Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e31392e302f32342d3234203d3e2034383038.roa
File:                     3231312e3134342e31392e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          sjuCHNF6t5wwtN7axJ37hTPWlzyRXRyLX6a5x5L5BRo=
Subject key identifier:   2A:B5:A4:95:84:AC:D4:6B:BB:F9:6D:75:7B:7F:A0:0B:3A:3E:28:8B
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       60C2147543D448359472C494F32199EF9A4D581F
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e31392e302f32342d3234203d3e2034383038.roa
Signing time:             Thu 04 Jun 2026 11:30:53 +0000
ROA not before:           Thu 04 Jun 2026 11:25:53 +0000
ROA not after:            Thu 03 Jun 2027 11:30:53 +0000
asID:                     4808
IP address blocks:        211.144.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c2:14:75:43:d4:48:35:94:72:c4:94:f3:21:99:ef:9a:4d:58:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun  4 11:25:53 2026 GMT
            Not After : Jun  3 11:30:53 2027 GMT
        Subject: CN=2AB5A49584ACD46BBBF96D757B7FA00B3A3E288B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:67:57:87:90:67:8d:71:14:d4:a2:35:c2:da:
                    38:1c:10:5a:01:bd:93:ba:61:5c:79:7c:44:6b:c5:
                    c8:02:51:b9:3f:5e:4e:15:8e:b3:52:7e:85:25:23:
                    c1:64:f6:6a:32:3a:21:1d:37:ea:86:60:7d:1a:1b:
                    88:c4:e9:48:f6:c3:27:da:f5:07:69:10:e8:f6:8c:
                    35:19:93:02:a1:d3:d1:ea:96:d5:8a:1d:31:a3:65:
                    20:e3:fb:ce:bd:ee:1e:80:97:b9:bc:be:49:cf:9a:
                    12:a8:80:43:13:de:6a:df:61:23:81:00:8a:47:d1:
                    54:7b:fe:71:d7:b3:bd:ec:40:a8:e5:2f:84:cf:4e:
                    9d:da:16:a4:cc:b5:9f:42:1a:2c:d5:57:f6:85:21:
                    28:ec:1e:07:eb:78:7a:12:c6:fa:99:c8:df:1f:e9:
                    66:aa:a1:8a:b0:f8:8f:0b:a6:d6:3b:4a:ff:3a:86:
                    5a:ae:06:59:7b:2b:9c:7c:c2:2a:31:76:c8:40:55:
                    2f:d9:4f:99:00:1c:18:0b:4b:50:23:e1:4e:b4:84:
                    72:52:5d:13:7d:73:3c:8d:e7:52:69:e8:5e:52:28:
                    7c:46:6e:30:f8:9b:7a:5e:cb:d7:7b:80:07:ab:6f:
                    9e:10:96:80:8a:05:4b:58:e0:36:e9:90:88:14:8d:
                    cf:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B5:A4:95:84:AC:D4:6B:BB:F9:6D:75:7B:7F:A0:0B:3A:3E:28:8B
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e31392e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.144.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:d5:74:1e:f3:f0:a5:70:48:dd:30:e9:50:69:82:7b:ba:21:
         1e:24:f5:33:d6:65:9d:30:7b:ce:3b:6e:c0:95:36:19:bf:2f:
         54:65:3d:b1:e9:98:28:a0:84:d5:01:c7:40:fc:91:5c:fe:24:
         80:e9:c9:5a:09:ab:ad:bc:e7:11:7a:2b:64:33:e4:2a:db:51:
         79:3e:d2:d5:bf:ad:61:9d:28:73:b6:a4:1e:3c:f5:c1:23:e6:
         c6:9a:6f:90:a4:0f:d1:90:97:ec:44:88:cd:9c:33:bb:1b:81:
         d3:a8:26:b8:95:de:fe:94:41:27:0e:60:73:86:65:cd:07:b0:
         94:b9:f5:3b:35:fd:0c:19:78:2f:93:1d:0b:39:6b:c3:10:70:
         48:d3:45:00:1e:04:7e:a8:5d:91:27:10:7d:3c:cf:19:28:06:
         13:5c:04:a6:9e:86:fa:c8:89:da:4d:13:1d:17:50:e0:a0:13:
         e3:25:d4:d0:24:0e:17:9d:34:8e:51:e3:2f:27:bf:a5:48:4f:
         cf:67:c8:2e:54:c8:17:b0:e2:6e:9e:af:10:1d:98:64:e1:46:
         83:cb:e4:ec:0f:ef:32:5b:ba:c2:22:89:02:71:89:e3:1e:02:
         fd:c2:12:4b:f4:3a:bd:c0:0b:07:d3:03:eb:a5:76:4c:49:64:
         93:53:73:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:49 2026 by rpki-client