Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e302e302f31392d3139203d3e2039383131.roa
File:                     3231382e3234362e302e302f31392d3139203d3e2039383131.roa (raw, json)
Hash identifier:          HVXR/lzczBveD68DErlCu/uYqqC2uV5k/qiEDxLESGA=
Subject key identifier:   74:54:36:DD:43:D6:51:E7:FD:96:13:7E:E7:86:D9:5D:63:A1:13:55
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       3AEAFAA59FB38C58A9ED951AADBEE0768CD52881
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e302e302f31392d3139203d3e2039383131.roa
Signing time:             Wed 03 Jun 2026 08:23:15 +0000
ROA not before:           Wed 03 Jun 2026 08:18:15 +0000
ROA not after:            Wed 02 Jun 2027 08:23:15 +0000
asID:                     9811
IP address blocks:        218.246.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ea:fa:a5:9f:b3:8c:58:a9:ed:95:1a:ad:be:e0:76:8c:d5:28:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Jun  3 08:18:15 2026 GMT
            Not After : Jun  2 08:23:15 2027 GMT
        Subject: CN=745436DD43D651E7FD96137EE786D95D63A11355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7c:f1:c0:00:a9:dd:37:71:97:9e:c6:c9:8e:
                    3b:b3:04:ff:81:d8:54:9d:c0:92:c4:5b:8a:4f:0c:
                    16:c9:70:ff:5d:0d:82:7c:eb:d8:0a:1b:3d:6e:99:
                    10:7f:43:74:71:3d:be:1c:2a:7f:7a:44:9a:a6:14:
                    2f:b4:f9:70:2d:33:3d:e9:0c:25:98:49:65:b5:44:
                    b9:f1:d0:06:5a:90:0f:6b:ed:c5:4d:51:9c:59:cc:
                    ae:21:8a:a8:a3:51:9a:71:19:fd:24:70:ba:6a:95:
                    4c:8a:42:53:7e:87:18:31:19:c6:b5:aa:0d:66:a2:
                    0b:23:9b:21:55:8b:b4:8e:9e:23:5b:b1:5f:32:61:
                    92:60:9e:47:bd:df:f7:9f:34:47:b9:f2:6f:e4:6e:
                    1f:69:6b:c3:4c:d1:1d:00:d2:f7:79:9a:e9:a7:3c:
                    d1:36:a4:ba:1d:31:d3:a5:c3:10:3a:cd:21:6b:b2:
                    65:83:a6:54:eb:88:a5:47:f4:39:b5:b0:b5:48:e8:
                    74:d8:e5:ab:86:c6:9a:e2:5e:7b:59:35:d3:85:cb:
                    98:ce:41:b4:b7:21:81:9b:42:07:be:50:cb:31:ea:
                    26:71:36:ed:78:d4:89:d5:82:9a:60:6a:1a:76:af:
                    4b:35:44:f4:a5:46:74:df:7d:e5:6a:d3:db:b4:37:
                    69:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:54:36:DD:43:D6:51:E7:FD:96:13:7E:E7:86:D9:5D:63:A1:13:55
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e302e302f31392d3139203d3e2039383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.246.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d8:50:d9:26:5c:33:e8:51:68:fc:08:c6:cf:cf:f8:7d:49:89:
         aa:5c:70:28:22:51:90:be:4c:7c:11:46:da:01:bc:ab:50:a0:
         62:ef:70:18:12:74:27:c5:5b:0f:db:a9:be:bf:43:de:ca:a2:
         21:da:9f:3f:16:b6:7a:d7:97:d8:37:cf:2d:2f:d5:5d:7d:96:
         cc:04:fb:a6:ab:51:2f:49:1d:51:52:d3:45:36:cb:f1:70:29:
         82:5a:ad:f3:6b:7f:b1:ff:da:8c:2e:c0:0d:23:9e:dd:4a:b8:
         cb:9e:30:bf:5d:41:92:f4:a2:cf:51:3d:59:51:49:c5:cb:f3:
         93:b4:27:8a:55:8d:b1:b1:c9:70:3b:ea:76:67:46:ec:10:fa:
         d0:5d:2a:c1:ef:4f:c5:3f:8d:26:e2:8a:12:8d:89:5d:5c:3b:
         b9:57:6e:5f:aa:18:9c:76:e4:e8:e2:3f:d7:a3:f2:d4:9a:dc:
         bd:f4:7e:58:fe:4b:db:77:05:a1:d2:33:be:ff:b8:6a:03:0f:
         70:87:fa:a4:ac:62:57:82:f2:dd:a4:b7:f8:2d:79:4b:08:78:
         e8:35:e6:70:90:14:9b:4c:95:87:8c:f8:a8:14:e2:aa:13:71:
         70:51:f3:5d:22:2b:b0:7e:06:02:8e:59:3b:88:3b:72:92:fd:
         83:d1:f1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:41 2026 by rpki-client