Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231302e31342e39302e302f32332d3233203d3e203137373735.roa
File:                     3231302e31342e39302e302f32332d3233203d3e203137373735.roa (raw, json)
Hash identifier:          R3pb9UAGS2vIgD4tujlG6TM3sZpx4ig63uFx5il1lNw=
Subject key identifier:   A5:E4:89:55:E3:06:3B:69:98:39:79:F6:B4:11:90:FA:4D:AB:3B:9C
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       3D0E1AFB0BB63A6845F4A78683D86563CDF6547B
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231302e31342e39302e302f32332d3233203d3e203137373735.roa
Signing time:             Wed 10 Jun 2026 06:53:45 +0000
ROA not before:           Wed 10 Jun 2026 06:48:45 +0000
ROA not after:            Wed 09 Jun 2027 06:53:45 +0000
asID:                     17775
IP address blocks:        210.14.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:0e:1a:fb:0b:b6:3a:68:45:f4:a7:86:83:d8:65:63:cd:f6:54:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 10 06:48:45 2026 GMT
            Not After : Jun  9 06:53:45 2027 GMT
        Subject: CN=A5E48955E3063B69983979F6B41190FA4DAB3B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:13:18:db:28:6e:b5:aa:5c:3b:f0:55:23:5f:
                    a4:f8:9f:50:af:59:91:61:1c:61:c8:1e:33:6e:b4:
                    d6:5b:11:a6:9c:6d:21:b1:08:d9:5f:49:9e:79:9c:
                    6f:e2:fd:53:bb:6a:22:3d:e5:26:59:40:a6:0e:5e:
                    3e:44:7b:85:13:11:fb:8a:b9:f6:c3:45:27:d5:4c:
                    ff:3b:e1:bd:3d:c4:1f:85:86:06:3f:42:0e:c8:cb:
                    01:81:45:34:a0:5e:d6:e3:f1:54:20:c0:f9:20:8f:
                    df:57:84:18:8b:a4:4f:5c:eb:e1:8c:b6:42:42:a8:
                    ed:7b:94:43:f6:3c:72:9a:86:5d:bc:04:0d:04:46:
                    d1:f5:7f:24:70:81:c1:d0:fc:f2:11:29:38:86:05:
                    cf:3f:26:af:e1:64:4b:ef:79:c5:45:6c:68:c8:ca:
                    86:ce:b6:fe:d7:70:53:b6:74:9e:e8:20:56:08:50:
                    54:cb:05:e2:62:96:47:cc:b2:b1:ed:ee:06:c9:30:
                    35:e0:71:03:c4:e1:ee:ac:0c:94:8e:fd:ad:1c:05:
                    20:0e:0e:e0:90:02:50:ab:0d:f8:de:4f:89:ef:6d:
                    3b:27:87:f6:42:96:70:4e:99:57:2a:d4:4b:b3:0e:
                    28:d1:da:83:f0:b0:36:0f:4b:07:ff:cc:41:e8:2b:
                    6f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E4:89:55:E3:06:3B:69:98:39:79:F6:B4:11:90:FA:4D:AB:3B:9C
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231302e31342e39302e302f32332d3233203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.14.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:80:48:c7:80:d7:4a:a5:e1:2f:88:b3:d8:8e:44:30:39:1f:
         5d:6b:a8:bf:ec:92:e2:6b:15:1d:f7:1a:23:cd:b2:a2:ca:b4:
         06:34:02:a9:f4:46:61:65:77:97:2e:7a:63:c4:0a:5e:aa:d3:
         ed:f5:86:02:4e:57:8c:9a:9a:87:00:e2:4c:d4:c2:07:2e:29:
         75:2d:a8:75:0c:25:61:72:e9:6c:96:67:b0:f9:13:b1:59:9c:
         3c:87:7c:a0:32:67:ff:40:2f:be:67:d1:f9:fc:3f:ca:9a:f9:
         ab:8a:fd:74:72:a9:8d:89:47:9b:16:f6:e0:ee:1e:ed:ea:97:
         70:e9:8d:6a:58:07:77:00:d2:81:25:90:99:95:7c:10:b9:56:
         a3:24:30:ca:67:25:4f:d9:5c:03:b8:f3:a7:3f:e9:ed:0e:c1:
         86:44:24:83:a2:c3:85:bd:54:34:64:61:cd:db:2c:79:a1:a1:
         43:46:45:7d:74:bd:66:50:93:7c:94:73:17:66:48:84:ff:27:
         62:62:83:d7:dc:6f:17:b1:91:1d:ac:4b:cb:32:9c:6e:40:ae:
         60:81:97:11:94:da:62:08:90:61:f5:61:fd:ac:f0:12:74:70:
         15:e6:32:bc:b3:7b:79:fe:aa:17:8e:01:22:23:22:56:06:36:
         ed:71:37:df
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUPQ4a+wu2OmhF9KeGg9hlY832VHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NF
N0IwOEEwQjAeFw0yNjA2MTAwNjQ4NDVaFw0yNzA2MDkwNjUzNDVaMDMxMTAvBgNV
BAMTKEE1RTQ4OTU1RTMwNjNCNjk5ODM5NzlGNkI0MTE5MEZBNERBQjNCOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ExjbKG61qlw78FUjX6T4n1Cv
WZFhHGHIHjNutNZbEaacbSGxCNlfSZ55nG/i/VO7aiI95SZZQKYOXj5Ee4UTEfuK
ufbDRSfVTP874b09xB+FhgY/Qg7IywGBRTSgXtbj8VQgwPkgj99XhBiLpE9c6+GM
tkJCqO17lEP2PHKahl28BA0ERtH1fyRwgcHQ/PIRKTiGBc8/Jq/hZEvvecVFbGjI
yobOtv7XcFO2dJ7oIFYIUFTLBeJilkfMsrHt7gbJMDXgcQPE4e6sDJSO/a0cBSAO
DuCQAlCrDfjeT4nvbTsnh/ZClnBOmVcq1EuzDijR2oPwsDYPSwf/zEHoK29vAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUpeSJVeMGO2mYOXn2tBGQ+k2rO5wwHwYDVR0j
BBgwFoAUVLMaxAnbBS/VAbcFCdhUzOewigswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
OTY0NTk1Mjk1Nzg3NDE5Ny8wLzU0QjMxQUM0MDlEQjA1MkZENTAxQjcwNTA5RDg1
NENDRTdCMDhBMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NFN0IwOEEwQi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA5NjQ1OTUyOTU3ODc0MTk3LzAvMzIzMTMwMmUzMTM0
MmUzOTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEzNzM3MzczNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAdIOWjANBgkqhkiG9w0BAQsFAAOCAQEARIBIx4DXSqXhL4iz2I5EMDkfXWuo
v+yS4msVHfcaI82yosq0BjQCqfRGYWV3ly56Y8QKXqrT7fWGAk5XjJqahwDiTNTC
By4pdS2odQwlYXLpbJZnsPkTsVmcPId8oDJn/0AvvmfR+fw/ypr5q4r9dHKpjYlH
mxb24O4e7eqXcOmNalgHdwDSgSWQmZV8ELlWoyQwymclT9lcA7jzpz/p7Q7BhkQk
g6LDhb1UNGRhzdsseaGhQ0ZFfXS9ZlCTfJRzF2ZIhP8nYmKD19xvF7GRHaxLyzKc
bkCuYIGXEZTaYgiQYfVh/azwEnRwFeYyvLN7ef6qF44BIiMiVgY27XE33w==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:32:06 2026 by rpki-client