Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3132382e302f32302d3230203d3e2039383131.roa
File:                     3231312e3134342e3132382e302f32302d3230203d3e2039383131.roa (raw, json)
Hash identifier:          qpBaCO2YvBnMyvylBgRUNJkusxaEfMpdBGjEQ1jxgH4=
Subject key identifier:   B1:F7:C3:05:33:0D:E4:FA:A4:06:E4:86:3F:B5:57:19:83:54:45:6A
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       0ECBEEA7A27A17E20C64549CDC48D024036930C1
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3132382e302f32302d3230203d3e2039383131.roa
Signing time:             Wed 03 Jun 2026 08:12:37 +0000
ROA not before:           Wed 03 Jun 2026 08:07:37 +0000
ROA not after:            Wed 02 Jun 2027 08:12:37 +0000
asID:                     9811
IP address blocks:        211.144.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cb:ee:a7:a2:7a:17:e2:0c:64:54:9c:dc:48:d0:24:03:69:30:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Jun  3 08:07:37 2026 GMT
            Not After : Jun  2 08:12:37 2027 GMT
        Subject: CN=B1F7C305330DE4FAA406E4863FB557198354456A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:be:ca:91:80:fa:71:36:24:a6:f9:44:b8:09:
                    fa:eb:5c:72:6f:4f:90:a0:b3:15:43:f4:a1:f0:76:
                    21:ca:01:8e:6c:3b:3e:f6:e3:a5:aa:8b:b2:2d:22:
                    80:94:b0:27:73:ed:e0:28:39:a8:0f:fa:8d:33:b4:
                    1b:0c:d8:28:83:9c:ad:91:8f:ba:42:5c:2a:0a:be:
                    a7:80:25:df:80:ec:53:47:ec:b9:21:ec:6a:07:f9:
                    67:f0:40:21:fc:6d:6c:03:d4:8e:65:02:71:36:a3:
                    d5:68:7f:27:ed:f8:ce:e2:43:ed:fd:2e:cb:8a:0e:
                    de:e1:8b:df:b4:ab:cf:06:3e:0b:2d:a0:c2:be:cc:
                    9e:5e:15:22:40:c4:3f:a3:4f:17:ca:46:96:a6:3e:
                    7e:74:87:94:c9:ad:d8:eb:35:7d:8a:74:0b:31:4f:
                    0f:cf:0e:19:05:c7:c4:d4:4a:0d:13:a6:d0:d1:e2:
                    47:de:2a:3f:af:b3:69:11:30:91:14:4b:87:96:b6:
                    fd:21:d4:b5:b3:58:1d:70:85:fa:bc:81:4d:39:6a:
                    6f:ae:50:0a:ce:13:58:0d:8c:43:39:a0:64:ac:42:
                    87:3c:15:80:41:69:eb:5f:2a:ac:9f:5f:7c:a6:d0:
                    a0:5c:57:14:66:6e:9f:ae:3c:56:25:eb:d6:e3:93:
                    27:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F7:C3:05:33:0D:E4:FA:A4:06:E4:86:3F:B5:57:19:83:54:45:6A
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3132382e302f32302d3230203d3e2039383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.144.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3a:61:01:55:2e:d5:e4:7b:b2:d4:62:01:b3:7d:3c:e8:85:8c:
         3e:1a:01:a0:52:b8:29:36:e9:da:64:36:ae:de:54:5c:d1:28:
         70:c9:a2:76:d2:46:fa:c9:80:db:07:f3:7b:ba:fb:96:d4:dc:
         85:22:3b:a8:54:0b:82:e4:1e:75:91:16:45:a4:5b:d0:21:49:
         ea:d3:15:6f:14:69:ef:eb:0d:f7:a8:7a:ca:ea:17:54:cf:6e:
         37:0f:ce:0f:bc:3d:43:f9:06:82:61:95:10:78:fa:f3:fe:7b:
         2a:a0:b3:61:c4:1f:a1:bd:12:03:a5:3e:49:cd:34:8f:cd:bb:
         37:d2:fd:36:cb:2a:f9:15:a5:e5:c8:34:8c:0c:cb:af:a8:c7:
         ad:92:89:0a:6b:e1:f1:17:61:44:e0:70:bb:e0:f2:2c:0e:a3:
         2f:2d:06:88:a3:4e:92:a6:bb:4c:63:72:22:69:d9:18:7b:b6:
         3c:99:05:c7:fb:fa:e2:08:ab:76:ac:e4:36:71:cb:cd:10:03:
         dc:42:14:20:8f:6d:e6:4e:c2:8c:9c:2d:72:91:5e:f0:c5:f4:
         2e:d4:61:37:4c:d1:25:82:a4:f2:d1:95:bc:4f:b2:b3:ae:53:
         19:f9:50:22:ab:5a:21:56:cf:9d:6a:b5:b0:15:fc:b8:0c:60:
         0b:61:fa:07
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:42 2026 by rpki-client