Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3134382e312e302f32342d3234203d3e2039333934.roa
File:                     3131312e3134382e312e302f32342d3234203d3e2039333934.roa (raw, json)
Hash identifier:          a8Gk/4AhEqcjfkAV0xcTUSI8h7MJ6Sw0lqih8UmkJvU=
Subject key identifier:   CE:0A:8B:71:72:ED:D7:5D:E5:60:1B:17:9A:A8:B6:A4:10:B1:75:4C
Certificate issuer:       /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial:       49A532A794DAD710E2DAE7F8E59E5BC778CBF802
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3134382e312e302f32342d3234203d3e2039333934.roa
Signing time:             Sun 31 May 2026 23:09:43 +0000
ROA not before:           Sun 31 May 2026 23:04:43 +0000
ROA not after:            Sun 30 May 2027 23:09:43 +0000
asID:                     9394
IP address blocks:        111.148.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 14:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a5:32:a7:94:da:d7:10:e2:da:e7:f8:e5:9e:5b:c7:78:cb:f8:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
        Validity
            Not Before: May 31 23:04:43 2026 GMT
            Not After : May 30 23:09:43 2027 GMT
        Subject: CN=CE0A8B7172EDD75DE5601B179AA8B6A410B1754C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:09:c2:14:71:c7:be:b0:fc:6c:3d:e0:45:11:
                    38:3b:21:04:88:73:0b:d1:4d:e2:a3:ca:46:da:05:
                    07:d0:b6:c2:25:5c:00:a9:9b:bd:34:10:43:67:a8:
                    10:3b:97:c6:38:15:01:54:9a:71:01:dc:a8:66:d6:
                    5b:79:e5:4e:30:76:ec:ca:2b:4a:b1:72:0c:0b:e8:
                    99:00:53:0c:47:e9:ae:33:6b:9d:4a:7d:88:2e:d7:
                    f4:2b:6c:cb:37:42:cb:11:24:bc:82:20:f2:bf:ae:
                    0d:42:d5:e6:15:c6:90:5d:62:e2:a5:5f:2e:71:a5:
                    d0:9d:50:c7:c7:94:c3:93:87:68:02:4f:71:83:34:
                    5e:8d:f6:1c:93:e4:7a:86:fd:ce:03:e0:5c:4c:e9:
                    50:c6:c4:1f:91:40:f7:e4:b8:4d:e7:b7:ad:c2:f8:
                    1f:3f:17:d4:49:f2:93:c1:9e:ea:49:f1:7f:9a:c6:
                    05:da:f5:41:48:5f:b2:a1:7b:b7:5b:78:27:44:b3:
                    d9:fc:72:db:69:94:97:ad:4b:6c:97:0c:a2:08:4e:
                    7c:fa:08:55:ff:34:91:24:c6:3d:4d:7b:66:4b:00:
                    2d:55:5e:b6:9b:d5:42:5e:4a:29:18:ce:2b:e8:6c:
                    18:a2:d0:23:85:a0:0f:7c:a5:b6:fa:a4:cb:5b:ee:
                    61:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0A:8B:71:72:ED:D7:5D:E5:60:1B:17:9A:A8:B6:A4:10:B1:75:4C
            X509v3 Authority Key Identifier:
                keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3134382e312e302f32342d3234203d3e2039333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.148.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:7a:8f:bb:7b:53:c1:af:96:7e:43:e2:df:bf:35:12:37:8a:
         f7:22:e9:f5:18:9f:df:6b:48:59:1c:c6:f8:a5:c4:8c:8f:3c:
         f1:e1:a1:14:93:dd:ad:ad:c2:4a:c1:21:81:22:da:b2:3c:51:
         6d:96:ab:ce:99:17:4a:72:db:c5:1e:18:1c:af:8e:e3:c5:fd:
         7b:3f:b9:e7:3c:f8:32:7b:f6:03:a7:13:fd:73:02:f0:56:ff:
         bc:9b:39:30:6c:fc:0a:e3:bb:3c:d6:50:31:8f:1a:99:00:d9:
         79:25:5b:5d:60:47:4d:67:3d:37:84:b7:6a:ec:e8:d1:ad:2d:
         9a:10:6b:da:a0:28:d2:4f:63:89:05:5b:e3:12:0e:19:b5:32:
         12:1c:ef:37:ce:14:83:53:d4:66:ba:58:4d:69:e8:6c:44:01:
         be:7b:97:79:f4:b3:0c:b6:b3:60:f9:50:a2:92:9c:a9:a3:5a:
         e1:dd:dc:eb:12:48:14:d6:e8:cc:5a:8a:e9:1e:18:ca:24:37:
         36:ce:1d:a7:01:78:0d:8b:7f:43:8f:b0:76:6c:44:95:ff:bd:
         d7:50:6a:0a:47:5b:7c:1c:0b:86:f2:d8:ee:26:52:90:49:a6:
         6c:33:27:b9:43:79:ad:67:c1:a8:ec:c0:32:a1:46:ff:c3:71:
         50:49:3a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:53:31 2026 by rpki-client