Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3130382e302f32332d3233203d3e203137373735.roa
File:                     3231312e3134342e3130382e302f32332d3233203d3e203137373735.roa (raw, json)
Hash identifier:          qiAQ1PNZcDmxTdTdg7L6tMzjMscAo/AFT5JaRMeK5qA=
Subject key identifier:   9B:48:1B:2C:07:62:D7:6B:70:87:06:56:EC:58:9D:CA:CA:F7:A9:47
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       2DF28B84C66B8AD1B152D2CF2537A1CC3B9942B4
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3130382e302f32332d3233203d3e203137373735.roa
Signing time:             Wed 10 Jun 2026 07:00:57 +0000
ROA not before:           Wed 10 Jun 2026 06:55:57 +0000
ROA not after:            Wed 09 Jun 2027 07:00:57 +0000
asID:                     17775
IP address blocks:        211.144.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f2:8b:84:c6:6b:8a:d1:b1:52:d2:cf:25:37:a1:cc:3b:99:42:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 10 06:55:57 2026 GMT
            Not After : Jun  9 07:00:57 2027 GMT
        Subject: CN=9B481B2C0762D76B70870656EC589DCACAF7A947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:34:99:d0:48:57:0a:40:db:5f:94:6e:e0:f5:
                    3b:d3:9d:1d:51:c0:a6:5a:ce:90:e2:09:24:db:d0:
                    21:3f:b3:68:56:6a:af:73:d4:d9:80:a7:e3:21:7c:
                    5c:87:b8:1a:d1:ba:f1:33:df:8e:cc:9c:36:bc:2e:
                    63:3d:db:e8:20:1f:0f:da:4a:86:a7:0c:58:01:e4:
                    6f:a3:cf:4d:10:6b:3a:a1:9e:d9:c5:9e:2a:ed:ed:
                    2e:71:20:6a:9b:66:c9:5c:9e:f0:fc:97:2e:21:94:
                    58:63:83:47:91:a2:46:b8:5a:86:a9:ca:51:25:a3:
                    e3:fa:c6:7f:e6:f3:e8:26:22:22:7d:96:22:66:65:
                    98:c3:f8:cd:a1:ad:44:40:8d:5e:40:d8:92:9a:d6:
                    3d:81:9c:7c:36:ff:e5:43:22:c1:75:bb:82:62:e7:
                    da:0a:03:c9:43:3c:26:12:dd:8a:53:41:4c:2a:bb:
                    5f:86:3d:19:d9:de:43:67:0c:41:81:8a:92:af:c9:
                    0c:0b:1e:30:31:62:b2:b1:ed:c9:d4:61:34:57:ec:
                    77:76:f3:12:e0:21:dd:c6:ce:fa:fe:b3:5e:37:29:
                    4f:e6:cb:c8:04:e4:83:5a:72:24:c7:61:44:13:41:
                    aa:cc:2d:e7:75:c9:82:e7:9d:73:29:69:45:db:b2:
                    01:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:48:1B:2C:07:62:D7:6B:70:87:06:56:EC:58:9D:CA:CA:F7:A9:47
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3130382e302f32332d3233203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.144.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:60:ea:c7:9a:3a:d3:83:6a:99:68:11:e7:56:b9:16:59:cd:
         70:d9:8c:c3:53:3d:30:f4:ff:1f:f4:d8:c3:5e:fd:c4:19:c4:
         9f:fb:67:0c:27:16:04:c0:9e:bb:e7:f6:d4:2c:d7:82:bc:05:
         c9:02:4b:37:b3:43:13:30:7b:db:0d:bf:8e:4b:66:98:5e:36:
         24:2e:79:a6:a8:47:d3:f5:41:db:0a:ba:cb:2b:a2:58:f3:32:
         64:8c:e6:7a:59:00:b6:74:0d:66:90:2c:52:bb:72:3c:55:96:
         39:27:23:34:6d:e6:1b:c0:03:5e:96:f0:21:67:26:e6:d4:88:
         55:cf:90:08:32:43:22:0e:c4:a7:72:6b:24:cc:44:bd:05:51:
         48:9c:f2:e6:23:d4:67:73:f5:ee:77:79:97:42:ec:75:70:ad:
         7f:f6:4d:6c:d3:a1:1e:4f:b1:b8:af:76:63:a1:07:7b:9b:a8:
         91:26:08:aa:de:36:9a:1b:c1:90:da:4e:d6:5f:57:81:14:b2:
         4b:ae:eb:df:92:85:9f:f8:42:ae:33:d9:77:a7:5e:c7:f8:e7:
         fe:a1:de:7b:76:0e:17:85:81:6e:f8:88:b1:0c:4d:ea:6b:70:
         68:80:5a:2e:4e:a7:90:96:76:e2:51:65:e3:78:f5:f0:d4:16:
         e7:7a:70:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:33:07 2026 by rpki-client