Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111933397845934097/0/3231382e39382e3130302e302f32342d3234203d3e2039383038.roa
File:                     3231382e39382e3130302e302f32342d3234203d3e2039383038.roa (raw, json)
Hash identifier:          TGs0EgvMgk4tCbcwLlFAmun9IaXnfwfZtKHOrbHbvxA=
Subject key identifier:   B6:A7:29:B0:8D:C2:66:61:C3:FD:9C:AE:0F:E8:44:D4:7B:85:8B:FE
Certificate issuer:       /CN=E75349FBEA39CFED65BB280A32055EB716679089
Certificate serial:       74B1B03BEBCD6821CA5F72C3B18A536A1F6955EB
Authority key identifier: E7:53:49:FB:EA:39:CF:ED:65:BB:28:0A:32:05:5E:B7:16:67:90:89
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E75349FBEA39CFED65BB280A32055EB716679089.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/3231382e39382e3130302e302f32342d3234203d3e2039383038.roa
Signing time:             Fri 12 Jun 2026 09:51:35 +0000
ROA not before:           Fri 12 Jun 2026 09:46:35 +0000
ROA not after:            Fri 11 Jun 2027 09:51:35 +0000
asID:                     9808
IP address blocks:        218.98.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/E75349FBEA39CFED65BB280A32055EB716679089.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/E75349FBEA39CFED65BB280A32055EB716679089.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E75349FBEA39CFED65BB280A32055EB716679089.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 09:42:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b1:b0:3b:eb:cd:68:21:ca:5f:72:c3:b1:8a:53:6a:1f:69:55:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E75349FBEA39CFED65BB280A32055EB716679089
        Validity
            Not Before: Jun 12 09:46:35 2026 GMT
            Not After : Jun 11 09:51:35 2027 GMT
        Subject: CN=B6A729B08DC26661C3FD9CAE0FE844D47B858BFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:63:2b:bf:d8:0f:3f:c7:f1:fc:21:ae:70:19:
                    ce:02:50:d9:23:c1:13:09:7e:96:e7:4d:79:d9:15:
                    b6:fb:df:34:22:24:88:f8:71:fc:85:f9:cb:5f:31:
                    2a:ad:c3:93:6c:b7:aa:47:57:fb:11:c2:41:9f:72:
                    05:21:08:0d:74:96:93:55:1c:16:97:51:6e:4a:8b:
                    ec:45:43:bc:cd:0e:89:30:08:64:a9:89:d8:58:ae:
                    72:0e:f8:df:30:52:8b:1c:70:64:06:14:4b:dc:9a:
                    33:7f:2a:9c:29:4a:c9:db:13:46:b4:d6:c2:2c:cb:
                    2e:fc:c6:85:fe:9c:0a:19:67:e0:2c:51:57:4e:9a:
                    1a:5e:50:a7:46:ea:8f:0a:a1:ae:ca:cb:1a:39:70:
                    c6:75:d9:b7:dd:39:d2:4b:fb:a3:6c:82:10:26:57:
                    41:70:8e:63:04:df:fb:3b:d3:60:fe:13:ff:c5:48:
                    5f:67:d5:64:8a:6f:24:16:83:7a:4f:65:ef:4f:9c:
                    f1:5d:15:28:b4:f9:00:07:8e:38:58:08:74:77:86:
                    36:e0:20:55:32:95:ac:de:a6:52:fe:61:4a:48:c9:
                    f7:97:da:a3:d9:76:f1:db:c0:1a:ff:15:79:36:e1:
                    d8:29:f3:4e:58:77:bf:20:d7:d9:c0:b3:b7:0e:50:
                    17:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A7:29:B0:8D:C2:66:61:C3:FD:9C:AE:0F:E8:44:D4:7B:85:8B:FE
            X509v3 Authority Key Identifier:
                keyid:E7:53:49:FB:EA:39:CF:ED:65:BB:28:0A:32:05:5E:B7:16:67:90:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/E75349FBEA39CFED65BB280A32055EB716679089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E75349FBEA39CFED65BB280A32055EB716679089.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/3231382e39382e3130302e302f32342d3234203d3e2039383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.98.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:02:da:e4:e8:aa:82:f5:90:f0:c7:a8:c9:a8:40:4b:a9:14:
         78:d7:42:d5:63:1a:01:07:e7:d8:44:f6:f6:26:ff:1c:1a:2c:
         e6:16:cd:2a:bf:b0:fb:d7:c3:5f:c2:a1:9a:b3:b1:c7:10:22:
         77:00:31:4c:09:b4:5c:b4:c3:63:38:b5:68:dc:15:e4:35:bd:
         e3:b6:e8:21:91:3b:f4:9a:fe:25:93:be:ca:4b:6c:c0:ac:84:
         ab:a6:8f:a9:9e:7c:c3:5e:49:cd:16:8f:74:55:ae:99:29:f8:
         48:0c:e2:c8:e2:78:9f:0d:13:ba:d6:75:5f:a1:01:bf:fe:b2:
         bd:91:46:41:ef:17:08:be:4e:36:37:03:63:39:36:a2:9c:7a:
         23:82:50:a8:2f:ac:e3:17:8c:53:6e:74:8a:c9:5b:b3:26:55:
         35:3b:8a:b2:00:1d:94:2e:58:3c:19:b1:9f:70:e2:42:ab:4f:
         cd:46:64:da:58:a2:79:4a:57:e5:ea:75:ba:27:7d:6c:51:5c:
         6d:da:a5:bf:71:08:3c:16:1a:8d:18:c3:02:b5:e1:65:b8:4b:
         f7:d0:a8:d1:a8:90:aa:ff:00:7d:4a:d4:c7:ec:04:06:b3:e4:
         7f:99:14:89:8e:19:67:4a:7f:a9:1f:bc:ba:3f:61:76:24:05:
         e5:84:cf:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:23:06 2026 by rpki-client