Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231302e37332e3230342e302f32342d3234203d3e203137373735.roa
File:                     3231302e37332e3230342e302f32342d3234203d3e203137373735.roa (raw, json)
Hash identifier:          p/YiGJZnSq/1DrtcOkidOo9AQHvc7uvDYefWBahV60o=
Subject key identifier:   F4:D9:B0:29:C1:41:05:4A:CA:8F:29:B1:C8:C5:E5:6A:81:DC:13:0E
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       2C4372C60DC89C0252DE22B44D5843E715EBFB98
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231302e37332e3230342e302f32342d3234203d3e203137373735.roa
Signing time:             Wed 10 Jun 2026 06:54:29 +0000
ROA not before:           Wed 10 Jun 2026 06:49:29 +0000
ROA not after:            Wed 09 Jun 2027 06:54:29 +0000
asID:                     17775
IP address blocks:        210.73.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:43:72:c6:0d:c8:9c:02:52:de:22:b4:4d:58:43:e7:15:eb:fb:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 10 06:49:29 2026 GMT
            Not After : Jun  9 06:54:29 2027 GMT
        Subject: CN=F4D9B029C141054ACA8F29B1C8C5E56A81DC130E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:65:fe:e4:0c:e2:83:38:f2:1a:d6:81:ca:63:
                    e5:f2:6e:14:a1:0d:ca:a6:d6:d6:16:03:89:61:de:
                    80:f9:bd:e7:46:24:2f:a9:bf:f3:6f:45:ca:23:4b:
                    95:23:a2:3e:e2:5d:ec:29:48:c0:8e:0c:f9:5b:7a:
                    ea:eb:b9:42:97:eb:7c:c7:5d:cb:1a:50:03:8e:b0:
                    dd:d0:9f:42:20:7f:1e:1a:92:ec:55:f7:81:15:eb:
                    37:78:71:9e:ca:db:fd:65:c1:44:d3:b6:58:d7:ef:
                    8e:08:d1:78:9d:48:77:19:05:73:b6:09:97:f2:9f:
                    b9:3f:b0:24:55:3b:4b:92:1d:fa:e2:80:d2:de:2e:
                    c9:40:65:be:6a:13:d2:89:b3:7f:33:23:f6:c6:f8:
                    0d:5e:80:32:b4:69:49:ca:a2:b2:b3:57:4f:38:2b:
                    99:9c:fc:eb:6a:dd:12:f6:a5:64:13:7b:74:2a:f9:
                    81:93:e4:f6:c6:59:e3:d5:88:c4:76:ba:37:f4:05:
                    db:56:1c:4c:9d:0b:29:7a:24:52:dd:5e:fd:8f:b2:
                    41:03:99:85:93:b6:d5:f9:64:36:86:00:67:8c:fe:
                    bc:7a:1c:70:d1:f0:33:57:4e:58:03:ac:6b:1a:f9:
                    ad:1b:10:4c:a4:b5:8f:fe:d2:1c:4e:cf:b3:b9:72:
                    6e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D9:B0:29:C1:41:05:4A:CA:8F:29:B1:C8:C5:E5:6A:81:DC:13:0E
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231302e37332e3230342e302f32342d3234203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.73.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:33:3c:fe:99:d6:1a:ce:79:02:e5:c6:a8:03:b7:42:75:0e:
         46:35:1e:4e:60:3d:71:3a:c8:13:db:ce:0c:0d:e1:93:01:fa:
         f9:10:8a:19:bb:e8:1b:95:f5:6f:b6:69:4d:84:6a:e8:07:0c:
         b1:97:7a:83:85:e2:54:af:f0:24:c1:7f:35:4a:c3:37:fb:69:
         89:41:7e:4f:63:30:45:17:a4:35:ee:2e:ce:b3:ea:7f:f8:fe:
         90:39:ee:b2:2a:ab:6d:b0:b0:30:32:2c:42:44:30:de:be:fd:
         16:04:e1:af:aa:df:b2:fb:5d:67:12:d6:19:e2:46:ca:2e:35:
         4b:56:5c:b8:1e:d7:96:09:54:9a:b0:f0:f6:d8:c6:16:04:2e:
         82:83:4e:f2:57:7e:b8:19:84:48:fb:51:9d:85:3d:3d:46:d9:
         36:87:09:9f:f3:5d:17:59:6a:a7:cb:68:6a:e8:9b:d2:00:53:
         31:d5:83:45:20:4d:89:2c:19:29:cc:5c:b9:35:08:0a:b2:30:
         03:bc:d6:37:03:5b:cd:96:4e:9c:3d:cc:47:b8:ca:6e:a3:81:
         e1:b9:c4:92:d4:8b:1c:dd:09:25:ba:4c:ae:17:c9:0f:60:2c:
         06:10:6b:ef:4c:53:d7:f1:ef:8f:a6:c1:5e:a5:dc:78:de:9c:
         dd:19:0c:41
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:33:15 2026 by rpki-client