Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3134342e302f32302d3230203d3e2039383131.roa
File:                     3231312e3134342e3134342e302f32302d3230203d3e2039383131.roa (raw, json)
Hash identifier:          5RVhJMumYI/t4ulX5MN36BqUOwAt3iCsxxFAeY0oX9E=
Subject key identifier:   81:0E:AE:D9:47:83:B0:47:9E:05:F4:63:6A:5B:E6:0F:8E:5F:19:3B
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       0ED7F2DA13BEB9C6BCDC282603177D6199A11330
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3134342e302f32302d3230203d3e2039383131.roa
Signing time:             Wed 03 Jun 2026 08:15:09 +0000
ROA not before:           Wed 03 Jun 2026 08:10:09 +0000
ROA not after:            Wed 02 Jun 2027 08:15:09 +0000
asID:                     9811
IP address blocks:        211.144.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d7:f2:da:13:be:b9:c6:bc:dc:28:26:03:17:7d:61:99:a1:13:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Jun  3 08:10:09 2026 GMT
            Not After : Jun  2 08:15:09 2027 GMT
        Subject: CN=810EAED94783B0479E05F4636A5BE60F8E5F193B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:75:8f:08:92:6f:2f:7b:e6:23:d3:27:35:57:
                    37:6f:1c:91:2b:da:71:aa:53:ab:bd:82:4d:78:07:
                    56:66:e6:93:0f:84:0e:37:55:67:31:55:4e:46:c8:
                    5c:40:02:1e:fe:90:ae:ef:aa:a5:4e:7a:c4:85:d7:
                    94:fe:a5:be:3c:85:ba:75:f8:c3:d7:c7:40:d3:f1:
                    72:e4:79:53:8c:fb:a6:f5:09:9b:e7:4a:be:67:52:
                    a6:cd:98:b8:44:4b:87:9e:90:c1:a4:f5:9d:a1:f2:
                    a4:8e:61:20:c5:c9:51:f8:64:21:1f:c1:c6:65:e3:
                    2d:47:74:65:9e:fd:bf:d4:a2:58:1f:38:26:83:a1:
                    76:b4:4d:21:fb:8d:ed:7f:da:43:ff:63:b9:85:1a:
                    c5:6d:4b:93:50:0d:52:5a:96:4d:c3:b3:c9:37:8e:
                    13:af:31:ad:2e:ec:85:52:d2:ec:e6:40:c9:43:fe:
                    f4:f9:0f:03:6d:13:6b:e1:48:4d:cc:da:55:4d:d0:
                    dc:be:fb:ce:6a:5e:19:05:59:0e:30:bf:2a:51:d8:
                    43:eb:7f:46:b9:a4:48:98:18:ca:ed:a1:32:04:02:
                    6c:5d:f0:8a:59:4d:a7:f8:ef:2c:89:e1:5d:d0:8b:
                    0a:09:a1:b6:8e:0d:46:bb:ae:e2:5f:7f:da:cb:0b:
                    1c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0E:AE:D9:47:83:B0:47:9E:05:F4:63:6A:5B:E6:0F:8E:5F:19:3B
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3134342e302f32302d3230203d3e2039383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.144.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3b:2b:bf:df:34:e0:22:00:8b:ba:f6:94:8e:6d:30:e0:84:96:
         da:43:7b:c5:be:41:f1:f4:25:29:c1:0d:f2:0a:30:7d:31:d3:
         92:c0:de:f1:97:69:9a:c0:de:b0:28:bb:4d:b9:18:64:5b:92:
         ef:17:96:c2:58:54:48:70:fc:f4:56:e1:c5:0e:60:19:ff:77:
         08:ce:37:50:db:b8:e1:8f:04:89:50:1a:95:76:c4:5e:76:32:
         d4:25:92:26:85:21:c2:93:15:11:a5:02:f3:79:f3:03:fa:53:
         1c:85:e0:4f:d6:7a:11:41:0d:15:a0:67:3d:0a:72:d9:50:55:
         52:f2:03:1d:49:a7:91:34:77:09:b6:99:8e:9a:3b:9f:2c:46:
         e4:6f:e6:6c:a4:ed:20:c9:e4:7a:5e:07:70:b6:e6:fd:05:3d:
         49:b4:15:68:1a:0d:f5:34:a6:8b:9e:94:0e:cb:ce:de:43:64:
         2e:12:f4:44:50:b7:39:16:17:f4:c2:45:7b:55:77:d6:6e:b8:
         0e:36:f1:a3:1f:75:73:da:59:ab:7d:7f:9b:85:d8:e6:ec:74:
         29:2b:f0:7a:ab:9f:e6:a7:36:bc:7f:8e:cd:ab:4b:3f:ec:d2:
         5f:0a:1a:ad:81:bc:20:61:d9:05:a6:cd:b4:9e:15:bf:2d:c2:
         16:4d:46:a4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:41 2026 by rpki-client