Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3130342e302f32322d3232203d3e203137373735.roa
File:                     3231312e3134342e3130342e302f32322d3232203d3e203137373735.roa (raw, json)
Hash identifier:          sm+qf/Sr55bjXxOheFJSGgmtihhEPKNQdVBGrfZjOqg=
Subject key identifier:   00:E0:05:36:C2:11:E0:63:1B:89:FA:20:45:79:19:14:5C:A1:83:CF
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       586D04A710A972638406E81421001CDDFFB44B95
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3130342e302f32322d3232203d3e203137373735.roa
Signing time:             Wed 10 Jun 2026 06:59:35 +0000
ROA not before:           Wed 10 Jun 2026 06:54:35 +0000
ROA not after:            Wed 09 Jun 2027 06:59:35 +0000
asID:                     17775
IP address blocks:        211.144.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:6d:04:a7:10:a9:72:63:84:06:e8:14:21:00:1c:dd:ff:b4:4b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 10 06:54:35 2026 GMT
            Not After : Jun  9 06:59:35 2027 GMT
        Subject: CN=00E00536C211E0631B89FA20457919145CA183CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:53:0f:b5:8d:7e:d1:c7:0a:d5:21:6b:19:98:
                    12:a5:33:71:7a:bc:72:2b:b6:80:2b:9d:2a:3d:c0:
                    88:63:ff:c5:a9:a7:0c:4f:d6:0c:bb:c7:3e:52:f7:
                    ea:20:08:11:ac:7e:c5:aa:10:6f:0a:4a:7b:71:69:
                    09:8d:03:bd:cf:09:4a:22:41:49:73:7a:0a:91:e0:
                    e7:95:85:e0:1c:75:fc:8a:5d:92:67:41:1d:8e:d2:
                    6f:36:e4:a5:13:53:9b:ce:41:fc:54:d8:08:5e:39:
                    6f:fd:76:f7:67:11:26:f4:b5:4d:74:5f:ac:9d:b9:
                    00:8c:3c:bc:3f:bb:50:04:f0:9c:a9:4b:ea:83:51:
                    f7:53:15:ab:41:74:9a:6b:38:df:62:5a:1c:b9:25:
                    f4:a5:df:6b:07:2c:bf:27:4e:02:c1:e3:a5:52:ca:
                    c5:99:90:ce:67:f6:62:da:bd:ce:a8:46:89:18:94:
                    4e:e5:d2:ae:97:05:4b:cf:ca:20:95:5a:01:c6:61:
                    4a:13:e9:01:9b:37:c9:bb:92:7e:fc:1f:45:41:dc:
                    81:e0:03:32:57:f0:1b:47:ef:be:0e:89:b1:40:1d:
                    f1:57:b7:a6:08:7c:38:cb:54:20:87:2f:99:b0:7e:
                    98:d8:d3:00:79:bc:fa:ff:87:a4:44:4a:2b:f4:bb:
                    81:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E0:05:36:C2:11:E0:63:1B:89:FA:20:45:79:19:14:5C:A1:83:CF
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3130342e302f32322d3232203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.144.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:1e:67:9e:e7:4f:8c:5c:1a:a6:b1:68:77:48:e2:32:05:41:
         39:4d:1c:49:c9:7b:ee:99:00:c5:8b:4d:0b:05:68:55:d2:57:
         43:fc:e3:16:fe:12:23:1d:6c:9d:98:7d:5e:df:a3:61:8b:4a:
         a6:9b:c6:b0:06:f8:d2:9c:fe:b5:c7:e2:af:4e:c3:01:57:ed:
         25:22:30:27:6e:79:f9:10:7e:e8:ca:3a:1a:6b:e7:ea:aa:5f:
         79:67:6d:0e:f5:49:75:79:db:ba:36:cd:00:87:06:06:64:b5:
         30:b1:ae:46:38:a2:48:6b:ca:68:01:58:71:85:25:ca:95:e3:
         13:97:fa:0a:96:7c:bf:7d:d5:6a:25:ff:66:2f:d2:91:1c:b1:
         3f:c2:03:7f:41:73:ff:35:93:ed:6a:c1:8f:0b:f4:aa:d1:55:
         6f:c4:9b:de:80:66:be:aa:c8:09:2c:7c:b0:d6:22:88:87:40:
         a9:45:e8:62:10:5e:f9:a5:fa:ba:8c:01:67:07:eb:9f:b3:21:
         09:89:91:2d:60:c0:d3:3a:3d:cd:9a:fa:ae:9a:07:b3:b1:4d:
         fd:49:a4:4b:2a:9f:fd:7e:e3:49:96:41:6e:d6:90:a5:56:e8:
         88:d1:d3:3a:4a:0f:4c:5f:34:a8:4e:95:53:88:55:b2:6b:82:
         6f:a7:f4:3e
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUWG0EpxCpcmOEBugUIQAc3f+0S5UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NF
N0IwOEEwQjAeFw0yNjA2MTAwNjU0MzVaFw0yNzA2MDkwNjU5MzVaMDMxMTAvBgNV
BAMTKDAwRTAwNTM2QzIxMUUwNjMxQjg5RkEyMDQ1NzkxOTE0NUNBMTgzQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYUw+1jX7RxwrVIWsZmBKlM3F6
vHIrtoArnSo9wIhj/8WppwxP1gy7xz5S9+ogCBGsfsWqEG8KSntxaQmNA73PCUoi
QUlzegqR4OeVheAcdfyKXZJnQR2O0m825KUTU5vOQfxU2AheOW/9dvdnESb0tU10
X6yduQCMPLw/u1AE8JypS+qDUfdTFatBdJprON9iWhy5JfSl32sHLL8nTgLB46VS
ysWZkM5n9mLavc6oRokYlE7l0q6XBUvPyiCVWgHGYUoT6QGbN8m7kn78H0VB3IHg
AzJX8BtH774OibFAHfFXt6YIfDjLVCCHL5mwfpjY0wB5vPr/h6RESiv0u4HpAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUAOAFNsIR4GMbifogRXkZFFyhg88wHwYDVR0j
BBgwFoAUVLMaxAnbBS/VAbcFCdhUzOewigswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
OTY0NTk1Mjk1Nzg3NDE5Ny8wLzU0QjMxQUM0MDlEQjA1MkZENTAxQjcwNTA5RDg1
NENDRTdCMDhBMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NFN0IwOEEwQi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDk2NDU5NTI5NTc4NzQxOTcvMC8zMjMxMzEyZTMx
MzQzNDJlMzEzMDM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzNzM3MzczNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAtOQaDANBgkqhkiG9w0BAQsFAAOCAQEAXh5nnudPjFwaprFod0ji
MgVBOU0cScl77pkAxYtNCwVoVdJXQ/zjFv4SIx1snZh9Xt+jYYtKppvGsAb40pz+
tcfir07DAVftJSIwJ255+RB+6Mo6Gmvn6qpfeWdtDvVJdXnbujbNAIcGBmS1MLGu
RjiiSGvKaAFYcYUlypXjE5f6CpZ8v33VaiX/Zi/SkRyxP8IDf0Fz/zWT7WrBjwv0
qtFVb8Sb3oBmvqrICSx8sNYiiIdAqUXoYhBe+aX6uowBZwfrn7MhCYmRLWDA0zo9
zZr6rpoHs7FN/UmkSyqf/X7jSZZBbtaQpVboiNHTOkoPTF80qE6VU4hVsmuCb6f0
Pg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:51:53 2026 by rpki-client