Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e36342e302f32302d3230203d3e2039383131.roa
File:                     3231312e3136372e36342e302f32302d3230203d3e2039383131.roa (raw, json)
Hash identifier:          LAeYjLzAlokDcOOTJ4BiaLujG8nChAKBzmg0cc682cg=
Subject key identifier:   4B:BD:36:10:8D:D3:18:D8:FD:0A:22:21:B5:61:E6:47:26:1B:80:70
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       4FDD46EFDA49EF2D7E127B5F4F1B5B0CAA5F3261
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e36342e302f32302d3230203d3e2039383131.roa
Signing time:             Wed 03 Jun 2026 08:19:11 +0000
ROA not before:           Wed 03 Jun 2026 08:14:11 +0000
ROA not after:            Wed 02 Jun 2027 08:19:11 +0000
asID:                     9811
IP address blocks:        211.167.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:dd:46:ef:da:49:ef:2d:7e:12:7b:5f:4f:1b:5b:0c:aa:5f:32:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Jun  3 08:14:11 2026 GMT
            Not After : Jun  2 08:19:11 2027 GMT
        Subject: CN=4BBD36108DD318D8FD0A2221B561E647261B8070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:25:00:61:3a:68:05:d3:42:63:7e:cf:3c:04:
                    17:a2:11:0d:a9:28:0a:dd:b6:e8:cd:dc:a3:13:95:
                    75:22:8b:3d:7c:66:8c:77:4c:03:71:fd:3d:76:da:
                    62:16:02:af:57:e1:60:a9:3c:f0:b4:19:60:e9:67:
                    6b:21:38:8b:9d:65:ff:73:ec:a1:16:c6:a5:a8:15:
                    99:e0:5a:f0:6e:aa:28:26:a3:69:d2:c3:bc:d4:88:
                    7d:e8:86:02:7e:f9:09:f6:2c:68:39:f9:75:f6:43:
                    be:2f:d1:89:56:9a:a9:f4:02:a3:48:bf:d8:3a:9a:
                    98:68:e5:82:6c:b8:3d:1a:c3:b2:76:8b:7d:4e:ff:
                    d5:b1:33:26:1d:16:9b:ed:d9:69:8a:cd:a3:7f:30:
                    4b:47:97:c1:cd:49:c5:b4:9f:fb:55:89:b4:8a:4e:
                    8f:d7:a4:44:bf:1f:24:83:8c:50:3a:d4:9b:a5:b1:
                    ad:4d:da:ed:87:c0:70:15:bf:5e:d5:b4:40:58:ee:
                    05:9c:2c:6e:2e:47:aa:15:19:fb:87:f7:db:80:e4:
                    0f:cd:71:a0:5f:6c:af:6d:bd:fe:e0:30:15:6b:33:
                    b5:18:06:71:a7:5f:07:9a:4f:91:3a:5d:6a:ad:3f:
                    28:f0:be:82:77:05:ec:6d:a2:32:47:07:d9:e5:aa:
                    cd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BD:36:10:8D:D3:18:D8:FD:0A:22:21:B5:61:E6:47:26:1B:80:70
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e36342e302f32302d3230203d3e2039383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.167.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9a:9d:7c:78:1b:1d:29:b6:76:51:55:75:05:27:b2:b3:18:fb:
         4c:77:5f:34:4d:f3:4b:c6:76:59:83:9a:be:ce:98:48:8d:65:
         06:53:e5:15:68:92:a6:a8:eb:85:a6:eb:3b:a3:e5:9a:38:77:
         a7:ee:d5:08:17:a8:f0:12:b1:0c:b1:27:1d:16:48:6d:cb:d5:
         33:ca:af:9c:02:8b:e4:53:63:d6:ea:04:91:81:3c:cc:c5:81:
         ab:cb:ef:f6:c7:16:5a:80:5d:f0:e1:70:61:fe:c8:63:6e:1d:
         ec:61:7f:e0:dd:79:a5:1c:02:91:b2:16:d8:43:cd:da:6d:f2:
         e5:2a:98:05:1d:7d:5f:63:13:05:ec:d5:ee:d0:7b:f3:af:df:
         6e:f4:7a:a1:05:94:56:fb:2d:c2:b1:f5:3d:18:72:88:4d:a7:
         ee:a8:0e:22:f8:f5:d6:95:96:a5:89:10:53:e7:9d:9c:31:81:
         d2:38:60:a7:09:8c:5b:cd:27:9f:dc:ec:9c:4f:3d:a3:83:4b:
         fd:6c:55:7f:06:a4:ef:bd:07:90:65:21:61:5b:50:45:7e:37:
         4c:19:b7:be:1f:d5:1d:0c:57:56:53:fe:d0:1c:0a:62:c5:45:
         9b:a4:2b:eb:0a:64:24:49:0c:92:1f:46:69:92:da:25:3b:5a:
         ac:d7:44:39
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUT91G79pJ7y1+EntfTxtbDKpfMmEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDhEQ0MxMEE3RTkyNDQ0RTgwNjU1OTk5RTdDMzNDODc2
Q0YxQzVBODAeFw0yNjA2MDMwODE0MTFaFw0yNzA2MDIwODE5MTFaMDMxMTAvBgNV
BAMTKDRCQkQzNjEwOEREMzE4RDhGRDBBMjIyMUI1NjFFNjQ3MjYxQjgwNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQJQBhOmgF00Jjfs88BBeiEQ2p
KArdtujN3KMTlXUiiz18Zox3TANx/T122mIWAq9X4WCpPPC0GWDpZ2shOIudZf9z
7KEWxqWoFZngWvBuqigmo2nSw7zUiH3ohgJ++Qn2LGg5+XX2Q74v0YlWmqn0AqNI
v9g6mpho5YJsuD0aw7J2i31O/9WxMyYdFpvt2WmKzaN/MEtHl8HNScW0n/tVibSK
To/XpES/HySDjFA61Julsa1N2u2HwHAVv17VtEBY7gWcLG4uR6oVGfuH99uA5A/N
caBfbK9tvf7gMBVrM7UYBnGnXweaT5E6XWqtPyjwvoJ3BextojJHB9nlqs2DAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUS702EI3TGNj9CiIhtWHmRyYbgHAwHwYDVR0j
BBgwFoAUSNzBCn6SRE6AZVmZ58M8h2zxxagwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjY2OTkwNDI4NjI1MzA3NS8wLzQ4RENDMTBBN0U5MjQ0NEU4MDY1NTk5OUU3QzMz
Qzg3NkNGMUM1QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNDhEQ0MxMEE3RTkyNDQ0RTgwNjU1OTk5RTdDMzNDODc2Q0YxQzVBOC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTEyNjY5OTA0Mjg2MjUzMDc1LzAvMzIzMTMxMmUzMTM2
MzcyZTM2MzQyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzOTM4MzEzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBNOnQDANBgkqhkiG9w0BAQsFAAOCAQEAmp18eBsdKbZ2UVV1BSeysxj7THdf
NE3zS8Z2WYOavs6YSI1lBlPlFWiSpqjrhabrO6Plmjh3p+7VCBeo8BKxDLEnHRZI
bcvVM8qvnAKL5FNj1uoEkYE8zMWBq8vv9scWWoBd8OFwYf7IY24d7GF/4N15pRwC
kbIW2EPN2m3y5SqYBR19X2MTBezV7tB786/fbvR6oQWUVvstwrH1PRhyiE2n7qgO
Ivj11pWWpYkQU+ednDGB0jhgpwmMW80nn9zsnE89o4NL/WxVfwak770HkGUhYVtQ
RX43TBm3vh/VHQxXVlP+0BwKYsVFm6Qr6wpkJEkMkh9GaZLaJTtarNdEOQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:46 2026 by rpki-client