Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3131342e302f32332d3233203d3e203137373735.roa
File:                     3231312e3134342e3131342e302f32332d3233203d3e203137373735.roa (raw, json)
Hash identifier:          Uv4XcgOZCRFkd+N/8Ej39F6bXxovW7c7BY0XAYGUrI4=
Subject key identifier:   B3:66:C7:F2:45:1F:0C:26:CD:59:55:2C:01:27:5C:27:C7:8F:C2:DC
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       3C2F4A58806B18306043ECE77859E56FA72C40D9
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3131342e302f32332d3233203d3e203137373735.roa
Signing time:             Wed 10 Jun 2026 07:02:31 +0000
ROA not before:           Wed 10 Jun 2026 06:57:31 +0000
ROA not after:            Wed 09 Jun 2027 07:02:31 +0000
asID:                     17775
IP address blocks:        211.144.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:2f:4a:58:80:6b:18:30:60:43:ec:e7:78:59:e5:6f:a7:2c:40:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 10 06:57:31 2026 GMT
            Not After : Jun  9 07:02:31 2027 GMT
        Subject: CN=B366C7F2451F0C26CD59552C01275C27C78FC2DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dc:c4:0a:f9:fe:79:3e:61:42:00:2a:f0:e0:
                    38:cd:07:dc:64:2c:d3:55:5d:e2:c4:4a:ab:d9:f1:
                    d7:b4:51:b7:56:01:d0:68:a8:a8:de:b2:b4:5c:0d:
                    9f:c4:a9:22:cb:57:9d:99:48:e5:4e:af:e9:8e:37:
                    bd:c8:5d:46:03:aa:f3:c6:2c:4b:06:30:82:fc:15:
                    03:d9:19:44:d3:ed:d8:54:87:92:2f:5c:58:68:b4:
                    d6:02:32:ec:54:86:2d:75:49:10:b3:24:11:31:60:
                    a6:72:a3:cb:6b:b9:73:09:78:ea:d4:d9:10:ce:de:
                    ae:52:05:7e:7a:75:54:75:d0:1d:a5:eb:dc:2f:d0:
                    35:0a:f6:34:b0:59:8a:88:af:98:4d:ac:d9:d0:19:
                    ba:a7:59:71:af:05:45:f2:eb:9c:3a:77:e8:2b:76:
                    99:b1:3d:8e:02:fb:6b:e3:57:51:08:a3:b0:a2:1f:
                    2d:55:60:14:0e:46:08:ad:95:c9:97:b7:38:91:9d:
                    cc:cf:46:ef:55:0c:64:24:f6:83:18:b3:c0:05:b9:
                    99:05:fc:ba:9f:4d:c6:dc:2d:a7:85:34:4a:64:cb:
                    10:5a:c2:dd:5b:57:fd:a6:c8:fc:e6:75:fd:4c:ad:
                    a1:23:8d:1b:21:bb:5c:06:82:36:07:db:3a:f2:97:
                    3c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:66:C7:F2:45:1F:0C:26:CD:59:55:2C:01:27:5C:27:C7:8F:C2:DC
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3131342e302f32332d3233203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.144.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:62:6e:a1:e7:86:76:65:90:56:e5:dd:25:59:56:85:2f:90:
         3f:94:37:7e:4d:50:1c:41:29:12:65:b5:b4:f3:37:98:b7:e9:
         a9:52:18:cc:c2:42:d9:91:ff:8a:93:e8:52:5f:ec:cd:53:70:
         ad:7b:52:78:d5:38:a7:37:d3:ff:4c:5b:b4:c2:2c:78:15:50:
         e5:b6:a0:d2:d6:a6:e7:51:ee:33:b0:a0:fa:24:79:02:c1:44:
         4d:3a:8c:9c:53:83:12:c9:08:f4:8e:67:6a:38:29:42:13:d1:
         f6:2e:ee:1d:39:83:fa:63:89:8b:21:b7:b8:fe:70:8e:bd:7a:
         fe:c4:8c:35:4e:95:d3:9d:d7:60:9f:ae:42:58:c2:82:36:05:
         29:cc:31:74:46:22:ad:99:d4:61:f1:67:28:e5:94:13:02:12:
         e8:25:27:94:b5:05:27:52:1d:fc:87:f2:59:f9:9b:93:78:78:
         a0:88:36:3e:c0:ad:6b:11:d1:33:1c:a8:9d:3c:52:1e:d5:62:
         89:5e:51:1a:3d:55:93:23:21:06:d1:52:9d:20:7b:51:14:44:
         49:d5:0b:31:79:72:da:66:b0:c4:a7:83:f6:7e:63:a7:bb:e9:
         78:5b:aa:e8:84:27:65:1c:5f:aa:ec:12:80:fc:ad:27:68:35:
         8d:b7:64:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:31:59 2026 by rpki-client