Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3132382e302f31392d3139203d3e2039383131.roa
File:                     3231312e3134342e3132382e302f31392d3139203d3e2039383131.roa (raw, json)
Hash identifier:          4N7TwW74YzyRsjyCcdCpRXRxOKor+uSWCXTEUXDl2UU=
Subject key identifier:   2E:1F:BA:1F:AB:4A:D8:BA:F4:A6:39:37:F6:76:C0:39:D2:1C:75:F9
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       6FCE7F351D3521CA94FD107782CD0F21ECD70FBC
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3132382e302f31392d3139203d3e2039383131.roa
Signing time:             Wed 03 Jun 2026 08:31:14 +0000
ROA not before:           Wed 03 Jun 2026 08:26:14 +0000
ROA not after:            Wed 02 Jun 2027 08:31:14 +0000
asID:                     9811
IP address blocks:        211.144.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ce:7f:35:1d:35:21:ca:94:fd:10:77:82:cd:0f:21:ec:d7:0f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Jun  3 08:26:14 2026 GMT
            Not After : Jun  2 08:31:14 2027 GMT
        Subject: CN=2E1FBA1FAB4AD8BAF4A63937F676C039D21C75F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d5:67:80:e9:c1:38:8f:cc:fc:74:05:22:f8:
                    5d:03:31:db:1f:4d:b1:94:b7:61:87:91:d9:cc:5e:
                    01:64:31:b9:b6:af:50:ec:b2:70:b0:7f:52:36:7a:
                    48:5c:51:65:4b:89:ef:cb:0a:07:75:1a:9a:a2:15:
                    b7:8b:4d:2f:6a:6a:be:94:62:ee:b1:07:23:3f:9b:
                    1c:4c:da:34:44:33:08:e1:8b:37:85:1a:19:de:41:
                    e6:22:de:a9:8d:a8:c0:bb:76:23:59:8c:03:af:26:
                    96:59:fd:17:87:90:b7:8a:fb:da:4c:1d:07:34:1c:
                    11:87:39:81:a8:77:7b:79:e6:a9:be:40:c2:e5:92:
                    65:30:cf:29:c9:66:4d:ee:3c:f6:89:c1:93:45:dd:
                    26:97:6e:42:48:9f:44:d9:5c:f4:ad:57:a0:df:de:
                    10:96:a4:9d:68:6b:7b:05:3b:ca:c6:55:2e:bf:6d:
                    95:c8:da:f3:f8:fe:a5:80:e0:ae:ab:73:7d:97:c8:
                    74:53:b6:43:71:20:35:ff:1f:70:9e:f5:ce:b9:42:
                    f4:f3:52:01:5c:af:ed:05:a0:0d:fc:e2:8a:fa:71:
                    6b:a0:44:61:07:24:e3:ff:be:3a:6b:dc:8b:4c:5f:
                    a9:9f:ef:d8:10:3a:25:95:80:bd:30:e7:54:a4:0b:
                    c3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:1F:BA:1F:AB:4A:D8:BA:F4:A6:39:37:F6:76:C0:39:D2:1C:75:F9
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3132382e302f31392d3139203d3e2039383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.144.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6c:50:3e:6e:7c:ed:9b:cd:b4:e7:77:a0:f2:af:ac:87:ee:05:
         20:cd:7d:52:69:2f:94:cf:c6:3d:e4:89:a1:da:02:7b:06:5e:
         f9:60:4a:7c:1e:1f:d7:68:5e:bc:73:37:ed:54:8d:53:95:83:
         cb:b1:c8:b0:b0:e5:08:fc:e1:96:54:69:bd:39:74:0d:ed:4f:
         2d:4d:59:eb:d5:d3:60:ea:9c:e3:aa:41:db:e0:4d:c4:fa:47:
         84:95:6f:ed:58:55:25:0f:ce:51:f9:8c:8c:2e:93:21:7e:ae:
         af:1f:c5:fd:a3:6f:91:f2:3f:0f:27:ac:49:76:a2:0f:f3:18:
         d1:43:92:a7:1e:42:f9:e2:4f:e6:69:7d:81:f1:ba:96:b9:77:
         9b:62:15:07:35:9d:c7:80:23:62:4b:09:3a:1e:04:d4:af:e6:
         d3:1e:ea:65:10:9b:bc:48:46:b4:bb:5d:e6:df:75:5e:03:b6:
         7d:75:1f:1a:4c:5b:02:74:34:2f:e6:3c:d9:eb:c7:48:4d:95:
         2b:b7:b9:03:60:48:44:31:24:7f:0a:e4:15:8f:c0:1d:15:77:
         0e:2a:fc:24:74:ce:98:00:d4:95:dd:ae:b2:a2:96:95:f0:49:
         ba:c1:b0:22:86:9b:db:ec:3c:11:c5:66:8d:58:95:8f:54:b7:
         00:b0:f5:97
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:30 2026 by rpki-client