Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3132312e34372e302e302f31362d3136203d3e2039383131.roa
File:                     3132312e34372e302e302f31362d3136203d3e2039383131.roa (raw, json)
Hash identifier:          D8cQ3I2VA+T4/Qp4npaiJz97mbS1GL995BOxbpc3rQA=
Subject key identifier:   B4:41:E7:85:97:E5:F8:50:CD:E0:DE:2B:7C:42:9B:E7:4A:D8:61:4C
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       7D12557AC70194C6C17F116050DA4FBE7FB79838
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3132312e34372e302e302f31362d3136203d3e2039383131.roa
Signing time:             Wed 03 Jun 2026 08:09:23 +0000
ROA not before:           Wed 03 Jun 2026 08:04:23 +0000
ROA not after:            Wed 02 Jun 2027 08:09:23 +0000
asID:                     9811
IP address blocks:        121.47.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:12:55:7a:c7:01:94:c6:c1:7f:11:60:50:da:4f:be:7f:b7:98:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Jun  3 08:04:23 2026 GMT
            Not After : Jun  2 08:09:23 2027 GMT
        Subject: CN=B441E78597E5F850CDE0DE2B7C429BE74AD8614C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f1:44:a3:44:a0:2d:fe:e0:27:ad:a0:1f:84:
                    49:4b:1b:af:f9:1a:ab:86:3e:ed:f4:b9:cc:a8:cf:
                    af:64:02:af:ec:92:05:f7:af:3a:7b:61:db:a2:1a:
                    5e:64:33:5c:51:c2:81:5b:64:3f:aa:bd:25:50:11:
                    04:62:78:d5:83:08:30:6a:00:f8:4a:a6:4b:f8:2a:
                    e3:c5:04:00:77:e8:8a:a1:01:2c:57:29:9b:b2:53:
                    a2:2c:18:62:da:98:4a:ff:03:bf:f5:ed:07:ed:f2:
                    3a:06:77:50:7f:60:b0:f5:35:11:31:5b:0b:7c:5a:
                    3d:73:d5:63:55:14:26:6f:ab:54:2e:89:9d:e3:51:
                    b9:76:1f:70:5d:ae:e6:34:c7:a6:87:5e:ec:93:eb:
                    09:61:4b:50:99:de:8d:84:de:76:a0:d4:65:41:33:
                    12:3f:eb:0f:c4:d5:77:ee:90:25:1c:ac:d2:ff:94:
                    d8:9d:f3:34:b4:dc:df:58:97:e0:c4:b4:97:a3:32:
                    c7:b8:6e:a9:e6:c7:df:a0:d7:9a:30:4d:3a:9d:66:
                    d1:46:89:9f:9c:3c:f3:9c:e5:fc:3c:46:31:38:b1:
                    f1:03:99:a8:40:a9:36:21:ff:da:2a:9e:a4:4c:4a:
                    aa:08:b0:2b:a8:47:be:3f:6e:a7:35:1f:09:97:0d:
                    32:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:41:E7:85:97:E5:F8:50:CD:E0:DE:2B:7C:42:9B:E7:4A:D8:61:4C
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3132312e34372e302e302f31362d3136203d3e2039383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.47.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         64:79:82:53:a2:51:27:ea:9a:6f:82:11:61:64:2d:61:d7:57:
         69:03:0e:57:89:2d:45:53:74:69:73:f8:14:28:fc:3f:43:71:
         aa:95:bc:63:92:0f:02:7c:27:3a:a6:fa:95:d4:5c:8f:b2:d1:
         89:10:20:89:36:47:3c:d2:7c:d1:29:b1:0d:02:c0:13:a6:ce:
         3a:93:97:be:69:1f:83:b2:60:93:77:42:15:2d:38:db:41:3b:
         40:a2:6c:a6:71:f0:3b:fa:0a:62:b7:f9:74:dc:0c:96:20:c2:
         59:df:26:3d:c8:c5:cd:8a:c6:8c:74:23:28:69:49:6a:5f:43:
         87:0f:a2:b4:9f:27:e0:a2:6e:ad:bf:8c:db:de:f4:ab:bd:5a:
         04:9a:78:49:6b:2c:c7:c2:af:3e:dd:cb:45:97:fc:c3:bc:3d:
         c5:27:16:9c:22:c2:34:b9:c6:fe:a0:1d:46:2d:24:de:de:24:
         0f:79:8b:26:ac:52:da:e1:1b:34:20:5c:50:3f:85:84:03:e0:
         b3:09:53:bd:a7:9c:ec:d1:2d:eb:88:b0:94:13:07:1e:16:44:
         1a:f8:49:bb:16:07:f0:2c:21:18:aa:5c:4b:5a:3d:1a:36:2d:
         86:08:d8:74:e4:69:3e:2a:7b:a8:9f:b7:4d:b9:58:22:e8:6a:
         5b:98:a4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:47 2026 by rpki-client