Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3134342e302f32322d3232203d3e2039383131.roa
File:                     3231312e3134342e3134342e302f32322d3232203d3e2039383131.roa (raw, json)
Hash identifier:          zVqiNKgx99ebMY70S3rkf6VbNfweeLRRcv8vpanLqJE=
Subject key identifier:   9F:94:E6:F9:CC:91:D6:CD:40:93:4E:5B:B7:5A:AB:4D:56:5A:AE:85
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       50F57793C4BC2FC7228D846A44DF7B7965E68CEA
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3134342e302f32322d3232203d3e2039383131.roa
Signing time:             Wed 03 Jun 2026 08:14:37 +0000
ROA not before:           Wed 03 Jun 2026 08:09:37 +0000
ROA not after:            Wed 02 Jun 2027 08:14:37 +0000
asID:                     9811
IP address blocks:        211.144.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f5:77:93:c4:bc:2f:c7:22:8d:84:6a:44:df:7b:79:65:e6:8c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Jun  3 08:09:37 2026 GMT
            Not After : Jun  2 08:14:37 2027 GMT
        Subject: CN=9F94E6F9CC91D6CD40934E5BB75AAB4D565AAE85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:14:11:c6:2a:ce:69:ca:35:1f:f8:9a:85:a5:
                    82:fd:fb:41:66:0c:03:a0:ce:44:14:9e:18:ef:10:
                    35:f1:67:dd:d3:0c:8d:83:48:df:74:8d:1f:0c:f5:
                    97:96:42:11:67:ef:df:f8:3c:fe:7e:08:93:01:8a:
                    cf:32:9b:a6:64:be:53:f9:d0:4a:3c:7e:6e:be:ec:
                    33:96:4d:55:68:cf:21:76:5e:74:3f:a1:66:63:06:
                    44:7b:b1:3e:3d:d0:d4:bc:cb:60:88:c2:ca:2d:71:
                    ff:cc:a5:d2:20:8c:fb:6b:db:ff:6d:bb:30:08:72:
                    87:be:86:41:b9:ee:f9:a3:a6:a8:a9:92:ac:ba:a2:
                    86:9f:ac:36:20:b0:c8:f0:5a:86:7c:4f:5d:f4:17:
                    ef:6d:2e:20:b4:a3:54:8f:ff:97:47:de:0e:52:35:
                    f0:b3:27:4f:64:50:e3:9e:e6:34:a6:3a:eb:be:37:
                    2f:00:9d:ca:36:cd:32:b8:2d:03:fb:0e:29:93:22:
                    18:53:76:ff:ac:a9:fc:ec:f5:8b:eb:9d:ee:b6:a3:
                    48:b3:73:44:4b:e0:44:b0:c6:3b:e0:66:2c:1f:00:
                    20:73:2c:3f:e0:7c:f2:e5:27:46:d5:bf:f0:cf:f9:
                    c3:26:2e:94:0f:97:4c:b9:81:52:9f:82:61:6a:43:
                    10:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:94:E6:F9:CC:91:D6:CD:40:93:4E:5B:B7:5A:AB:4D:56:5A:AE:85
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3134342e302f32322d3232203d3e2039383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.144.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:a5:0c:ee:df:80:f6:5b:8c:98:0d:42:fe:4f:71:96:4a:51:
         e0:73:6a:36:8d:51:9e:32:3c:02:a4:f0:95:f4:c8:47:c4:5e:
         17:96:47:c8:79:f7:42:15:f4:6f:03:37:cc:74:08:fd:c0:83:
         b4:80:6f:4e:a1:39:c4:7f:32:0d:21:4a:db:ae:93:75:2f:ae:
         d8:b9:17:2c:f0:c2:5e:f8:6a:f4:7a:b2:34:38:47:4f:f5:ff:
         07:5c:37:84:e6:57:45:76:ae:cf:b0:85:dc:c3:4c:35:22:80:
         64:11:d1:f0:e9:85:f7:b0:ae:09:e1:56:59:af:bf:c4:11:e0:
         b5:d0:f7:1c:d4:43:26:04:85:01:4f:f0:34:75:27:91:ed:02:
         34:61:28:71:b2:b0:74:8a:d1:35:24:a6:60:3c:7c:58:9e:a5:
         a5:18:c7:9f:86:8d:e3:e7:30:ca:31:ff:f4:b0:27:6a:a6:28:
         3b:3a:01:ff:4b:a3:a3:99:06:26:13:b0:0d:0b:2f:c4:5f:28:
         3a:02:5c:f3:93:d1:97:8e:3a:37:fa:af:d9:d9:aa:4a:6b:c4:
         ee:49:42:17:90:8f:ad:e7:00:2e:ae:44:1d:ac:c7:43:63:13:
         aa:80:73:2f:b8:16:d9:e3:73:82:05:f3:cf:4f:aa:11:39:db:
         8c:63:2b:53
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:24 2026 by rpki-client