Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e302e302f32302d3230203d3e2039383131.roa
File:                     3231382e3234362e302e302f32302d3230203d3e2039383131.roa (raw, json)
Hash identifier:          Xw1FEvkpfjUQF3/B1ZOVqeeG+lcr/Je7Ik5QGXiyKQQ=
Subject key identifier:   4C:8B:04:C9:29:B6:F7:1F:3C:2F:71:48:8D:9A:91:E8:06:02:4B:65
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       3BF88783C84FDBECD464FDD48470746A57638747
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e302e302f32302d3230203d3e2039383131.roa
Signing time:             Wed 03 Jun 2026 08:22:09 +0000
ROA not before:           Wed 03 Jun 2026 08:17:09 +0000
ROA not after:            Wed 02 Jun 2027 08:22:09 +0000
asID:                     9811
IP address blocks:        218.246.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f8:87:83:c8:4f:db:ec:d4:64:fd:d4:84:70:74:6a:57:63:87:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Jun  3 08:17:09 2026 GMT
            Not After : Jun  2 08:22:09 2027 GMT
        Subject: CN=4C8B04C929B6F71F3C2F71488D9A91E806024B65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ff:de:50:5e:6f:ad:b0:b1:df:8e:f0:42:fb:
                    1f:29:01:40:75:95:94:f7:58:6e:51:e2:c5:5b:81:
                    84:2d:cc:de:4e:8d:0b:44:05:f3:e6:d4:ef:0c:05:
                    b2:8f:2f:95:0b:99:61:1c:00:ab:f5:fa:1c:81:e1:
                    6d:4c:42:99:50:48:a8:fa:a2:2d:ff:46:15:8b:a2:
                    91:32:f5:50:4b:50:91:fe:d2:6d:1f:4c:a0:e3:e2:
                    8e:d8:ad:05:ee:e8:b5:04:89:e3:fe:4b:f5:c6:a2:
                    09:25:64:e7:b4:33:21:6a:86:19:3b:bc:56:f7:fe:
                    c1:d0:57:9a:3e:d8:65:ff:b2:46:f9:70:ac:87:30:
                    c5:05:d2:7d:c2:20:99:35:86:96:ee:75:4f:d2:bb:
                    b4:f9:3f:f4:05:60:a0:25:88:c8:78:e0:3f:97:a8:
                    d2:3e:ea:56:06:a8:bf:60:58:cb:88:53:8d:1b:41:
                    fb:3e:89:57:90:c3:8d:83:ba:bf:57:2e:48:18:31:
                    cf:69:c8:57:14:43:29:9e:c0:e0:77:17:65:ab:d2:
                    4d:d9:23:aa:d0:91:fd:9f:6d:64:c7:26:b5:6a:16:
                    7a:2c:bf:0e:27:3f:a0:74:d0:a8:28:32:56:13:1c:
                    f8:b0:3e:e5:89:c8:23:e9:b8:4d:9d:aa:be:a2:47:
                    06:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8B:04:C9:29:B6:F7:1F:3C:2F:71:48:8D:9A:91:E8:06:02:4B:65
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e302e302f32302d3230203d3e2039383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.246.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2f:86:f4:77:78:89:c9:e5:de:71:93:b3:93:91:fc:9b:9c:1e:
         0b:ff:0f:3a:d7:27:9d:55:53:69:23:af:9c:81:2c:ee:35:5d:
         cd:7d:f0:0d:63:d4:b5:ed:54:fb:6f:88:45:cc:aa:f9:2e:3e:
         9f:ce:76:50:73:ec:6a:ba:e2:c2:89:54:50:8d:b5:f8:c7:71:
         a9:15:03:6d:78:f7:52:db:db:c8:12:85:dc:12:b7:12:32:6c:
         2c:e5:d4:bc:6c:66:73:b4:23:91:b1:56:5f:5e:e1:4e:35:5a:
         f4:64:f1:59:0a:02:95:ef:7e:c2:6b:f9:38:a4:80:0f:62:8b:
         92:c5:0e:09:11:f1:cb:2c:f1:f3:4b:d1:e3:93:d0:81:13:de:
         5a:85:f0:88:b7:0f:55:01:e5:2e:d6:1f:18:b2:62:85:ee:8c:
         39:c2:aa:85:60:4b:96:2f:7e:7b:9e:88:01:d9:c3:61:49:98:
         68:84:a0:0e:e8:b2:47:02:93:41:7f:25:76:1a:90:69:3d:b2:
         34:4e:cd:a4:c5:d2:d3:4d:e1:0a:3b:cc:09:b5:2b:67:9b:c8:
         ec:fd:3d:b9:53:6c:12:cf:b6:d6:0d:2f:42:53:f4:6f:91:e2:
         47:5a:f8:9f:49:2c:ac:74:fc:48:ec:f5:39:62:be:5d:77:de:
         a8:bf:4e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:46 2026 by rpki-client