Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3134362e302f32342d3234203d3e2039383131.roa
File:                     3231312e3134342e3134362e302f32342d3234203d3e2039383131.roa (raw, json)
Hash identifier:          c8pitVEU8mvRTN12xKYdLe8FcmUW1TvvX6pGXbkCOvA=
Subject key identifier:   D6:15:D1:67:8D:2E:BC:92:77:33:18:62:38:6E:1C:E6:F3:39:3A:00
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       5C94EBBD770013029EBD67985A4F7427E8AB028A
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3134362e302f32342d3234203d3e2039383131.roa
Signing time:             Wed 03 Jun 2026 08:13:10 +0000
ROA not before:           Wed 03 Jun 2026 08:08:10 +0000
ROA not after:            Wed 02 Jun 2027 08:13:10 +0000
asID:                     9811
IP address blocks:        211.144.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:94:eb:bd:77:00:13:02:9e:bd:67:98:5a:4f:74:27:e8:ab:02:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Jun  3 08:08:10 2026 GMT
            Not After : Jun  2 08:13:10 2027 GMT
        Subject: CN=D615D1678D2EBC9277331862386E1CE6F3393A00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:95:9e:e6:2c:e2:f8:e9:24:68:b2:1a:35:
                    54:50:ef:14:47:83:c2:a8:08:ca:56:ee:85:da:f0:
                    fb:01:10:ad:72:36:ea:9d:aa:29:5e:24:d8:d6:0e:
                    5a:ff:59:bf:08:62:3c:13:a5:40:2d:af:08:ac:bd:
                    71:f3:54:9d:19:33:2c:36:1f:37:06:dc:b7:b0:ef:
                    06:6d:72:bd:4d:6e:04:ea:90:69:a4:37:18:04:d8:
                    52:07:ff:1f:c9:2e:b9:f5:1b:ee:f6:67:03:c3:e1:
                    02:17:20:58:f7:bf:6a:d2:70:bb:8f:09:98:49:2a:
                    c4:8b:3c:de:c4:24:c2:fc:1f:86:a0:39:43:ed:34:
                    98:43:73:c6:ee:e1:6d:bb:f1:99:99:f2:c6:de:92:
                    ec:08:49:2b:23:df:ad:03:82:92:09:d8:48:da:17:
                    9b:64:6c:2d:74:3e:19:37:4b:96:a7:3f:ea:33:78:
                    ae:05:c0:a1:48:ee:53:c1:51:21:13:ba:29:69:2b:
                    d7:34:cc:06:fd:63:71:f5:7a:e1:97:e6:3e:64:02:
                    a1:4c:c1:82:08:8b:11:da:ab:db:90:57:66:a0:da:
                    39:bc:0e:94:49:4b:66:79:1a:ff:9a:3f:1d:b4:65:
                    89:a8:f6:48:8c:96:a9:95:3c:23:0b:33:70:44:49:
                    8e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:15:D1:67:8D:2E:BC:92:77:33:18:62:38:6E:1C:E6:F3:39:3A:00
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3134362e302f32342d3234203d3e2039383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.144.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:22:25:d6:fe:96:a4:84:ef:4d:86:53:83:ca:4f:50:23:4c:
         86:ca:d5:d5:f6:5e:98:d4:72:43:07:9c:20:c5:04:eb:82:4b:
         49:43:38:bc:ce:71:41:1d:d0:02:47:66:51:34:5f:1d:0c:c8:
         03:ec:91:c8:ab:9e:9f:a5:be:c3:7f:87:94:8c:25:73:a9:b6:
         b4:5c:bb:9c:67:3b:15:4d:cb:f7:d5:80:1f:23:66:6d:fa:af:
         ef:17:6a:99:3c:84:9e:ab:a0:f2:54:de:0f:e9:e8:7c:70:7b:
         9a:bf:1f:48:01:33:96:3a:bc:45:6d:40:7b:4b:ab:41:ab:51:
         45:64:21:c6:48:2c:4d:5e:44:fe:5a:89:ec:f1:08:13:1b:e8:
         22:63:fa:e3:cd:9a:43:6a:ab:f5:7d:34:56:30:fd:5b:e7:e4:
         3f:24:a9:b3:f5:03:8f:4f:1b:ad:5b:12:42:1b:d5:d2:b3:af:
         3c:6f:89:37:9e:f4:3d:e2:c1:92:0b:1c:30:ef:a4:7b:d8:de:
         f8:b7:37:8d:48:4f:00:2a:89:c7:1a:c2:18:36:3f:bf:1e:f6:
         d2:07:40:55:a1:d4:58:a6:f7:47:f8:a5:a9:e2:c9:fa:33:83:
         72:49:d5:b0:cc:6f:ff:27:4a:96:96:ef:12:6b:e5:8e:d0:ef:
         a6:7f:f2:4f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:55 2026 by rpki-client