Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e32322e302f32342d3234203d3e2039383131.roa
File:                     3231382e3234362e32322e302f32342d3234203d3e2039383131.roa (raw, json)
Hash identifier:          +efbssfhzlyiWu9GuEDcfUTHVP3Xt1gYsGV068/Nbgo=
Subject key identifier:   82:65:FA:6F:05:FA:01:01:31:81:55:98:06:FE:11:12:80:DF:CE:47
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       13905BB7BF0FB0F7BF407EBBA6648CB619977738
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e32322e302f32342d3234203d3e2039383131.roa
Signing time:             Wed 03 Jun 2026 08:21:42 +0000
ROA not before:           Wed 03 Jun 2026 08:16:42 +0000
ROA not after:            Wed 02 Jun 2027 08:21:42 +0000
asID:                     9811
IP address blocks:        218.246.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:90:5b:b7:bf:0f:b0:f7:bf:40:7e:bb:a6:64:8c:b6:19:97:77:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Jun  3 08:16:42 2026 GMT
            Not After : Jun  2 08:21:42 2027 GMT
        Subject: CN=8265FA6F05FA01013181559806FE111280DFCE47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:44:d3:20:ac:75:0e:12:9f:e6:1f:3c:fe:
                    01:91:5d:c1:a3:6c:a5:0d:41:89:6a:35:36:ca:aa:
                    0e:56:da:54:d3:ea:65:c9:50:58:2d:f3:8d:30:b4:
                    b2:26:da:c0:3e:3d:1e:91:f8:97:6b:38:d5:6d:0c:
                    30:e3:5c:7a:47:dc:b8:3a:8a:2e:3d:b0:4a:c2:80:
                    51:0e:c9:30:ac:60:60:e9:54:2d:68:cf:9a:79:33:
                    64:3e:ff:f9:2a:8e:6e:48:c8:7f:41:1c:78:4d:b2:
                    a6:12:17:75:c0:c6:e2:9d:b5:d5:68:4f:0c:99:81:
                    cc:d5:2d:19:50:97:0c:6a:e9:28:1f:20:62:61:31:
                    03:6c:4a:48:b7:15:f6:5a:14:20:da:f2:48:5a:aa:
                    a8:0a:85:e5:43:de:10:dd:eb:3c:68:83:5d:d1:f5:
                    81:b4:27:35:be:ec:16:06:91:98:bc:8c:4c:83:96:
                    af:b2:a0:54:8d:5d:d1:7b:5c:d0:88:1f:72:90:64:
                    e7:fe:f4:2d:1c:d9:08:25:c7:69:0d:22:de:19:89:
                    66:eb:1a:ab:62:b1:85:d2:4c:cd:98:fe:8b:0d:02:
                    f1:4e:cc:b7:13:82:80:86:76:e7:dd:c5:3b:3d:e3:
                    6d:c5:ea:44:5c:df:22:75:81:7b:4a:2a:04:f3:9c:
                    0a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:65:FA:6F:05:FA:01:01:31:81:55:98:06:FE:11:12:80:DF:CE:47
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e32322e302f32342d3234203d3e2039383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.246.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:d2:88:64:fb:a8:ce:32:81:34:3d:15:40:49:cb:aa:e4:46:
         b0:55:ad:06:95:59:70:0a:6c:6f:f8:50:46:4a:6f:7b:14:bb:
         2a:95:ad:af:17:1d:e4:bb:d5:0d:46:0c:7d:dd:53:2a:e3:01:
         6e:21:9b:8c:18:12:ab:ba:dc:2a:f2:ff:cf:3d:4e:87:c5:6f:
         4d:81:40:e6:23:d6:c2:90:26:b7:27:0c:02:6a:d9:5d:5d:a0:
         37:b8:38:2b:19:58:36:e3:5a:71:c2:b0:5d:f6:e4:a2:f8:d6:
         8e:33:59:0f:8b:f4:fe:30:8c:24:b5:75:97:f2:f8:06:9b:2e:
         9c:7f:fc:ce:8b:b7:bf:a7:fc:ea:24:09:01:27:c0:72:ff:de:
         40:b2:72:3c:dc:e2:99:1e:c1:0b:2c:5d:52:83:06:80:8a:93:
         9c:5f:0a:f5:ca:78:45:b8:af:f6:80:61:de:6c:b9:ed:11:d3:
         b5:8d:6b:bd:5a:ca:e4:f7:80:6a:62:d8:df:1d:7d:27:0f:bb:
         8f:09:95:b8:e7:f0:a1:26:1f:a0:c9:37:90:54:98:3e:6d:bb:
         37:bc:0b:aa:7f:a9:78:e1:28:54:c1:51:a1:29:92:e8:59:96:
         47:83:7f:77:fa:4e:c0:36:ae:14:4b:df:84:35:ce:0a:6e:15:
         7f:45:a6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:25 2026 by rpki-client