Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e37342e302f32342d3234203d3e2039383131.roa
File:                     3231312e3136372e37342e302f32342d3234203d3e2039383131.roa (raw, json)
Hash identifier:          zvdfNdkGjrujJCN2x79XGZSq+DoBSts1fgPU30DJFAo=
Subject key identifier:   91:32:BB:3B:17:32:37:82:41:86:96:96:0F:96:DC:8A:CE:65:BE:58
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       0F39D6A508094EC8BDBFEEC2E3C804BCDE43E1BC
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e37342e302f32342d3234203d3e2039383131.roa
Signing time:             Wed 03 Jun 2026 08:17:08 +0000
ROA not before:           Wed 03 Jun 2026 08:12:08 +0000
ROA not after:            Wed 02 Jun 2027 08:17:08 +0000
asID:                     9811
IP address blocks:        211.167.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:39:d6:a5:08:09:4e:c8:bd:bf:ee:c2:e3:c8:04:bc:de:43:e1:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Jun  3 08:12:08 2026 GMT
            Not After : Jun  2 08:17:08 2027 GMT
        Subject: CN=9132BB3B17323782418696960F96DC8ACE65BE58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:df:f4:f3:e0:b1:0f:e5:db:90:05:b8:53:de:
                    5f:fd:6f:e4:e9:dd:36:a1:b9:b3:5c:8e:39:6d:80:
                    25:a8:19:bd:48:3d:9b:2c:b7:76:72:14:42:92:bb:
                    ce:4c:64:88:bb:43:43:63:7e:42:5e:13:10:c9:80:
                    96:38:d6:7b:03:fb:42:ad:9b:14:80:7a:c8:0b:9c:
                    c2:6d:b6:d6:2e:b1:41:f1:df:8e:e7:92:55:a5:5d:
                    3a:1e:58:71:b2:7b:32:98:b8:50:97:bd:33:35:c1:
                    e0:ec:98:f4:dc:71:5c:d6:70:26:af:d8:f3:c0:11:
                    58:80:f3:65:65:08:d3:89:a8:b0:74:7c:20:6b:7a:
                    ae:41:e5:ef:2e:32:c8:5e:f2:8f:63:31:eb:af:5a:
                    12:91:58:45:5d:16:0c:9c:02:a9:65:cf:1d:6d:07:
                    25:31:42:53:b6:83:9b:55:98:2e:50:67:e3:27:a3:
                    20:2e:7e:4e:41:83:6e:20:15:30:5e:fe:59:b6:ed:
                    ce:a0:6e:0f:40:48:66:9b:d9:0c:5a:e6:07:6a:be:
                    a3:c4:45:16:d6:b1:53:96:20:7e:10:d0:be:8c:b5:
                    39:b0:78:57:07:45:91:a2:fa:82:8f:3c:4c:27:ae:
                    94:5e:55:03:6b:28:33:0e:c6:8b:5d:3a:d3:03:aa:
                    1e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:32:BB:3B:17:32:37:82:41:86:96:96:0F:96:DC:8A:CE:65:BE:58
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e37342e302f32342d3234203d3e2039383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.167.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ef:a4:98:78:b6:83:3f:c6:b1:4e:0a:7a:39:2f:3f:95:42:5c:
         bc:f4:a7:16:2d:60:68:73:d9:44:0c:e3:56:63:1f:24:1d:82:
         4b:0c:5a:f3:51:3c:4c:dd:ec:a0:ad:32:df:50:27:f3:64:4c:
         a4:62:fe:14:86:6a:e4:d5:7b:4c:3a:b5:b9:ce:02:ad:ad:a8:
         1b:22:ab:4b:de:34:d7:a1:0f:a1:7d:01:35:1a:b4:d8:1c:d6:
         37:7e:f9:b0:1e:ba:b0:e6:ad:d9:6a:c9:c4:1a:30:94:1a:5f:
         83:bf:83:5b:1a:4b:32:3b:2a:60:b4:bc:55:ec:3b:a0:15:d6:
         ec:3f:1f:62:24:d0:37:9e:a5:d7:00:2e:6e:e1:57:8d:ad:9c:
         cb:43:5d:ac:db:a7:ab:a7:be:fe:80:38:2a:09:a1:0d:a2:aa:
         15:14:03:92:cb:c2:d1:0f:a5:aa:d7:c0:c7:01:48:79:c4:73:
         f1:d3:0e:bd:6b:63:63:e8:3a:08:27:0a:17:39:5c:96:ae:cd:
         83:91:ab:97:eb:1c:50:4f:ae:f0:98:a6:59:1b:59:2e:d1:29:
         88:55:38:d2:c8:02:4f:c8:10:29:d8:ff:9a:4b:00:52:5a:3d:
         fe:92:7f:bb:74:91:92:5c:b9:d2:88:be:d0:dc:79:ff:91:46:
         ca:af:8d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:39 2026 by rpki-client