Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3130302e302f32332d3233203d3e203137373735.roa
File:                     3231312e3134342e3130302e302f32332d3233203d3e203137373735.roa (raw, json)
Hash identifier:          EuCgn0nUyeCyailKVyHDzd9U/DB0e1O6don+YT6Nn8k=
Subject key identifier:   46:90:FD:FE:A3:71:8D:FC:C0:27:81:BB:CB:72:1F:7D:F4:5B:71:51
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       4436FDCA6BE657DD00D901722C44E1149130A5BC
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3130302e302f32332d3233203d3e203137373735.roa
Signing time:             Wed 10 Jun 2026 06:58:09 +0000
ROA not before:           Wed 10 Jun 2026 06:53:09 +0000
ROA not after:            Wed 09 Jun 2027 06:58:09 +0000
asID:                     17775
IP address blocks:        211.144.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:36:fd:ca:6b:e6:57:dd:00:d9:01:72:2c:44:e1:14:91:30:a5:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 10 06:53:09 2026 GMT
            Not After : Jun  9 06:58:09 2027 GMT
        Subject: CN=4690FDFEA3718DFCC02781BBCB721F7DF45B7151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d4:70:5a:c5:e4:13:fa:48:21:bb:4f:30:da:
                    71:95:71:03:1c:04:bf:73:67:7f:c7:94:e3:52:4e:
                    36:66:c7:7b:71:08:c5:c7:06:a7:93:0b:60:06:00:
                    9d:a1:15:ac:44:95:85:72:4b:f5:dd:02:24:30:47:
                    3e:af:a3:df:10:a4:b5:07:e2:36:d3:2d:f5:9a:2d:
                    8f:17:9f:e0:2b:33:f2:95:be:7f:3b:95:75:9d:09:
                    37:1f:38:5e:e9:b0:19:08:eb:59:b5:bd:c9:bb:c6:
                    f1:d4:ed:4f:e4:72:62:be:e7:8b:b4:a3:ae:75:0b:
                    19:14:f9:68:8e:54:01:28:6e:03:7f:56:32:38:11:
                    8d:b1:a7:4c:39:5a:fa:80:51:82:68:f7:0f:d8:f6:
                    3a:6a:8c:fc:88:91:57:aa:52:ad:3a:50:16:b9:5f:
                    1d:5a:af:7a:e9:65:72:93:2f:74:2e:12:a2:2a:81:
                    c5:6b:b7:b1:f4:45:69:98:aa:82:94:c2:23:13:bf:
                    95:6d:cf:bb:b3:38:cd:fe:a7:60:65:9e:8c:62:b7:
                    37:ff:44:94:e7:12:59:6f:92:d0:1c:81:bc:b7:bc:
                    97:74:c4:50:ef:e1:1a:6c:1d:89:3b:b6:5f:61:82:
                    92:6b:2a:e9:63:a1:9e:59:40:ed:b6:ee:c2:93:2a:
                    e3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:90:FD:FE:A3:71:8D:FC:C0:27:81:BB:CB:72:1F:7D:F4:5B:71:51
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3130302e302f32332d3233203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.144.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:e1:dd:a8:7c:33:38:de:41:d7:71:d7:a8:46:d3:5d:3f:97:
         6b:d5:7e:81:64:f7:1a:23:0f:4c:4c:54:03:45:4d:b1:3c:30:
         60:e8:7e:3c:81:4c:76:0e:61:ee:1e:c1:77:36:25:aa:4a:2d:
         6c:cc:57:42:56:52:d9:24:15:c0:60:d8:bf:82:47:d6:8c:47:
         ce:6c:6d:0f:89:7c:c9:77:0e:b6:72:fd:c0:1a:2f:68:45:bf:
         f6:51:0a:3e:09:9c:f6:a6:49:10:7c:ce:ed:6d:64:a7:19:cc:
         c9:f1:84:17:9b:9d:7a:c9:9a:6a:71:93:8e:c4:a2:06:1c:1f:
         a1:e5:fc:17:65:0c:5b:8b:fb:e6:b2:1c:3e:a5:2e:0d:57:b0:
         4a:d5:b7:81:6a:ba:b6:07:9e:e6:08:ff:fd:38:fc:f6:79:c4:
         62:26:75:ac:6b:d0:28:41:1e:49:02:a6:90:90:55:42:8a:6c:
         07:af:a0:0a:84:f3:69:a5:be:f0:fa:db:ac:f5:39:13:5b:53:
         ba:c2:b8:f7:a4:d1:68:85:c5:26:29:de:09:e9:2d:b9:5a:ca:
         59:28:81:07:2f:c4:71:68:74:42:f3:82:ee:85:b2:fc:86:a7:
         97:0a:96:25:e8:d7:e4:64:f8:ac:57:08:fa:d4:5f:74:bb:8f:
         dc:a4:e7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:33:12 2026 by rpki-client