Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e36342e302f31392d3139203d3e2039383131.roa
File:                     3231312e3136372e36342e302f31392d3139203d3e2039383131.roa (raw, json)
Hash identifier:          qLGnrQjaiLF1BC5zv7HE3BwCYqMJejmiPDpf5RyuJFw=
Subject key identifier:   41:1D:8C:21:FE:3F:2A:AB:2F:40:86:62:5A:35:6A:36:A9:68:EE:28
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       08D1502677A4FE48F99D1C099A289F849972080C
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e36342e302f31392d3139203d3e2039383131.roa
Signing time:             Wed 03 Jun 2026 08:20:16 +0000
ROA not before:           Wed 03 Jun 2026 08:15:16 +0000
ROA not after:            Wed 02 Jun 2027 08:20:16 +0000
asID:                     9811
IP address blocks:        211.167.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d1:50:26:77:a4:fe:48:f9:9d:1c:09:9a:28:9f:84:99:72:08:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Jun  3 08:15:16 2026 GMT
            Not After : Jun  2 08:20:16 2027 GMT
        Subject: CN=411D8C21FE3F2AAB2F4086625A356A36A968EE28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ff:c4:4a:47:e6:ca:f6:47:41:4a:db:81:2b:
                    92:5e:9c:d8:2c:8a:7f:a2:21:c8:24:c2:2e:1a:0f:
                    53:0e:aa:11:d3:48:74:32:6b:f2:ac:12:c9:59:f6:
                    58:34:c7:0f:b3:10:ef:5c:df:69:4e:1a:8e:41:90:
                    46:b7:0c:72:e2:4c:72:42:14:05:e6:9a:27:b9:1c:
                    90:42:e6:31:28:3a:4f:d4:e2:8b:5a:ec:c3:6c:a5:
                    fd:a2:62:93:03:49:6b:bb:d2:3e:9f:da:d5:54:c4:
                    65:92:cb:ef:fb:35:bf:36:3e:e4:5e:ad:fd:09:4f:
                    81:a3:9c:db:82:2e:59:6b:45:51:c9:78:2c:6d:7f:
                    d3:fe:fc:e5:32:76:e4:cc:48:cb:d9:ba:a8:8f:bc:
                    58:8b:ea:21:cc:61:e7:3d:40:a6:a8:66:8d:d0:78:
                    06:29:5d:44:e9:ff:ab:40:12:51:58:62:41:5c:f8:
                    5b:55:28:9d:9a:61:f1:c6:50:fd:ee:ab:6e:ae:8a:
                    ec:92:be:32:f6:48:8f:c9:64:c2:f6:d0:b9:eb:99:
                    6c:68:4e:56:47:d6:99:e3:67:d9:b8:9d:d5:14:ad:
                    89:eb:1a:1a:44:21:08:5a:8d:1e:89:15:ed:e3:2c:
                    29:a3:1c:dc:5c:06:43:69:c7:3b:c1:5e:40:b4:2b:
                    3a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1D:8C:21:FE:3F:2A:AB:2F:40:86:62:5A:35:6A:36:A9:68:EE:28
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e36342e302f31392d3139203d3e2039383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.167.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         66:c9:90:c5:29:31:f6:87:fc:f3:5c:83:77:80:4d:54:a9:34:
         4e:12:b8:2a:2c:ed:57:74:b9:65:29:1b:bb:6f:d0:46:f2:3d:
         3c:4e:47:47:eb:8a:87:93:28:64:46:0d:07:c9:71:fd:32:8b:
         3c:9f:09:75:8e:fb:7f:75:b3:b6:14:06:a8:8f:df:4e:22:57:
         31:0b:01:04:63:2f:fa:9a:d1:2c:ed:cf:06:c5:cf:d6:03:8f:
         84:53:3b:0c:5d:18:1e:08:41:0d:7b:5a:37:31:52:c8:4c:aa:
         dd:c0:33:68:9a:9c:b3:2f:84:fa:d0:3b:9d:47:f2:38:da:66:
         69:37:f3:dc:2f:d0:74:ad:1d:ec:97:7a:dd:28:aa:8b:0c:c0:
         2f:5f:60:6a:53:a9:5e:54:75:fe:30:8c:03:8b:86:6d:03:2b:
         5c:0d:0c:60:4e:95:c9:32:26:0f:a4:1d:e4:18:6e:e3:52:72:
         b0:d6:f7:1b:a4:89:9c:0d:f0:8a:c0:b4:79:ee:32:0c:f1:c2:
         b1:bf:a3:d8:77:76:14:4c:ef:fd:d6:bc:f7:dc:db:88:d1:d6:
         ed:09:6f:f6:8f:f0:77:35:a3:75:4e:84:7e:0a:24:c1:b6:87:
         0b:78:ea:4e:8d:b7:f2:7b:7b:c7:43:a4:40:27:ff:2b:83:48:
         ab:eb:b7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:42 2026 by rpki-client