Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231302e31342e39322e302f32322d3232203d3e203137373735.roa
File:                     3231302e31342e39322e302f32322d3232203d3e203137373735.roa (raw, json)
Hash identifier:          QC5xXmD33eMpXMo1eEdwi1xtNW0tesUyzWv1VkkbnMA=
Subject key identifier:   29:BB:31:E1:81:6A:DF:6A:A0:81:42:74:90:B1:22:6C:DC:76:10:C5
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       5125A45C6C3B12FAF75AAEE53C7CEF25C64F66FB
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231302e31342e39322e302f32322d3232203d3e203137373735.roa
Signing time:             Wed 10 Jun 2026 06:53:58 +0000
ROA not before:           Wed 10 Jun 2026 06:48:58 +0000
ROA not after:            Wed 09 Jun 2027 06:53:58 +0000
asID:                     17775
IP address blocks:        210.14.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:25:a4:5c:6c:3b:12:fa:f7:5a:ae:e5:3c:7c:ef:25:c6:4f:66:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 10 06:48:58 2026 GMT
            Not After : Jun  9 06:53:58 2027 GMT
        Subject: CN=29BB31E1816ADF6AA081427490B1226CDC7610C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:53:78:d4:9e:10:39:2f:ce:f1:f9:29:d7:73:
                    3d:11:4e:9a:52:e5:1e:a2:d0:ac:f8:28:a0:74:db:
                    54:1c:2c:c9:fd:a8:14:b5:3e:97:4b:ce:b1:22:ef:
                    27:84:13:9a:5b:c6:9e:ae:13:c1:02:f5:63:66:a4:
                    31:ab:de:f4:f6:9f:75:37:fd:e6:f5:cd:0f:d1:e6:
                    5b:49:9d:21:3e:94:8d:ff:d0:7c:60:ab:22:6f:3c:
                    76:c4:de:15:b1:c1:ad:5f:0a:c0:8b:e4:f6:c3:fd:
                    99:cd:ba:f3:74:fd:39:17:86:dc:a4:64:37:0d:c3:
                    c5:0e:c7:3f:65:22:41:5d:67:b6:10:17:bb:d3:f3:
                    70:eb:be:cb:70:77:df:8f:6e:a0:4e:a2:aa:7e:a1:
                    3e:5d:29:6b:e0:f3:49:c2:ad:f1:89:61:9b:d3:f0:
                    3f:c6:84:6e:ac:b8:20:66:89:42:eb:bc:09:71:23:
                    7f:8c:6e:94:08:36:68:11:00:00:77:5a:3c:3f:32:
                    6d:b5:44:64:f5:f5:c0:8d:4b:26:f8:71:79:43:87:
                    dc:5b:b1:7d:13:7d:96:fb:5b:c4:f4:f3:67:d6:08:
                    f3:1d:33:e0:3b:d3:20:58:23:d9:04:c5:f0:db:a9:
                    3a:93:4f:d3:82:65:12:d0:62:aa:70:0f:1c:5a:33:
                    40:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BB:31:E1:81:6A:DF:6A:A0:81:42:74:90:B1:22:6C:DC:76:10:C5
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231302e31342e39322e302f32322d3232203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.14.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:2a:7d:10:46:c8:ed:fd:4c:d6:b6:69:75:e2:16:04:48:c6:
         df:38:53:4f:e5:8f:85:fd:44:98:07:10:82:01:e8:4c:70:43:
         a7:4d:df:ef:24:72:92:67:62:36:00:4e:11:21:c6:1c:ef:5c:
         9d:78:96:4e:6a:c2:17:0a:18:dc:7e:81:72:f0:06:a0:83:17:
         3d:a5:d1:18:ee:d7:0b:35:c0:6c:ad:5d:aa:c3:8a:29:bf:54:
         a9:07:56:80:4e:13:60:63:d5:3b:c0:29:ca:de:1c:09:7e:57:
         14:46:73:87:4d:85:f2:2d:33:63:b7:6f:29:87:ab:3e:a1:f7:
         64:64:21:8c:bb:02:91:7e:69:f1:92:49:b8:ec:d6:8c:14:5e:
         f6:2b:71:0f:b9:cd:2a:3d:49:77:40:2e:76:58:f0:25:2d:1d:
         83:ea:3c:3c:7e:3b:67:ae:4d:7b:47:76:34:62:c6:48:ec:5f:
         44:56:52:28:2f:87:e2:ed:fe:35:18:c5:5c:46:e1:40:78:43:
         5c:01:46:56:24:48:a4:63:1f:a7:27:b1:79:7f:d3:cb:1d:66:
         da:f7:92:9f:64:87:2d:b6:a9:12:ff:42:5c:81:1f:dd:b2:bc:
         3e:db:a7:aa:82:82:a5:d9:e1:c7:4b:b8:3e:3b:a2:c1:ac:b6:
         d1:40:c7:d7
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUUSWkXGw7Evr3Wq7lPHzvJcZPZvswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NF
N0IwOEEwQjAeFw0yNjA2MTAwNjQ4NThaFw0yNzA2MDkwNjUzNThaMDMxMTAvBgNV
BAMTKDI5QkIzMUUxODE2QURGNkFBMDgxNDI3NDkwQjEyMjZDREM3NjEwQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcU3jUnhA5L87x+SnXcz0RTppS
5R6i0Kz4KKB021QcLMn9qBS1PpdLzrEi7yeEE5pbxp6uE8EC9WNmpDGr3vT2n3U3
/eb1zQ/R5ltJnSE+lI3/0HxgqyJvPHbE3hWxwa1fCsCL5PbD/ZnNuvN0/TkXhtyk
ZDcNw8UOxz9lIkFdZ7YQF7vT83Drvstwd9+PbqBOoqp+oT5dKWvg80nCrfGJYZvT
8D/GhG6suCBmiULrvAlxI3+MbpQINmgRAAB3Wjw/Mm21RGT19cCNSyb4cXlDh9xb
sX0TfZb7W8T082fWCPMdM+A70yBYI9kExfDbqTqTT9OCZRLQYqpwDxxaM0BdAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUKbsx4YFq32qggUJ0kLEibNx2EMUwHwYDVR0j
BBgwFoAUVLMaxAnbBS/VAbcFCdhUzOewigswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
OTY0NTk1Mjk1Nzg3NDE5Ny8wLzU0QjMxQUM0MDlEQjA1MkZENTAxQjcwNTA5RDg1
NENDRTdCMDhBMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NFN0IwOEEwQi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA5NjQ1OTUyOTU3ODc0MTk3LzAvMzIzMTMwMmUzMTM0
MmUzOTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzNzM3MzczNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAtIOXDANBgkqhkiG9w0BAQsFAAOCAQEAjip9EEbI7f1M1rZpdeIWBEjG3zhT
T+WPhf1EmAcQggHoTHBDp03f7yRykmdiNgBOESHGHO9cnXiWTmrCFwoY3H6BcvAG
oIMXPaXRGO7XCzXAbK1dqsOKKb9UqQdWgE4TYGPVO8Apyt4cCX5XFEZzh02F8i0z
Y7dvKYerPqH3ZGQhjLsCkX5p8ZJJuOzWjBRe9itxD7nNKj1Jd0AudljwJS0dg+o8
PH47Z65Ne0d2NGLGSOxfRFZSKC+H4u3+NRjFXEbhQHhDXAFGViRIpGMfpyexeX/T
yx1m2veSn2SHLbapEv9CXIEf3bK8PtunqoKCpdnhx0u4Pjuiway20UDH1w==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:32:01 2026 by rpki-client