Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e32372e302f32342d3234203d3e2034383038.roa
File:                     3231312e3134342e32372e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          xKIfA4j3h5rASCvTTfsL+SWoKX7hU/pX9Gs8SYyx514=
Subject key identifier:   90:2F:16:AA:8D:4F:96:7E:3A:4B:3E:30:EB:76:DF:EE:11:15:76:C3
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       45BBA76C7627CCA96C11DA9D54BE320F805BE465
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e32372e302f32342d3234203d3e2034383038.roa
Signing time:             Thu 04 Jun 2026 11:22:55 +0000
ROA not before:           Thu 04 Jun 2026 11:17:55 +0000
ROA not after:            Thu 03 Jun 2027 11:22:55 +0000
asID:                     4808
IP address blocks:        211.144.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:bb:a7:6c:76:27:cc:a9:6c:11:da:9d:54:be:32:0f:80:5b:e4:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun  4 11:17:55 2026 GMT
            Not After : Jun  3 11:22:55 2027 GMT
        Subject: CN=902F16AA8D4F967E3A4B3E30EB76DFEE111576C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d1:cc:a0:df:51:07:db:97:1a:70:42:2d:3c:
                    fd:5f:bf:df:42:19:12:ea:81:54:c1:ac:b2:96:ad:
                    bf:d3:7a:e7:85:69:92:f8:e2:68:de:52:71:40:0f:
                    95:ef:d3:11:51:4e:7c:ed:4f:c5:78:98:ee:08:ba:
                    87:8a:a5:79:9d:ca:fb:ea:e0:73:57:2b:f2:52:ce:
                    76:e4:86:97:55:f0:d2:ba:55:18:a3:e9:f6:53:ea:
                    71:a7:b6:c9:55:d6:86:99:5f:d8:73:6f:de:e6:de:
                    17:1f:5b:00:cd:12:14:e1:14:b3:2e:de:35:8c:d6:
                    3c:23:c6:b6:a8:85:d5:ef:14:28:5e:8a:7d:06:77:
                    b8:16:04:36:8f:2c:23:85:4b:81:0d:66:1f:72:ab:
                    70:a0:c1:d4:92:9e:96:32:60:3b:3c:7d:4c:82:78:
                    c7:cf:1e:d2:e3:ff:48:d3:5d:09:73:42:72:ea:2c:
                    2a:62:8f:ad:f3:e5:e6:5f:1c:fe:9d:8d:47:0d:62:
                    ac:5e:ea:db:c2:63:06:94:d3:9a:fd:28:92:70:58:
                    bd:bc:40:b1:18:da:e5:ce:62:37:0d:2f:3a:60:4a:
                    5b:83:ac:7a:da:03:2d:c4:04:0f:01:55:82:89:e2:
                    1a:91:7d:97:12:90:00:bb:de:d1:8c:1e:e4:36:8c:
                    80:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2F:16:AA:8D:4F:96:7E:3A:4B:3E:30:EB:76:DF:EE:11:15:76:C3
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e32372e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.144.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:f7:4e:d6:4b:a6:2d:89:21:82:ba:79:cb:d3:67:2d:72:51:
         9c:83:d0:62:1c:6e:68:d1:39:6b:fc:85:88:89:b1:46:f2:8f:
         bc:ac:a3:fa:3a:5b:12:c1:d3:26:67:f9:d3:4f:64:1b:6f:5d:
         73:a9:38:f3:64:ee:ca:db:88:39:fa:f6:b5:41:18:60:0b:b1:
         02:ab:7f:ad:7e:31:51:5f:d3:06:d7:65:e7:5d:87:20:f0:83:
         8d:b6:cd:de:e3:23:44:90:a9:77:47:5a:a4:07:8d:80:43:c7:
         c3:71:74:89:89:16:7a:aa:af:75:d8:a5:bf:9d:5a:0e:ba:46:
         71:22:e7:4c:83:1c:3d:b8:c2:37:56:91:cd:b4:d7:9d:8f:35:
         86:5c:5d:df:d1:4d:5a:4d:38:46:29:f3:ad:e8:f8:9b:01:1f:
         aa:7d:36:0f:9d:0b:11:27:c9:97:e2:46:a4:b7:f2:c9:88:03:
         0e:3f:34:bd:ef:cb:aa:f6:14:5c:ef:6d:f9:fa:8c:ce:a3:be:
         30:94:30:9b:6e:5b:90:a7:e2:37:ef:d2:68:df:c1:34:e5:20:
         20:fe:05:b6:b6:71:16:65:96:da:0c:dc:25:3e:5d:2f:51:bc:
         e9:bc:a7:3e:40:b4:72:ec:b7:ed:30:4a:71:90:1e:2f:3d:0d:
         ef:ed:1c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:47 2026 by rpki-client