Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3135312e302f32342d3234203d3e203536303438.roa
File:                     3231312e3134342e3135312e302f32342d3234203d3e203536303438.roa (raw, json)
Hash identifier:          hXDWCjbLVVqt8bSMD0oaMGd4+uooI7uisOe4g5DdpcA=
Subject key identifier:   28:FF:78:92:9B:4F:13:3A:F2:A4:79:BA:44:1D:41:9E:BA:C7:37:5E
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       7C83687E19A340E37DBF7D41B91FCFC4B724E523
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3135312e302f32342d3234203d3e203536303438.roa
Signing time:             Fri 18 Sep 2026 02:55:56 +0000
ROA not before:           Fri 18 Sep 2026 02:50:56 +0000
ROA not after:            Fri 17 Sep 2027 02:55:56 +0000
asID:                     56048
IP address blocks:        211.144.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 09:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:83:68:7e:19:a3:40:e3:7d:bf:7d:41:b9:1f:cf:c4:b7:24:e5:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Sep 18 02:50:56 2026 GMT
            Not After : Sep 17 02:55:56 2027 GMT
        Subject: CN=28FF78929B4F133AF2A479BA441D419EBAC7375E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ac:cd:3a:a9:11:6c:1d:02:5e:6c:7c:0a:64:
                    04:c4:1b:de:95:d2:84:a1:0b:6a:36:93:54:2a:dd:
                    6f:00:a9:4d:fe:9d:bf:dc:1b:3d:c2:96:4f:8a:be:
                    08:af:30:8b:08:ef:ca:ae:47:82:e5:02:dc:30:bf:
                    8a:ec:f9:bd:26:a6:fd:ff:2f:09:7f:bd:6e:3c:0e:
                    fc:9b:5b:24:ed:18:5a:03:97:38:6f:f0:55:95:4d:
                    0f:d8:17:98:45:92:9f:89:9c:1a:78:c2:3d:0a:76:
                    b4:52:c9:c5:72:3e:2b:34:e3:d5:a2:28:68:5f:09:
                    39:c7:b7:f6:2d:59:f5:5f:10:c1:81:3e:28:c4:98:
                    78:cf:3e:21:74:c9:10:15:d1:15:38:c4:c6:32:21:
                    0b:5b:6c:fa:77:06:8f:c3:9e:a0:ea:5c:ec:21:2d:
                    9d:24:db:e3:bf:11:22:d0:3e:d6:1c:32:17:59:48:
                    38:a5:8a:ac:e8:f1:1e:00:a3:0d:c8:f9:56:2c:f4:
                    21:ba:05:2d:be:51:a6:8f:15:d0:a8:23:2b:91:a6:
                    97:1c:bb:a7:cc:d1:0a:43:68:cc:44:b9:eb:76:7a:
                    0e:2e:cf:e9:65:b0:2c:f2:6b:b4:9d:72:99:62:5b:
                    d8:bc:82:d3:c2:78:2d:11:22:06:b2:54:ca:04:72:
                    59:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FF:78:92:9B:4F:13:3A:F2:A4:79:BA:44:1D:41:9E:BA:C7:37:5E
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3135312e302f32342d3234203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.144.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:7e:8b:61:87:a1:25:fe:9c:2d:33:81:c2:d2:8d:a2:0e:b3:
         95:51:7d:90:b2:7c:5c:f5:de:ba:7c:2c:16:a0:e4:de:86:7f:
         76:1f:0d:6b:91:7e:89:a1:04:a0:55:6e:a4:cd:a7:74:a7:08:
         08:a3:85:57:62:11:a8:9c:2f:68:ad:fa:34:8d:15:ee:12:8e:
         b3:ec:66:14:07:d4:de:d5:fc:c6:76:da:14:ee:8c:23:cf:cd:
         43:6f:06:da:7e:49:32:fd:4a:36:b5:64:21:95:fe:1f:21:06:
         ef:7d:d6:84:10:f5:34:de:dc:02:e6:b8:b6:77:f5:ee:70:44:
         ec:81:84:29:63:60:45:0f:91:e1:f1:29:aa:eb:fc:a7:08:d1:
         95:a9:a0:57:c2:db:29:9b:b8:5d:46:32:81:7b:a3:0a:b8:e9:
         71:dc:22:e6:36:01:a5:c2:26:d7:d8:89:f8:72:f9:a1:3d:5d:
         58:03:11:fe:42:3f:c0:5d:9e:df:57:42:29:88:3f:5c:d2:2c:
         6d:37:51:4b:48:f7:b4:4a:25:d5:fa:23:26:d7:75:c2:c2:82:
         65:09:f8:0c:77:be:53:53:dd:f0:02:7f:59:18:6e:38:09:96:
         ac:fc:64:32:6d:09:5b:92:e8:79:55:d7:3f:4e:c1:81:6f:03:
         39:d4:b0:bf
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUfINofhmjQON9v31BuR/PxLck5SMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDhEQ0MxMEE3RTkyNDQ0RTgwNjU1OTk5RTdDMzNDODc2
Q0YxQzVBODAeFw0yNjA5MTgwMjUwNTZaFw0yNzA5MTcwMjU1NTZaMDMxMTAvBgNV
BAMTKDI4RkY3ODkyOUI0RjEzM0FGMkE0NzlCQTQ0MUQ0MTlFQkFDNzM3NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkrM06qRFsHQJebHwKZATEG96V
0oShC2o2k1Qq3W8AqU3+nb/cGz3Clk+KvgivMIsI78quR4LlAtwwv4rs+b0mpv3/
Lwl/vW48DvybWyTtGFoDlzhv8FWVTQ/YF5hFkp+JnBp4wj0KdrRSycVyPis049Wi
KGhfCTnHt/YtWfVfEMGBPijEmHjPPiF0yRAV0RU4xMYyIQtbbPp3Bo/DnqDqXOwh
LZ0k2+O/ESLQPtYcMhdZSDiliqzo8R4Aow3I+VYs9CG6BS2+UaaPFdCoIyuRppcc
u6fM0QpDaMxEuet2eg4uz+llsCzya7SdcpliW9i8gtPCeC0RIgayVMoEcllTAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUKP94kptPEzrypHm6RB1BnrrHN14wHwYDVR0j
BBgwFoAUSNzBCn6SRE6AZVmZ58M8h2zxxagwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjY2OTkwNDI4NjI1MzA3NS8wLzQ4RENDMTBBN0U5MjQ0NEU4MDY1NTk5OUU3QzMz
Qzg3NkNGMUM1QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNDhEQ0MxMEE3RTkyNDQ0RTgwNjU1OTk5RTdDMzNDODc2Q0YxQzVBOC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMTI2Njk5MDQyODYyNTMwNzUvMC8zMjMxMzEyZTMx
MzQzNDJlMzEzNTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEANOQlzANBgkqhkiG9w0BAQsFAAOCAQEAfX6LYYehJf6cLTOBwtKN
og6zlVF9kLJ8XPXeunwsFqDk3oZ/dh8Na5F+iaEEoFVupM2ndKcICKOFV2IRqJwv
aK36NI0V7hKOs+xmFAfU3tX8xnbaFO6MI8/NQ28G2n5JMv1KNrVkIZX+HyEG733W
hBD1NN7cAua4tnf17nBE7IGEKWNgRQ+R4fEpquv8pwjRlamgV8LbKZu4XUYygXuj
Crjpcdwi5jYBpcIm19iJ+HL5oT1dWAMR/kI/wF2e31dCKYg/XNIsbTdRS0j3tEol
1fojJtd1wsKCZQn4DHe+U1Pd8AJ/WRhuOAmWrPxkMm0JW5LoeVXXP07BgW8DOdSw
vw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:44:12 2026 by rpki-client