Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111933397845934097/0/3231382e39382e39382e302f32342d3234203d3e2039383038.roa
File:                     3231382e39382e39382e302f32342d3234203d3e2039383038.roa (raw, json)
Hash identifier:          k3fFuuZBHhJ83PsRu/fc0xf5PgMrXje/KHWK1zlDOR4=
Subject key identifier:   6B:D0:F8:44:A9:D9:4D:74:84:5C:53:20:57:7E:A2:27:76:A1:CE:CD
Certificate issuer:       /CN=E75349FBEA39CFED65BB280A32055EB716679089
Certificate serial:       7850737D3BE7340A11ACFF6BE29B2062E27E1B9D
Authority key identifier: E7:53:49:FB:EA:39:CF:ED:65:BB:28:0A:32:05:5E:B7:16:67:90:89
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E75349FBEA39CFED65BB280A32055EB716679089.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/3231382e39382e39382e302f32342d3234203d3e2039383038.roa
Signing time:             Fri 12 Jun 2026 09:51:35 +0000
ROA not before:           Fri 12 Jun 2026 09:46:35 +0000
ROA not after:            Fri 11 Jun 2027 09:51:35 +0000
asID:                     9808
IP address blocks:        218.98.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/E75349FBEA39CFED65BB280A32055EB716679089.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/E75349FBEA39CFED65BB280A32055EB716679089.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E75349FBEA39CFED65BB280A32055EB716679089.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 09:42:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:50:73:7d:3b:e7:34:0a:11:ac:ff:6b:e2:9b:20:62:e2:7e:1b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E75349FBEA39CFED65BB280A32055EB716679089
        Validity
            Not Before: Jun 12 09:46:35 2026 GMT
            Not After : Jun 11 09:51:35 2027 GMT
        Subject: CN=6BD0F844A9D94D74845C5320577EA22776A1CECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cc:76:91:93:f2:fa:a8:f9:cd:83:d0:e5:55:
                    88:d2:3a:51:c6:81:d0:9c:8c:a8:77:b8:da:5d:f2:
                    0b:58:25:ad:46:44:97:4a:88:d9:43:15:95:5c:fd:
                    3d:f6:fd:40:d3:ef:81:b1:a6:88:aa:fd:a4:c3:ed:
                    2e:11:62:b0:bb:8f:c2:de:cd:fc:74:fe:9c:10:30:
                    fc:b8:e9:72:57:e6:5f:c6:de:2f:df:a7:e6:9b:79:
                    77:f3:1b:0c:ad:2a:76:a2:4f:5e:f8:8c:67:d2:79:
                    da:44:36:84:00:82:94:6b:40:19:11:6a:1d:38:4a:
                    04:3b:3c:4b:32:db:1c:11:cc:19:de:cf:85:08:91:
                    65:ef:2a:d4:08:67:05:a1:d9:9a:00:64:5b:1e:0a:
                    e3:60:79:9b:0b:18:80:7a:d8:1c:4c:0b:5b:cb:87:
                    f8:2a:1b:89:3d:97:fb:06:b5:c9:99:81:5f:61:25:
                    bf:7f:f7:ef:f3:51:f9:20:c0:ed:41:4f:c9:41:2d:
                    37:3e:54:a5:db:04:f4:ee:32:45:f4:19:1e:ef:8f:
                    ac:7c:b4:0d:e9:2a:74:a6:fc:d7:4f:94:00:5e:74:
                    ea:1c:07:5c:f5:7f:5e:a3:d5:fc:ab:46:f2:55:ca:
                    00:da:91:60:85:b7:6a:b3:40:29:05:fd:c2:e3:b8:
                    5b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D0:F8:44:A9:D9:4D:74:84:5C:53:20:57:7E:A2:27:76:A1:CE:CD
            X509v3 Authority Key Identifier:
                keyid:E7:53:49:FB:EA:39:CF:ED:65:BB:28:0A:32:05:5E:B7:16:67:90:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/E75349FBEA39CFED65BB280A32055EB716679089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E75349FBEA39CFED65BB280A32055EB716679089.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/3231382e39382e39382e302f32342d3234203d3e2039383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.98.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:f0:db:c6:8b:31:41:9e:85:ce:26:79:1f:51:18:9f:b3:f4:
         d6:8d:69:b4:09:2f:81:f2:73:e5:38:55:22:4a:8b:22:25:88:
         52:da:68:cc:0b:2c:4a:4d:9d:34:88:c0:33:36:34:cc:ef:03:
         96:b9:70:67:bb:a8:07:a3:88:30:b3:93:61:9b:b8:4d:91:ce:
         39:4f:a1:d2:e7:63:76:df:6e:9e:7c:b3:c3:40:13:bc:0f:93:
         31:c3:5e:ce:7f:e4:50:33:ec:c7:63:6f:4d:1a:b4:64:1c:34:
         f0:8e:44:9f:78:30:13:08:26:3d:41:b3:51:bb:54:05:33:a6:
         73:1e:f2:19:5b:4d:8d:f9:62:13:ee:f4:02:c8:fd:0b:31:c5:
         98:0c:d7:44:13:5f:92:3a:b3:fd:4f:8c:c4:00:c9:ab:06:ae:
         70:e0:78:02:a5:7a:ab:c3:75:db:28:c8:52:b1:b7:3e:2b:54:
         8d:71:1d:36:ba:dd:2a:dd:41:1c:bd:6d:b1:e6:fa:45:71:98:
         9b:0e:36:66:11:38:44:62:ab:42:34:37:f4:44:ed:1a:2f:d4:
         d1:a7:5c:ab:5c:82:b5:d4:c8:bc:48:68:57:46:d0:1f:85:72:
         c2:27:18:46:b8:a1:3b:64:33:6e:6b:7f:04:13:7b:36:48:9d:
         63:76:b3:fd
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUeFBzfTvnNAoRrP9r4psgYuJ+G50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc1MzQ5RkJFQTM5Q0ZFRDY1QkIyODBBMzIwNTVFQjcx
NjY3OTA4OTAeFw0yNjA2MTIwOTQ2MzVaFw0yNzA2MTEwOTUxMzVaMDMxMTAvBgNV
BAMTKDZCRDBGODQ0QTlEOTRENzQ4NDVDNTMyMDU3N0VBMjI3NzZBMUNFQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbzHaRk/L6qPnNg9DlVYjSOlHG
gdCcjKh3uNpd8gtYJa1GRJdKiNlDFZVc/T32/UDT74Gxpoiq/aTD7S4RYrC7j8Le
zfx0/pwQMPy46XJX5l/G3i/fp+abeXfzGwytKnaiT174jGfSedpENoQAgpRrQBkR
ah04SgQ7PEsy2xwRzBnez4UIkWXvKtQIZwWh2ZoAZFseCuNgeZsLGIB62BxMC1vL
h/gqG4k9l/sGtcmZgV9hJb9/9+/zUfkgwO1BT8lBLTc+VKXbBPTuMkX0GR7vj6x8
tA3pKnSm/NdPlABedOocB1z1f16j1fyrRvJVygDakWCFt2qzQCkF/cLjuFufAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUa9D4RKnZTXSEXFMgV36iJ3ahzs0wHwYDVR0j
BBgwFoAU51NJ++o5z+1luygKMgVetxZnkIkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MTkzMzM5Nzg0NTkzNDA5Ny8wL0U3NTM0OUZCRUEzOUNGRUQ2NUJCMjgwQTMyMDU1
RUI3MTY2NzkwODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTc1MzQ5RkJFQTM5Q0ZFRDY1QkIyODBBMzIwNTVFQjcxNjY3OTA4OS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTExOTMzMzk3ODQ1OTM0MDk3LzAvMzIzMTM4MmUzOTM4
MmUzOTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzkzODMwMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADaYmIwDQYJKoZIhvcNAQELBQADggEBAHTw28aLMUGehc4meR9RGJ+z9NaNabQJ
L4Hyc+U4VSJKiyIliFLaaMwLLEpNnTSIwDM2NMzvA5a5cGe7qAejiDCzk2GbuE2R
zjlPodLnY3bfbp58s8NAE7wPkzHDXs5/5FAz7Mdjb00atGQcNPCORJ94MBMIJj1B
s1G7VAUzpnMe8hlbTY35YhPu9ALI/QsxxZgM10QTX5I6s/1PjMQAyasGrnDgeAKl
eqvDddsoyFKxtz4rVI1xHTa63SrdQRy9bbHm+kVxmJsONmYROERiq0I0N/RE7Rov
1NGnXKtcgrXUyLxIaFdG0B+FcsInGEa4oTtkM25rfwQTezZInWN2s/0=
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:02:52 2026 by rpki-client