Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e34302e302f32312d3231203d3e203536303438.roa
File:                     3132322e31312e34302e302f32312d3231203d3e203536303438.roa (raw, json)
Hash identifier:          v4pzzGzUWs9sXfkWnaRsBIwheBnCfSO28nUsWmEeSrY=
Subject key identifier:   54:C1:1A:5B:40:16:F2:8F:18:0E:14:68:B6:3F:ED:B3:4D:23:FB:1B
Certificate issuer:       /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial:       41150D54E1A1CBB5FD4043BE898489CDC2048933
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e34302e302f32312d3231203d3e203536303438.roa
Signing time:             Tue 02 Jun 2026 07:48:54 +0000
ROA not before:           Tue 02 Jun 2026 07:43:54 +0000
ROA not after:            Tue 01 Jun 2027 07:48:54 +0000
asID:                     56048
IP address blocks:        122.11.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 01:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:15:0d:54:e1:a1:cb:b5:fd:40:43:be:89:84:89:cd:c2:04:89:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
        Validity
            Not Before: Jun  2 07:43:54 2026 GMT
            Not After : Jun  1 07:48:54 2027 GMT
        Subject: CN=54C11A5B4016F28F180E1468B63FEDB34D23FB1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:42:a3:0f:05:76:59:09:14:e7:86:b0:3d:69:
                    75:be:99:19:e5:da:49:1b:b8:2c:07:0a:aa:be:28:
                    2a:fd:28:bb:b4:c1:bd:4a:3d:31:75:86:af:02:a8:
                    5c:e4:d2:a2:23:c9:74:a5:d4:6b:8c:e6:39:8e:70:
                    e8:5a:ab:da:70:7e:0a:4c:49:29:94:16:42:5c:5b:
                    c9:a9:da:f7:5f:78:55:db:42:f3:6a:a7:2e:78:10:
                    56:26:f7:d4:49:61:27:97:6d:14:0a:bd:77:f0:25:
                    c9:b9:d6:4c:32:a0:da:39:c1:a6:e5:4a:89:7a:20:
                    07:ae:50:33:5a:f0:df:58:b4:72:39:64:c7:d7:bd:
                    f8:9f:ad:06:9b:36:e7:a1:75:d4:0e:57:55:ac:a0:
                    74:98:4e:38:f4:f5:4b:b0:78:25:3a:da:3e:e2:24:
                    3c:b6:92:8a:17:3b:79:4b:03:9f:c9:2a:1a:92:69:
                    10:eb:af:eb:d9:f7:e4:b8:04:66:f4:d1:10:ed:d8:
                    99:a5:de:81:12:d2:51:a2:4e:bc:54:be:f5:e0:c7:
                    02:64:4a:3c:8f:54:9d:88:6d:bb:a7:58:43:c5:d7:
                    ce:b5:2c:f1:d4:ae:7f:86:d9:d2:f7:39:7a:18:27:
                    90:b7:cb:2e:43:5e:0f:41:e5:ad:53:16:8b:9b:87:
                    30:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C1:1A:5B:40:16:F2:8F:18:0E:14:68:B6:3F:ED:B3:4D:23:FB:1B
            X509v3 Authority Key Identifier:
                keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e34302e302f32312d3231203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.11.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         32:f6:4b:09:f0:b3:b1:f5:7e:b4:3a:11:f1:15:e5:c2:26:d1:
         79:b9:3e:22:1e:ae:18:1d:67:6d:1f:55:b9:d7:c9:50:2d:b4:
         dd:ca:15:49:e6:65:09:f0:0e:d7:06:4d:2f:f8:18:3d:db:05:
         35:fe:4b:43:c7:5e:66:1a:da:f6:ed:01:5b:5e:cf:2b:cb:ae:
         ca:f1:29:99:fa:82:1b:e7:a3:2e:ae:57:d6:10:b1:83:79:38:
         92:27:b4:c5:9f:27:8d:a6:1f:4a:da:d9:c6:8a:de:9f:de:28:
         9d:e1:87:ce:21:ae:ba:22:01:47:3d:09:b6:28:bb:b7:82:56:
         e8:3f:e2:9e:32:1c:d0:90:51:9e:ba:37:9b:24:61:b8:90:bd:
         ca:86:c6:c1:ae:41:a1:a3:fc:0f:59:5f:b6:bf:70:ca:a9:bf:
         85:5d:17:ec:4d:91:52:e4:9d:07:67:a5:33:ff:fe:77:7a:b3:
         d0:c5:b3:67:a1:fd:ba:c5:d0:8d:37:88:26:f3:98:1f:5f:15:
         f2:f9:95:15:0f:43:85:e3:9a:4b:4b:32:da:f1:8d:82:01:09:
         e4:a1:bd:7e:ce:24:1a:04:dd:93:ff:fc:09:4e:27:51:cf:8e:
         24:98:c5:91:27:84:4e:9a:a4:cf:ca:c9:bb:d8:11:8b:81:a8:
         6c:69:c0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:30 2026 by rpki-client