Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e39322e302f32322d3232203d3e2039383131.roa
File:                     3231312e3136372e39322e302f32322d3232203d3e2039383131.roa (raw, json)
Hash identifier:          OgCDBMqGryJDzomyq0BZsDwMXEkOxHGZVayyI7J1Qx4=
Subject key identifier:   BC:31:CC:C5:ED:3B:8B:6D:49:39:D3:C5:F5:83:D8:F2:3A:38:54:7D
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       11C0D1020A7420F42F8D52952BDF80F7EDA6CCEC
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e39322e302f32322d3232203d3e2039383131.roa
Signing time:             Wed 03 Jun 2026 08:19:58 +0000
ROA not before:           Wed 03 Jun 2026 08:14:58 +0000
ROA not after:            Wed 02 Jun 2027 08:19:58 +0000
asID:                     9811
IP address blocks:        211.167.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c0:d1:02:0a:74:20:f4:2f:8d:52:95:2b:df:80:f7:ed:a6:cc:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Jun  3 08:14:58 2026 GMT
            Not After : Jun  2 08:19:58 2027 GMT
        Subject: CN=BC31CCC5ED3B8B6D4939D3C5F583D8F23A38547D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:6d:0c:df:37:37:56:79:71:b2:35:ed:6f:f7:
                    3e:b5:48:91:e6:11:ff:96:4c:b0:37:10:7e:e6:65:
                    ec:8c:d1:12:79:e2:3e:6c:c2:77:74:7c:3d:3c:d3:
                    9e:3b:50:3d:20:f4:2e:6d:3d:e2:87:cf:42:2a:e8:
                    7a:f8:d1:78:5e:8c:9c:9b:01:d7:66:8a:0e:b7:63:
                    6e:19:72:49:fd:91:d0:bb:30:58:53:8c:4e:34:04:
                    5a:4a:bf:09:7d:71:2c:3a:35:18:1a:77:5d:c0:a5:
                    45:94:57:3b:42:dc:4b:d1:ac:57:c4:f2:3f:be:5f:
                    8e:08:c5:11:3c:9b:16:f4:e9:9f:91:7c:a0:86:2d:
                    0f:d7:e0:ea:72:dc:a3:2f:fa:99:86:02:2d:1a:c8:
                    10:98:d6:bb:3b:69:3a:4b:5e:4d:d9:8a:a3:45:3d:
                    25:5e:30:3a:4a:f3:b1:c9:7e:e6:05:54:99:9c:81:
                    89:b7:24:94:b9:aa:69:65:a3:17:70:ee:c5:36:3f:
                    57:f8:a9:ab:29:62:f6:ad:0e:59:2f:e3:e1:67:84:
                    fc:bd:2c:f1:e9:cb:1b:81:eb:fc:ad:f8:39:c0:77:
                    3f:b0:dc:3f:47:52:2d:ff:5e:18:6f:c8:b0:1a:24:
                    0e:bc:f8:3d:94:61:52:60:bc:56:ce:fc:53:dc:70:
                    46:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:31:CC:C5:ED:3B:8B:6D:49:39:D3:C5:F5:83:D8:F2:3A:38:54:7D
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e39322e302f32322d3232203d3e2039383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.167.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:42:56:e1:6d:dc:86:36:6c:2c:e9:ef:23:a0:96:d6:a4:f6:
         cd:9d:f5:53:cd:25:cc:62:ab:73:0e:d0:37:b6:be:30:ac:3a:
         54:2d:9e:65:0a:e8:c5:9b:4c:34:8b:ce:c7:46:34:4f:45:82:
         ae:03:43:50:6f:a5:19:b8:a0:b4:21:be:4f:f7:10:b5:9d:2b:
         66:7c:e4:90:47:63:81:fb:54:de:af:38:d8:73:c7:a9:d2:2e:
         c8:45:56:12:2d:db:42:b9:02:e0:d1:59:f5:b8:77:72:cd:1c:
         5d:67:fa:df:5f:5d:4d:8d:bd:64:4b:3c:b9:9a:3d:91:42:d5:
         11:1c:4c:a8:64:53:ed:15:91:32:98:e7:47:37:44:83:87:29:
         6b:42:03:7d:f3:f2:cb:4e:ca:d0:15:95:4d:af:fc:4d:89:7f:
         a9:ad:c3:7a:04:72:a0:a7:cb:58:44:72:b3:e3:a8:7e:1d:90:
         a7:eb:d1:9f:44:13:86:71:68:82:f4:2e:8f:14:bb:4f:65:34:
         ac:02:b8:36:2b:1d:2b:ef:08:4d:05:79:89:22:33:a3:c4:72:
         79:50:75:3b:4f:06:7d:1d:f3:c4:1a:7c:5b:20:74:af:c2:39:
         de:f1:9c:7a:85:28:02:c5:8a:9f:63:18:09:f0:18:cf:5b:e6:
         15:25:db:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:31 2026 by rpki-client