Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3131382e302f32342d3234203d3e203137373735.roa
File:                     3231312e3134342e3131382e302f32342d3234203d3e203137373735.roa (raw, json)
Hash identifier:          tk4fXPbsq7r7OBiy6iajcCoCo4As3f45Fy5trTnqenA=
Subject key identifier:   31:20:35:20:33:52:B1:54:9D:D0:A8:84:C5:C7:D6:F6:40:8C:2B:75
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       46BEE93532D6C409B228214F0DEA546A9DDD9986
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3131382e302f32342d3234203d3e203137373735.roa
Signing time:             Wed 10 Jun 2026 07:03:02 +0000
ROA not before:           Wed 10 Jun 2026 06:58:02 +0000
ROA not after:            Wed 09 Jun 2027 07:03:02 +0000
asID:                     17775
IP address blocks:        211.144.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 23:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:be:e9:35:32:d6:c4:09:b2:28:21:4f:0d:ea:54:6a:9d:dd:99:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 10 06:58:02 2026 GMT
            Not After : Jun  9 07:03:02 2027 GMT
        Subject: CN=312035203352B1549DD0A884C5C7D6F6408C2B75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:d3:55:02:16:8e:fc:a5:52:f5:03:88:14:
                    ad:d3:29:04:aa:76:52:05:fd:8b:d4:e0:3c:4f:a2:
                    4d:78:d1:79:3d:93:0a:ba:d4:c7:c4:5e:48:2d:73:
                    5c:5d:a5:4e:e2:5d:e2:f3:c7:66:45:54:fe:41:45:
                    14:af:79:c2:b4:17:eb:08:d0:b3:09:01:ad:c0:0a:
                    18:7c:84:f5:41:5c:ba:2e:41:4a:da:3b:c5:8c:c2:
                    9c:dd:9f:e9:54:b7:69:33:23:a7:8d:24:3b:98:4d:
                    58:54:0b:8c:59:8c:1c:36:43:28:6d:e6:3e:96:af:
                    ff:cc:0f:50:69:b8:03:51:bf:d9:e8:41:b0:fd:ec:
                    38:54:c5:b0:c9:39:78:ab:91:fb:4a:4d:8d:3e:79:
                    77:89:f3:a8:85:a8:9b:5b:a5:89:41:ea:2a:de:d2:
                    a1:73:91:eb:c4:86:e0:2d:65:6e:91:66:1d:4b:bf:
                    fa:5f:9a:8c:4c:20:e5:c6:85:bd:4e:86:c7:a0:7b:
                    10:8c:8f:04:54:41:cd:bf:53:4a:c6:ae:32:23:70:
                    7e:37:87:23:f0:40:c6:84:57:a3:4a:0f:1f:4e:dd:
                    b6:34:38:c0:9b:f3:3d:86:c0:7a:69:7e:05:39:4b:
                    4c:b8:3f:8d:4c:e5:07:20:a2:41:b4:48:e6:5c:6c:
                    bb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:20:35:20:33:52:B1:54:9D:D0:A8:84:C5:C7:D6:F6:40:8C:2B:75
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3131382e302f32342d3234203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.144.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:f3:ed:ed:86:f4:9f:26:75:bb:b0:5d:b7:dc:80:ae:39:fd:
         de:d8:24:b0:91:57:af:de:e0:9b:12:40:a5:0e:9e:28:57:60:
         94:94:13:bc:ad:a1:ee:30:93:e0:c5:23:fc:9c:ca:8a:2f:cf:
         01:0e:a6:b6:24:63:1c:4e:01:d4:4a:7e:15:a9:3b:77:0b:96:
         48:56:46:df:0c:95:1f:52:c1:4c:b3:f5:bb:ef:ad:af:bf:0c:
         24:b4:71:bd:95:68:10:0e:7b:91:72:94:e8:86:23:d8:01:f1:
         96:e2:60:7f:28:2a:a9:70:8f:ba:45:a7:b8:8f:08:58:35:9e:
         86:02:40:f6:9b:65:97:fe:f5:89:26:e8:c1:c4:56:2a:d1:07:
         1c:b3:87:97:bc:7f:cf:f5:e5:be:27:e7:2b:d9:3c:90:15:7b:
         94:20:13:c8:50:e7:6b:19:1c:07:83:0d:9d:9a:37:3f:60:21:
         fa:86:cc:5c:d5:c2:55:5a:7f:54:4b:77:a1:13:39:cb:e4:b9:
         fd:4d:95:76:66:3e:bc:89:ec:4c:93:98:c8:c9:9f:52:22:f6:
         5a:10:f0:96:5b:5a:96:a0:09:5b:7b:18:bc:85:ca:0f:7a:c9:
         10:95:5b:1c:50:bb:cd:57:ef:7a:0a:65:7e:ab:7b:fd:1a:43:
         bb:d0:1f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 11:05:58 2026 by rpki-client