Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e37322e302f32312d3231203d3e2039383131.roa
File:                     3231312e3136372e37322e302f32312d3231203d3e2039383131.roa (raw, json)
Hash identifier:          X/vJVeIMnA7adW4MWedYHDpc8FSuCrGV1dYQrRv9qsY=
Subject key identifier:   5C:2D:DA:37:7A:42:24:82:32:3D:6E:86:18:B1:7E:80:FF:FB:3D:9B
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       1C582F9BB21D55382A51FBA0E5721344E9EC16E0
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e37322e302f32312d3231203d3e2039383131.roa
Signing time:             Wed 03 Jun 2026 08:17:25 +0000
ROA not before:           Wed 03 Jun 2026 08:12:25 +0000
ROA not after:            Wed 02 Jun 2027 08:17:25 +0000
asID:                     9811
IP address blocks:        211.167.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:58:2f:9b:b2:1d:55:38:2a:51:fb:a0:e5:72:13:44:e9:ec:16:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Jun  3 08:12:25 2026 GMT
            Not After : Jun  2 08:17:25 2027 GMT
        Subject: CN=5C2DDA377A422482323D6E8618B17E80FFFB3D9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:eb:df:8b:be:0d:c7:74:78:ed:77:94:76:6d:
                    43:8b:72:1d:97:31:b7:8b:f0:33:b5:1a:9f:77:23:
                    bf:16:e6:b7:c6:03:3d:a0:46:d0:34:d0:68:a1:5c:
                    31:7c:7e:d4:b7:60:b9:ec:dd:5c:1c:7d:7d:97:0b:
                    d9:a7:7a:37:57:a2:e2:72:97:72:ff:00:2c:7f:51:
                    d7:da:0e:60:5c:d3:83:d9:e8:7b:38:b7:be:0f:54:
                    00:91:75:4d:26:3e:c6:2c:d8:cd:22:90:04:a2:02:
                    62:22:d0:2a:f7:f4:9b:ab:7b:7d:1e:1a:02:f4:eb:
                    12:de:7e:6a:01:b5:d9:f2:b3:2d:20:ad:35:dc:09:
                    e5:e6:b1:96:f9:61:42:08:b2:ae:22:c2:1c:e3:92:
                    8c:d1:cc:e7:f8:f4:a0:4c:e6:79:0e:4e:bf:63:46:
                    9e:42:0b:91:07:b2:50:29:e7:e5:fb:94:6d:64:27:
                    93:cb:2f:42:d7:bd:4c:a0:77:74:c3:82:23:e1:65:
                    64:49:2c:47:2f:e6:d1:b0:92:be:7f:91:1b:96:57:
                    82:13:a6:f2:e5:35:67:93:c8:d0:26:b5:5b:f3:51:
                    68:d2:91:03:ab:e8:19:d1:70:b9:59:17:c6:eb:40:
                    8c:67:24:44:da:df:28:cc:a1:8b:40:3b:c8:7c:03:
                    08:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2D:DA:37:7A:42:24:82:32:3D:6E:86:18:B1:7E:80:FF:FB:3D:9B
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e37322e302f32312d3231203d3e2039383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.167.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         95:6a:63:51:22:34:5e:f1:35:19:a9:3d:af:f3:59:1d:e2:8c:
         74:e6:9c:92:86:be:96:96:ec:c1:76:b0:9b:cf:86:5d:a1:b4:
         2a:25:6a:b7:dd:3d:2b:06:4d:8e:2f:5a:2e:98:da:6e:6f:0b:
         01:b8:72:71:e5:a0:13:6f:d3:37:16:b4:2c:05:29:18:e1:9a:
         ff:dc:da:89:80:5e:bf:bc:59:33:41:76:f9:bc:88:dd:9d:52:
         c5:50:db:28:27:29:a5:dc:08:35:73:21:73:f1:8b:25:4e:ed:
         c1:c0:35:09:73:f1:d1:de:dc:55:42:a8:79:11:90:de:80:b7:
         c1:41:55:3e:ed:1a:21:27:72:f3:99:f2:f3:11:eb:1d:bb:6d:
         63:08:46:d0:0c:66:b0:2d:42:02:da:89:ff:cd:2b:39:5f:fa:
         6c:f2:91:78:30:82:2a:d7:49:17:92:c5:76:70:f5:62:33:6d:
         27:8f:76:86:c2:e2:39:48:fe:85:ac:00:a5:25:bd:dd:9b:e7:
         36:7e:1c:0b:c3:85:af:e9:9f:8a:f0:38:a9:21:14:e6:31:9c:
         66:0a:48:5b:a5:22:6a:8e:a9:56:7c:32:00:cc:52:ed:ce:83:
         e6:f0:a5:ed:bb:ea:49:05:58:de:4f:e6:e7:d8:33:e2:3b:29:
         09:33:42:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:32 2026 by rpki-client