Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS24404.roa
File:                     AS24404.roa (raw, json)
Hash identifier:          LTvmMcy15z0lHHMl2wFaWuyhnh5iXV6CfE90p0TUMvE=
Subject key identifier:   2F:B4:AC:51:86:7C:51:73:0E:36:A3:A2:02:35:E1:DB:B0:4F:BB:C7
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       4C539F7F142652A3E7F36BF7F5225FE10C7233A4
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS24404.roa
Signing time:             Wed 10 Jun 2026 07:16:04 +0000
ROA not before:           Wed 10 Jun 2026 07:11:04 +0000
ROA not after:            Wed 09 Jun 2027 07:16:04 +0000
asID:                     24404
IP address blocks:        114.113.144.0/20 maxlen: 24
                          116.90.80.0/20 maxlen: 24
                          121.52.208.0/20 maxlen: 24
                          218.245.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 04:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:53:9f:7f:14:26:52:a3:e7:f3:6b:f7:f5:22:5f:e1:0c:72:33:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: Jun 10 07:11:04 2026 GMT
            Not After : Jun  9 07:16:04 2027 GMT
        Subject: CN=2FB4AC51867C51730E36A3A20235E1DBB04FBBC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:6e:ef:2e:ce:0f:47:41:52:8f:e1:04:77:
                    0e:54:b2:fe:c4:db:ce:d9:77:0e:01:42:53:e3:d5:
                    53:51:65:6b:fa:c1:d6:d9:ec:5a:ff:12:f9:df:07:
                    8b:a6:3c:4f:1b:4f:48:10:09:d5:ba:65:bf:20:8c:
                    9e:c7:7c:46:42:1d:08:5c:b1:6c:f9:3c:a9:7b:97:
                    38:00:54:06:be:f7:97:3b:ec:f4:1d:a6:d9:ce:a8:
                    cb:6d:59:18:15:75:f6:59:e7:6d:4a:90:a3:04:ed:
                    93:ce:d5:60:9d:22:2f:0d:e3:71:13:35:b1:7b:aa:
                    e0:c1:9c:77:3e:4f:b6:5d:45:34:7d:96:3e:21:38:
                    88:4e:14:e1:4c:e7:a0:fa:c7:61:b0:37:ee:79:0a:
                    b0:57:d6:4d:82:11:6b:b1:bf:4f:75:0d:88:e5:27:
                    dd:18:65:ed:59:e8:b0:7b:7e:87:5a:6b:3e:7d:05:
                    bd:ef:65:e0:95:81:f3:ae:eb:ba:36:b1:d1:39:56:
                    a7:71:d9:44:7d:8c:08:8d:46:c1:3a:c4:2f:e2:bd:
                    12:b0:86:47:f7:f1:94:d7:0a:b1:e2:8a:a4:be:3c:
                    d0:30:5f:99:86:d2:8c:be:c6:3c:c0:05:84:67:12:
                    43:bf:50:91:19:26:63:d8:f4:b9:a2:96:63:ff:d4:
                    f8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B4:AC:51:86:7C:51:73:0E:36:A3:A2:02:35:E1:DB:B0:4F:BB:C7
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS24404.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.113.144.0/20
                  116.90.80.0/20
                  121.52.208.0/20
                  218.245.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         16:11:99:e7:19:23:3f:52:fc:8f:53:5e:ba:15:23:ec:17:93:
         20:4f:ec:10:ca:11:f1:ef:9e:59:8f:32:0c:bd:6a:cc:39:a8:
         cd:9c:c8:58:5a:02:8b:6c:71:bf:0e:d6:cd:f0:67:11:23:7d:
         c8:52:9d:20:cb:0c:a3:6a:2a:84:cb:40:aa:78:a7:cc:73:1e:
         6a:58:44:6b:b6:c8:72:14:cc:2e:f3:10:90:c9:60:8a:82:fb:
         8d:31:66:74:fa:f3:14:99:5f:53:0b:3f:f0:8c:90:f8:e3:a7:
         5b:09:ed:89:64:8b:90:b6:6c:14:11:d8:7d:b9:d9:92:5b:64:
         0a:3b:bd:d1:34:07:6a:e6:fc:7a:a2:08:30:df:df:5e:20:f2:
         a6:78:21:df:36:3c:11:35:63:18:7b:fc:4c:e9:08:0b:83:b2:
         5c:ce:09:7b:c3:de:f9:d9:36:e8:59:64:71:67:73:8d:71:35:
         79:aa:55:5c:c5:47:78:54:ce:ca:1c:0b:20:8b:7c:46:93:62:
         60:3a:60:42:7d:2f:7d:e8:97:be:3f:a9:11:01:fd:e5:ac:0b:
         07:99:a1:b7:2d:27:68:8b:7c:42:8d:2b:c0:0d:58:00:a0:18:
         76:a5:84:90:b7:33:4c:f4:a4:ef:10:9d:e8:28:20:98:82:3d:
         f1:67:63:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:42:23 2026 by rpki-client