Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3132382e302f32302d3230203d3e203536303438.roa
File:                     3231312e3134342e3132382e302f32302d3230203d3e203536303438.roa (raw, json)
Hash identifier:          HXTJj60hda7j1FEt/mH56GKp28ZLlvbjD7DZ1Ndpkow=
Subject key identifier:   2C:BB:76:CC:8D:EF:35:8A:21:58:74:FF:87:BC:42:44:AE:09:10:2B
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       06C190DA411B6E8211FBEBDCDFC6F2CCB65F6498
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3132382e302f32302d3230203d3e203536303438.roa
Signing time:             Fri 18 Sep 2026 02:58:50 +0000
ROA not before:           Fri 18 Sep 2026 02:53:50 +0000
ROA not after:            Fri 17 Sep 2027 02:58:50 +0000
asID:                     56048
IP address blocks:        211.144.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 17:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c1:90:da:41:1b:6e:82:11:fb:eb:dc:df:c6:f2:cc:b6:5f:64:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Sep 18 02:53:50 2026 GMT
            Not After : Sep 17 02:58:50 2027 GMT
        Subject: CN=2CBB76CC8DEF358A215874FF87BC4244AE09102B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:14:39:39:c2:b1:07:68:20:b0:2d:36:28:b1:
                    4b:6e:cd:1f:6f:6c:ce:a0:f9:8e:fe:cf:f5:f6:86:
                    79:11:ed:6e:c9:8d:85:bc:2c:7a:58:9a:e9:0b:c7:
                    e3:0c:1b:5e:ab:41:51:28:50:70:de:21:1f:0e:73:
                    fd:93:f7:27:7b:ae:cb:e5:0a:91:fa:e4:34:22:38:
                    45:73:9c:04:c7:ad:27:0f:d5:cd:f2:27:04:89:e3:
                    69:39:67:a4:8e:e6:53:ac:f1:69:13:19:cb:5a:1d:
                    92:b0:9e:8c:26:ba:1b:dd:5c:9f:04:8b:88:e7:23:
                    7a:3f:c4:64:c3:34:40:09:56:07:2f:9c:0a:22:ed:
                    1e:17:0d:ad:67:b3:a2:93:11:e3:12:54:6b:34:d7:
                    4b:7c:e4:58:f1:76:ad:5e:7f:f5:e5:22:47:93:9b:
                    74:ca:21:21:11:f6:4f:10:e4:af:9e:9b:90:ee:20:
                    6c:56:91:ef:2c:30:1b:b6:b0:60:0f:75:4d:a7:cd:
                    a9:ed:22:ee:ce:83:6a:d0:41:e6:e5:ec:73:e0:3d:
                    13:91:16:12:22:fe:af:84:77:6d:9c:9c:55:a9:b2:
                    97:7e:84:1e:42:1d:6b:df:76:ec:fd:07:63:25:e8:
                    f1:b7:60:03:e9:ae:e8:a2:92:b8:c1:00:c8:b3:88:
                    a1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BB:76:CC:8D:EF:35:8A:21:58:74:FF:87:BC:42:44:AE:09:10:2B
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3132382e302f32302d3230203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.144.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         48:a1:1a:14:f0:7f:1c:2e:83:8f:56:d6:5c:ac:c6:a4:b7:a3:
         03:6c:3c:9b:d0:c5:37:d1:eb:ca:72:aa:8c:38:13:11:fc:91:
         8f:1a:a9:1d:f6:05:d6:ce:7d:56:47:71:78:76:09:d0:d2:66:
         67:15:4e:c3:bd:ab:f1:c4:33:f1:1f:c2:52:a3:73:f7:45:43:
         c5:ae:1c:56:2e:c6:43:1a:48:db:6c:9d:34:37:fb:f5:54:55:
         41:33:28:9d:4b:88:48:db:97:67:81:ee:3f:39:1d:4c:f6:02:
         8f:c5:06:1d:9f:44:e8:48:da:ad:28:ea:cd:87:d9:b5:b6:32:
         0b:45:cc:49:7a:41:67:93:58:50:1f:7b:cd:8b:69:d9:64:47:
         44:95:fd:4c:ac:45:81:e7:53:95:60:7b:2f:83:cb:64:7a:af:
         3a:a6:a0:5a:22:8d:5c:66:9f:f5:ca:2f:e4:c5:ba:11:52:30:
         9a:3a:b4:99:e7:7a:81:93:fe:70:09:88:a0:12:ab:3a:c5:51:
         cc:df:b8:c1:7f:14:20:da:37:ed:99:51:8c:3d:41:47:32:8d:
         cd:09:b1:77:44:f6:67:3a:0a:fc:28:b6:1c:60:a1:f1:07:ff:
         a6:32:0c:d4:47:89:d9:16:ba:91:a1:45:20:e9:68:77:c6:f8:
         f6:e7:19:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:19:07 2026 by rpki-client