Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e31362e302f32302d3230203d3e203536303438.roa
File:                     3231382e3234362e31362e302f32302d3230203d3e203536303438.roa (raw, json)
Hash identifier:          Hi+F+5MMIB/eEr1MaBYhRyuwvB43+PK66twPhPvReDI=
Subject key identifier:   0E:CE:61:35:EE:66:A7:63:F2:02:45:EC:E8:C1:DE:12:89:0E:F5:94
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       2A6F1064DF6862DAD94A9AB599075CCB85E7537E
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e31362e302f32302d3230203d3e203536303438.roa
Signing time:             Fri 18 Sep 2026 02:41:36 +0000
ROA not before:           Fri 18 Sep 2026 02:36:36 +0000
ROA not after:            Fri 17 Sep 2027 02:41:36 +0000
asID:                     56048
IP address blocks:        218.246.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 17:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:6f:10:64:df:68:62:da:d9:4a:9a:b5:99:07:5c:cb:85:e7:53:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Sep 18 02:36:36 2026 GMT
            Not After : Sep 17 02:41:36 2027 GMT
        Subject: CN=0ECE6135EE66A763F20245ECE8C1DE12890EF594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3c:0d:ef:55:0a:e6:49:1f:4f:5c:3b:d5:a8:
                    e0:7e:b1:94:8b:7a:97:cb:7b:54:cd:49:88:5d:f2:
                    51:9b:78:d7:a4:a5:26:95:8d:91:fb:7d:a1:01:78:
                    b3:74:2e:21:c4:25:71:32:e6:fb:95:f4:8a:03:3c:
                    73:52:6d:27:99:35:a1:12:6a:cd:73:ef:39:be:c9:
                    51:b3:a7:97:cc:62:cf:ca:37:f1:48:8d:65:9b:37:
                    25:4e:aa:20:07:2f:bf:9a:f9:5e:46:ec:16:90:68:
                    b6:8c:33:8f:f2:2c:ab:6b:f7:ad:47:2a:40:be:2a:
                    7f:f2:84:c7:ab:a5:a6:7b:d4:5c:a7:e9:b7:a3:11:
                    1a:37:06:39:21:1d:33:f9:92:0b:74:6a:84:ff:ca:
                    81:bf:ab:b4:94:28:bf:3a:11:7e:4b:0a:84:98:4a:
                    49:a0:a5:d3:41:d1:86:d5:72:40:65:8d:26:d7:24:
                    d8:64:7d:f9:82:fe:d1:da:c6:fa:26:aa:16:8a:91:
                    bf:18:f6:14:ac:9b:e8:6b:bb:79:1b:5f:3c:4e:7f:
                    9a:1f:3b:4f:17:37:f0:9d:7d:99:ad:14:17:a3:31:
                    06:4c:a7:3c:6f:e8:b1:c4:d0:0d:97:6b:eb:30:bb:
                    03:22:ad:9e:57:ab:3a:db:4f:c5:a1:3e:46:46:ea:
                    eb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CE:61:35:EE:66:A7:63:F2:02:45:EC:E8:C1:DE:12:89:0E:F5:94
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e31362e302f32302d3230203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.246.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9b:b0:b9:e1:3d:70:33:28:4a:52:9b:79:de:d6:ac:bb:61:ab:
         1e:29:a2:d2:ea:4f:aa:05:fb:38:f8:66:a6:33:20:ec:38:6b:
         9b:4f:36:b2:60:b0:bc:13:50:18:96:c7:50:ce:c2:fe:b2:3c:
         26:95:22:a4:83:a9:a3:31:e9:00:73:de:6e:a9:98:bb:1a:bd:
         18:df:d1:6d:09:3b:08:57:d1:77:2c:18:97:e6:1b:38:ea:83:
         df:79:37:71:c2:9c:a1:cf:a7:4f:c2:1d:10:d8:9a:a5:83:31:
         fc:e6:e0:f7:03:2a:ce:49:81:96:7d:5b:73:cf:12:3c:8c:d1:
         ce:2d:aa:e9:ec:05:19:eb:8d:26:45:67:f6:2c:3d:30:b2:ad:
         f3:96:e2:4b:d6:84:92:98:cb:5c:48:aa:ae:36:d8:e8:86:d4:
         5e:5f:65:d3:c9:e5:a5:67:9a:7d:da:ab:d6:48:27:81:23:a5:
         9e:e1:41:64:2a:bd:69:89:d6:4d:65:a6:89:4f:8c:3c:df:5b:
         db:22:5c:31:5a:4a:5e:75:ae:15:f6:e2:5d:07:fe:32:7e:e3:
         3a:31:4f:d1:e6:c8:e5:b7:fc:3c:a9:a4:e0:7a:99:84:f5:48:
         38:0e:11:3f:78:aa:79:24:41:2e:42:8d:25:c6:33:31:8f:95:
         7b:9a:d9:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:16:10 2026 by rpki-client