Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3131322e302f32342d3234203d3e203137373735.roa
File:                     3231312e3134342e3131322e302f32342d3234203d3e203137373735.roa (raw, json)
Hash identifier:          preMwpVS0xGxH9dQFmr7zHP/Dqt91rHYHKkPnsr9uls=
Subject key identifier:   22:2D:AA:56:B4:DB:A2:A0:42:19:AE:50:A1:06:2A:98:3F:05:15:2B
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       69781D07742AA27C953D4F40FEDC21C112E657E2
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3131322e302f32342d3234203d3e203137373735.roa
Signing time:             Wed 10 Jun 2026 07:02:25 +0000
ROA not before:           Wed 10 Jun 2026 06:57:25 +0000
ROA not after:            Wed 09 Jun 2027 07:02:25 +0000
asID:                     17775
IP address blocks:        211.144.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:78:1d:07:74:2a:a2:7c:95:3d:4f:40:fe:dc:21:c1:12:e6:57:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 10 06:57:25 2026 GMT
            Not After : Jun  9 07:02:25 2027 GMT
        Subject: CN=222DAA56B4DBA2A04219AE50A1062A983F05152B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4d:19:1a:9d:e7:96:0b:87:39:07:9a:fe:cc:
                    40:ea:0f:5a:84:82:e1:aa:61:08:0c:60:e2:b6:ad:
                    f8:6b:64:5e:e3:d2:0b:c8:66:21:c2:42:3b:4c:8a:
                    cc:7a:f1:d8:19:cb:92:b9:1e:bf:1c:ee:8e:b9:82:
                    a5:99:79:d7:27:53:41:64:11:dc:06:65:b4:69:00:
                    a9:9b:be:4f:3d:89:c8:58:8f:38:26:49:b8:47:2c:
                    94:39:bc:52:da:de:3b:52:51:9b:2f:03:55:a1:3b:
                    a4:fb:9b:de:f2:95:4c:ab:b1:e3:6b:34:df:fa:1b:
                    ff:c7:d3:1c:d2:21:87:e3:29:80:63:05:71:40:3d:
                    f0:6e:40:2f:8d:79:1b:91:3e:02:de:93:7f:5f:a8:
                    fe:ba:fa:62:9b:27:12:43:be:76:66:9e:4f:7c:48:
                    f5:d0:58:e3:25:21:fc:25:63:60:f2:c4:c5:a7:5e:
                    93:7c:f3:c2:80:6a:b5:cc:66:e5:7c:a3:db:d7:ad:
                    a5:57:2a:4c:d9:c5:3f:dc:af:dc:d5:9e:d9:80:c4:
                    23:12:25:f8:b8:b6:1b:ea:24:d7:c3:81:a0:d2:da:
                    8e:9a:dc:87:17:87:bd:65:68:72:2a:33:26:90:68:
                    e6:e2:c1:07:80:89:d8:b5:72:40:f4:c0:f2:64:04:
                    3d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2D:AA:56:B4:DB:A2:A0:42:19:AE:50:A1:06:2A:98:3F:05:15:2B
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3131322e302f32342d3234203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.144.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:e7:4b:00:f8:f5:96:9e:f1:4b:18:82:74:99:58:f9:79:55:
         b6:27:af:a1:f5:9c:ca:bd:36:af:72:8c:ab:51:78:05:2a:ec:
         f0:6b:bd:05:fd:e1:20:44:a3:2a:af:c3:f4:9c:2d:85:12:0e:
         3f:12:65:c6:72:ee:61:fc:a9:54:2f:50:2d:05:f5:3e:99:52:
         76:d7:7e:c8:b7:20:11:c0:ba:ab:41:7a:16:d0:d2:9f:55:7b:
         3f:2e:f9:cf:de:4c:37:35:3b:22:95:a5:ce:c3:91:cd:e9:4f:
         0b:aa:56:f5:9e:8d:20:a8:04:bb:bc:8f:f6:21:14:05:e1:32:
         30:a4:99:c7:9c:63:ba:92:03:92:f3:c8:71:ab:c7:fc:21:68:
         d0:6e:b8:59:9d:21:b0:7f:79:99:f2:a3:cf:68:6a:45:80:1f:
         77:68:a8:ce:ab:7a:71:a6:ab:ec:ce:21:28:05:a4:24:15:ea:
         06:c9:22:13:53:38:f5:44:b7:2f:d0:d1:0d:44:00:ab:c1:21:
         18:e5:14:24:1c:bf:c3:a8:2d:d5:a9:1a:55:6f:03:9b:20:82:
         15:02:ba:c6:e9:e0:c8:62:f6:42:a3:0d:b2:bb:1a:9e:23:2f:
         5e:d9:fe:6b:82:d1:81:07:59:4d:79:1d:f4:a0:76:b4:24:56:
         52:14:12:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:52:10 2026 by rpki-client