Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e36342e302f32342d3234203d3e2039383131.roa
File:                     3231312e3136372e36342e302f32342d3234203d3e2039383131.roa (raw, json)
Hash identifier:          o4bnNJ78Kl2jod7r29ikImDOcgf8zxycG6iyny1s68A=
Subject key identifier:   CC:58:AC:FA:37:5D:A5:FF:C0:A7:1B:D5:E6:98:ED:94:BB:DD:59:D7
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       6D083AF15E558FE0E7B3E442D9FD1373D16A648D
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e36342e302f32342d3234203d3e2039383131.roa
Signing time:             Wed 03 Jun 2026 08:15:26 +0000
ROA not before:           Wed 03 Jun 2026 08:10:26 +0000
ROA not after:            Wed 02 Jun 2027 08:15:26 +0000
asID:                     9811
IP address blocks:        211.167.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:08:3a:f1:5e:55:8f:e0:e7:b3:e4:42:d9:fd:13:73:d1:6a:64:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Jun  3 08:10:26 2026 GMT
            Not After : Jun  2 08:15:26 2027 GMT
        Subject: CN=CC58ACFA375DA5FFC0A71BD5E698ED94BBDD59D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6e:98:23:d3:09:67:79:ac:d8:96:ee:0d:b1:
                    ea:6f:1a:66:a0:7c:50:80:42:f4:fc:c2:2b:ab:10:
                    32:be:8c:e3:a2:a3:e0:29:38:e7:25:b1:3c:fd:5f:
                    c9:bd:8f:0e:7f:8b:e6:f3:5e:81:59:82:3c:16:f5:
                    d3:dc:dc:88:50:d5:8f:08:55:4f:7a:b6:81:41:02:
                    8a:00:7e:57:d7:3d:2c:1e:f5:69:01:84:09:16:33:
                    9f:92:fc:05:43:d5:97:b8:3b:18:45:7c:fc:b1:3a:
                    21:7c:a9:c1:31:9d:ae:c0:d5:89:0b:7c:3e:59:8e:
                    e4:6b:3f:16:09:52:39:3f:58:fb:9d:e7:65:bb:95:
                    b3:15:31:09:60:37:60:9b:8a:09:88:0a:a3:d7:de:
                    83:b5:07:66:81:e4:61:85:dd:14:89:79:02:02:ae:
                    11:f1:af:9b:6f:d6:5b:8d:dc:38:7b:83:d9:c6:09:
                    59:5e:b7:e8:25:2d:7d:30:fc:6c:7a:ec:ee:62:a8:
                    47:59:3e:3f:51:1b:b0:2b:86:fd:df:a0:9e:56:41:
                    87:b9:26:9b:bc:ba:12:eb:31:73:e4:2c:79:eb:c9:
                    42:c5:7a:2b:08:63:67:16:e3:19:38:8c:95:61:31:
                    c7:11:5e:03:2d:0a:92:0d:bb:78:b3:a7:d5:30:6c:
                    2b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:58:AC:FA:37:5D:A5:FF:C0:A7:1B:D5:E6:98:ED:94:BB:DD:59:D7
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e36342e302f32342d3234203d3e2039383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.167.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:50:a9:66:f3:16:f6:fc:e2:34:ca:7d:46:27:53:69:47:72:
         7b:ae:dd:b6:ed:f7:18:83:82:a7:d0:e2:8c:d9:84:11:6d:cb:
         b6:87:1c:b5:4b:30:ee:c7:20:ec:04:b2:05:ec:25:dd:c8:74:
         c1:64:fd:42:8f:1e:08:9c:c5:d4:58:48:c8:12:3d:d4:a8:ec:
         19:b9:9f:e7:cf:95:ad:3b:03:7c:ba:15:7c:fc:23:92:19:fa:
         84:1d:ea:d7:11:33:9f:8e:93:1f:07:6a:57:69:af:d7:d1:7d:
         f9:38:0d:be:2d:e0:e3:41:d2:ab:e9:c0:ce:ef:8a:a3:ec:28:
         f2:03:77:ac:92:15:55:a9:61:61:d8:30:17:1f:a3:69:ca:11:
         4a:17:2e:36:30:a3:1e:76:db:0a:ba:ab:c9:2f:80:f5:74:de:
         05:a2:66:eb:85:8a:dc:be:fd:a1:b7:22:89:72:40:5a:9d:b2:
         1e:c2:a7:fd:27:af:bd:e8:1f:4c:1f:e2:39:55:98:cf:0a:ba:
         7d:93:ea:02:fb:95:28:bb:50:bd:0f:15:f2:cd:24:38:32:2f:
         86:94:2b:d2:90:b0:78:71:1d:3c:35:07:d5:0b:5a:f7:98:77:
         ca:d5:6c:a6:9e:25:81:55:85:3e:b8:01:fb:33:f9:29:bc:86:
         b2:f0:81:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:41 2026 by rpki-client