Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e38382e302f32322d3232203d3e2039383131.roa
File:                     3231312e3136372e38382e302f32322d3232203d3e2039383131.roa (raw, json)
Hash identifier:          QOAosRAOM1tYy/Zu0VvuNlYhBfv5oryP3A8t7HI0NX0=
Subject key identifier:   25:BB:FC:F0:D4:44:44:8A:61:64:61:73:39:0A:D9:40:F1:42:02:69
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       4146598DFB050D0C72873049B6B2BC22C0660644
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e38382e302f32322d3232203d3e2039383131.roa
Signing time:             Wed 03 Jun 2026 08:18:46 +0000
ROA not before:           Wed 03 Jun 2026 08:13:46 +0000
ROA not after:            Wed 02 Jun 2027 08:18:46 +0000
asID:                     9811
IP address blocks:        211.167.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:46:59:8d:fb:05:0d:0c:72:87:30:49:b6:b2:bc:22:c0:66:06:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Jun  3 08:13:46 2026 GMT
            Not After : Jun  2 08:18:46 2027 GMT
        Subject: CN=25BBFCF0D444448A61646173390AD940F1420269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:93:97:50:80:d4:b7:04:cc:e8:7b:be:1b:9f:
                    5f:e6:06:cd:5f:f0:44:9f:59:50:1d:07:1c:3e:b7:
                    1d:20:5c:b0:aa:ef:92:08:d6:48:0e:64:26:54:2e:
                    46:0b:06:5b:4a:f5:cc:f4:cd:04:d6:f1:5c:86:71:
                    12:d6:7f:96:fe:03:1f:62:64:8c:df:46:18:cc:ee:
                    d7:7c:2a:3a:9f:9a:a5:62:e3:5b:69:43:4c:60:eb:
                    d8:a8:04:40:96:b5:5e:72:d3:11:b1:62:f5:b6:88:
                    a2:9d:df:17:d5:2d:92:ef:91:e4:66:17:d1:58:d7:
                    ab:87:20:23:ad:84:d1:61:06:8c:4b:e6:cf:4a:89:
                    2c:aa:3b:5e:53:fa:f4:5a:f3:6f:4e:da:71:dc:7c:
                    8d:1f:01:eb:0d:73:1b:95:1c:e9:03:e0:7e:54:ab:
                    0b:22:c9:48:93:76:32:b7:93:fc:09:16:b8:8a:27:
                    94:97:33:3f:05:a0:05:ee:49:5b:ec:f2:55:f7:82:
                    ad:eb:22:e8:e8:13:32:82:d2:e9:06:52:cf:e9:5d:
                    eb:ad:52:bd:62:9a:73:ef:79:9c:19:a5:ff:fc:a0:
                    20:cc:92:6f:77:41:b0:de:4b:6f:a6:59:03:ab:ec:
                    3b:58:73:0e:86:25:f4:42:bc:5c:10:24:97:0d:04:
                    5c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BB:FC:F0:D4:44:44:8A:61:64:61:73:39:0A:D9:40:F1:42:02:69
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e38382e302f32322d3232203d3e2039383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.167.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:77:06:38:0d:ab:03:ff:65:75:aa:30:b8:37:59:14:0d:90:
         d2:d0:66:6d:0a:24:f5:95:3c:10:e6:5d:a7:44:ba:69:c5:03:
         a1:34:b9:c2:a8:cc:94:ea:79:70:6d:25:38:c8:18:8e:ee:a4:
         82:d9:43:44:ae:26:c6:02:c3:6a:b3:d3:b5:87:f4:b3:b7:be:
         87:17:a4:fc:35:22:03:fb:2a:06:c9:f1:10:9f:54:e0:21:26:
         31:fd:4d:bf:68:2c:cc:e1:3a:57:ea:75:c8:ef:7e:23:a4:9d:
         7b:ac:f2:f0:8a:ae:9c:47:59:d7:cc:9c:bd:39:dc:3c:b7:ee:
         cf:48:47:b8:aa:cc:92:d8:94:67:bf:e0:6b:35:fa:d1:1f:d7:
         11:de:eb:fb:d5:3d:18:8a:66:7d:7d:4b:46:d7:68:68:28:17:
         04:80:39:f0:e4:1d:83:ea:98:a9:72:af:b7:85:7a:4b:f3:53:
         1a:b0:05:96:a0:01:24:39:71:96:11:ef:4a:0f:3c:c3:ff:24:
         48:cc:62:8a:34:e2:15:64:70:76:86:b2:f9:a1:cc:f9:d1:07:
         f1:89:f0:ed:3d:78:5b:2c:d4:8e:32:65:db:02:0e:d4:02:7b:
         2b:8d:84:b0:88:ee:45:3e:59:bb:bf:cd:ff:1c:dd:85:33:82:
         7a:36:c5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:32 2026 by rpki-client