Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3230322e3134392e3232342e302f32302d3230203d3e203536303438.roa
File:                     3230322e3134392e3232342e302f32302d3230203d3e203536303438.roa (raw, json)
Hash identifier:          /pYiIefRTvIrOL6HHXv0pBFSc9LIAvp2U4cutlTYE9k=
Subject key identifier:   BD:1E:4C:BB:47:04:F6:3E:42:1E:98:B7:E1:87:B7:59:F4:15:DD:0D
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       2C9DE6AC2B865C798E8A94F63E0687B0C24357E5
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3230322e3134392e3232342e302f32302d3230203d3e203536303438.roa
Signing time:             Fri 18 Sep 2026 02:34:06 +0000
ROA not before:           Fri 18 Sep 2026 02:29:06 +0000
ROA not after:            Fri 17 Sep 2027 02:34:06 +0000
asID:                     56048
IP address blocks:        202.149.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 16:05:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9d:e6:ac:2b:86:5c:79:8e:8a:94:f6:3e:06:87:b0:c2:43:57:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Sep 18 02:29:06 2026 GMT
            Not After : Sep 17 02:34:06 2027 GMT
        Subject: CN=BD1E4CBB4704F63E421E98B7E187B759F415DD0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6c:b9:41:59:44:3b:f7:26:95:53:b5:59:f5:
                    12:56:23:d8:1c:74:8c:47:87:af:87:2c:20:f9:54:
                    8f:5c:32:23:97:4e:58:2e:d8:08:51:a2:e7:e1:ef:
                    c6:bd:0a:b2:de:9e:50:54:4d:5b:74:1e:59:84:6f:
                    aa:73:4d:6f:7b:d6:26:4e:9f:b8:9f:f9:29:db:cb:
                    0e:94:9d:84:f1:0f:5f:9d:1a:61:6a:47:32:cf:74:
                    fa:3e:08:02:b0:98:b6:f4:e7:c4:05:be:ca:85:2e:
                    77:2d:08:ce:8f:5e:04:91:e3:bc:c3:c5:6b:6e:9f:
                    96:da:66:a3:3f:58:cb:b8:0d:cc:05:0c:be:50:4e:
                    22:f2:38:09:8d:f2:3c:a9:f8:c4:c4:15:b1:47:1d:
                    84:be:74:7d:5a:2b:15:f4:60:f1:89:7e:10:53:51:
                    f1:7d:99:5c:cf:a5:8e:73:cd:3f:99:ea:f4:e6:75:
                    6b:0a:11:71:f5:2e:f9:ac:aa:57:61:84:ac:27:42:
                    ad:1f:0a:02:cf:d1:3d:10:23:13:96:8e:df:1a:cd:
                    08:62:3e:32:e5:de:e1:15:2b:c9:60:1b:54:73:68:
                    61:d3:bc:d1:66:48:c5:ef:28:cc:3d:a5:0c:06:61:
                    8e:72:19:a0:31:70:d7:a2:ca:03:7f:fa:e0:a9:26:
                    03:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1E:4C:BB:47:04:F6:3E:42:1E:98:B7:E1:87:B7:59:F4:15:DD:0D
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3230322e3134392e3232342e302f32302d3230203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.149.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         09:f1:8e:57:fd:ba:80:2c:ab:2a:37:ff:99:d2:48:aa:67:17:
         d5:ca:a5:c0:85:3e:70:0e:8e:e1:a0:22:86:c6:a4:4c:14:a7:
         c7:64:f5:d0:ac:17:87:ce:68:3f:41:a1:fe:5e:23:97:6f:59:
         f3:b1:9f:e8:fe:4d:47:76:c7:87:b3:2b:fe:d4:21:83:69:fb:
         a1:01:08:59:d0:52:32:68:b6:92:b2:29:fc:d4:8b:ad:89:7d:
         01:d9:3d:62:4d:ba:82:80:de:28:b4:f3:07:bb:9b:ff:68:a5:
         1f:6f:ee:e6:4c:ad:8c:b1:f0:d5:4c:51:a5:7c:63:7d:92:b9:
         94:11:ee:5c:6d:1c:91:a1:d8:82:bd:31:b7:ba:1d:56:b5:23:
         3f:99:10:aa:39:1f:6e:5d:ee:40:f9:75:4a:8f:c0:d6:a4:31:
         39:32:3f:bf:68:b0:46:61:b9:58:6e:5a:18:3d:32:af:0e:43:
         f1:29:cc:ae:d7:da:1f:13:6e:d7:bf:2e:ac:14:78:2b:20:91:
         b1:d2:e0:f6:42:74:8b:8b:fb:74:9f:79:e6:21:b8:96:cf:15:
         9e:45:7e:91:63:b7:e2:b4:b0:07:f6:60:15:1f:96:3b:9f:ac:
         95:83:75:98:6a:c3:59:48:8b:0e:2b:8e:1e:eb:8c:b0:32:1d:
         73:73:c2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:13:02 2026 by rpki-client