa
Signing time:             Wed 10 Jun 2026 06:53:10 +0000
ROA not before:           Wed 10 Jun 2026 06:48:10 +0000
ROA not after:            Wed 09 Jun 2027 06:53:10 +0000
asID:                     17775
IP address blocks:        210.14.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:da:15:59:d0:85:a6:93:87:aa:b4:fc:0c:6e:d3:e1:7d:03:75:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 10 06:48:10 2026 GMT
            Not After : Jun  9 06:53:10 2027 GMT
        Subject: CN=BD2B1A2E292F10BA198D41590755DADB34CE8376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:11:31:fa:85:00:0b:d3:0f:69:ae:dd:49:f2:
                    9e:e9:f4:d0:23:a1:4e:5e:6c:db:63:66:b4:0c:25:
                    ae:e1:d0:f5:2d:d9:33:98:ce:29:8f:46:70:89:c4:
                    a0:b6:ba:01:52:80:cb:1e:9e:37:a1:05:c8:2b:08:
                    2f:db:ad:4d:8e:a5:90:e4:b8:5f:39:fe:c4:5d:d1:
                    1f:d2:5c:ee:1d:cd:cd:41:e5:48:eb:3a:8e:4a:7a:
                    44:e5:c9:b4:6d:e3:04:d1:c9:96:0a:f6:8c:ab:bd:
                    30:a1:e2:7e:b1:27:fc:aa:78:40:83:6d:5f:23:7a:
                    43:8c:c6:8b:ed:ad:f4:7d:ca:63:08:54:ae:3b:79:
                    dd:b7:e0:41:2a:1d:6e:c0:27:d1:30:fd:79:93:96:
                    6a:b7:b1:2e:bd:40:72:4b:df:53:f0:6b:54:1a:f8:
                    13:fe:08:b5:10:97:78:09:9c:88:2d:04:67:41:89:
                    4e:5e:df:28:e0:71:23:a8:bd:ec:09:8a:5b:d3:7f:
                    49:e6:b6:f7:5c:71:e6:7f:fe:78:e3:6c:ae:52:b5:
                    1f:e8:66:ca:4f:e3:46:d7:19:45:e6:79:3a:6f:ea:
                    68:e8:05:46:bf:f6:29:ea:2c:a5:52:a3:72:39:b5:
                    d5:7c:b5:a3:75:0b:e8:ff:ae:b6:d6:0e:73:fa:b9:
                    50:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2B:1A:2E:29:2F:10:BA:19:8D:41:59:07:55:DA:DB:34:CE:83:76
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231302e31342e38302e302f32322d3232203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.14.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:2a:1e:27:45:4a:f3:90:d2:c0:da:6b:10:c2:28:9a:a6:21:
         19:be:1e:cc:90:de:47:b2:7e:5a:bc:c4:fd:ad:94:8a:ac:56:
         fc:05:6d:71:3a:96:bf:66:70:0f:a3:f0:96:61:d0:ba:89:74:
         2d:90:44:b5:e4:ce:e1:d7:7b:dd:cf:c8:b7:32:c6:2c:22:50:
         e2:1e:3f:ed:55:00:98:5e:db:28:8c:69:a2:6a:c7:4f:31:b1:
         1b:47:4f:fd:bf:4f:e0:fa:8b:90:02:58:64:c8:bd:45:d6:c8:
         19:70:91:a7:6d:b9:ce:7c:3c:a0:b7:f0:13:27:55:24:6a:98:
         74:b0:15:8c:a0:b4:0f:fa:61:cd:88:e2:9b:f2:b0:9b:26:b8:
         ec:4e:aa:0f:d2:f2:f4:ca:9c:b2:8c:e0:cd:73:2a:31:31:26:
         65:be:16:45:f4:52:8c:1b:31:3a:ea:e0:44:a1:13:63:16:f6:
         57:ce:9d:b5:5a:0f:b3:cc:f4:0b:f8:a2:d2:cd:46:7c:66:a4:
         fd:97:e1:c7:23:68:66:e7:47:f5:02:48:30:1e:34:23:a1:c9:
         6f:6a:85:2a:88:2c:6d:6b:c5:90:a7:cf:63:98:13:2a:77:2e:
         d0:17:44:12:e6:aa:da:14:a4:70:31:42:5b:bf:99:81:a4:02:
         17:a2:5a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:32:04 2026 by rpki-client