Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3135342e3139322e302f31382d3138203d3e2034383038.roa
File:                     3231312e3135342e3139322e302f31382d3138203d3e2034383038.roa (raw, json)
Hash identifier:          oTCx1undjNnERxhJl1wAV0VrKzsM5P4D9+aqq0RSyuc=
Subject key identifier:   D2:AB:67:A1:64:5E:71:5C:85:DF:BA:AA:8E:CA:1E:AD:0F:BA:36:5D
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       207B9319E521252EC4596C5F4C58A7F8922361DE
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3135342e3139322e302f31382d3138203d3e2034383038.roa
Signing time:             Thu 04 Jun 2026 11:34:02 +0000
ROA not before:           Thu 04 Jun 2026 11:29:02 +0000
ROA not after:            Thu 03 Jun 2027 11:34:02 +0000
asID:                     4808
IP address blocks:        211.154.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:7b:93:19:e5:21:25:2e:c4:59:6c:5f:4c:58:a7:f8:92:23:61:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun  4 11:29:02 2026 GMT
            Not After : Jun  3 11:34:02 2027 GMT
        Subject: CN=D2AB67A1645E715C85DFBAAA8ECA1EAD0FBA365D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:99:5a:81:db:70:00:ed:72:36:fd:aa:12:5f:
                    7c:e9:3b:68:6e:12:26:51:b7:56:3d:9e:00:82:64:
                    89:1a:41:0e:f9:01:ea:39:9e:bb:39:bc:3f:e8:69:
                    d8:42:1e:55:6c:29:1a:96:9d:06:22:c1:31:73:bf:
                    e3:4a:3a:1f:b3:16:0d:50:d3:d7:b7:9d:c2:96:05:
                    6d:d5:2f:7a:d4:bd:89:a6:7a:35:f4:c7:9d:94:73:
                    e8:56:ab:40:d1:e1:56:1a:57:11:c1:44:20:d6:21:
                    91:9a:a3:0f:4e:b3:67:88:4e:37:2e:05:f0:43:a1:
                    f6:90:1a:c2:ae:38:0f:7f:35:6d:e8:1d:e3:1a:02:
                    72:18:a6:80:20:12:bb:25:cf:6f:3e:5d:a3:17:42:
                    b8:16:bb:7e:d7:58:c6:03:d2:89:8f:a2:e9:67:95:
                    94:eb:88:ff:e5:51:3e:2c:97:ab:f4:cd:70:d3:cc:
                    2b:f2:0f:fe:e7:8a:0e:40:38:5f:00:e8:94:89:51:
                    55:2a:70:6e:92:94:7c:7d:8a:1c:9c:6b:4c:10:fd:
                    bf:7d:d2:1d:82:fb:b2:83:25:5d:0a:88:50:65:1f:
                    df:31:5c:45:c9:bd:5b:3c:05:3f:34:47:e3:df:5a:
                    87:b5:cf:8b:a8:82:38:aa:e0:f8:f5:0d:9b:32:d1:
                    b4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AB:67:A1:64:5E:71:5C:85:DF:BA:AA:8E:CA:1E:AD:0F:BA:36:5D
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3135342e3139322e302f31382d3138203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.154.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5f:8c:14:08:0e:bc:17:f6:18:3d:55:66:31:ee:6a:6c:b3:65:
         e8:c1:c6:96:a6:80:5e:c2:3a:b9:0e:2e:4a:5b:c4:13:5a:20:
         07:28:66:87:0d:32:78:39:ee:ce:34:47:08:0a:be:d8:c7:30:
         d1:f8:5a:10:56:23:1e:e5:0a:b2:be:4f:76:1f:a5:c5:bd:13:
         0d:c5:fd:14:6c:ab:19:c6:db:fa:20:6b:1e:cf:77:36:ed:0e:
         20:dc:70:37:8f:08:92:ca:97:d9:08:73:25:90:51:73:ae:aa:
         66:77:48:d6:79:a5:da:96:7f:0b:d8:fd:c5:59:ef:8a:e6:66:
         ff:a9:f0:bb:a3:8d:4e:7f:28:47:6d:f1:3a:ce:9c:b0:b7:d4:
         36:78:be:50:01:50:9e:08:55:e5:4c:32:b2:dd:cf:ec:a7:49:
         f1:73:ac:a5:4e:07:c4:40:09:2c:9f:34:16:32:71:d2:34:ff:
         24:46:54:1f:4e:5a:46:03:dc:c8:2a:bb:e3:b0:4a:fd:22:31:
         8c:84:a7:0a:29:a5:d1:19:b3:5a:15:58:61:94:74:a1:06:1c:
         41:e4:fa:52:ef:60:9e:5e:3d:34:63:7d:2e:0c:34:65:c8:44:
         b7:9d:4d:e9:f3:d9:49:a8:ad:76:75:72:92:32:43:9f:06:a9:
         92:4e:18:34
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUIHuTGeUhJS7EWWxfTFin+JIjYd4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5
RjkzRjZGODAeFw0yNjA2MDQxMTI5MDJaFw0yNzA2MDMxMTM0MDJaMDMxMTAvBgNV
BAMTKEQyQUI2N0ExNjQ1RTcxNUM4NURGQkFBQThFQ0ExRUFEMEZCQTM2NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtmVqB23AA7XI2/aoSX3zpO2hu
EiZRt1Y9ngCCZIkaQQ75Aeo5nrs5vD/oadhCHlVsKRqWnQYiwTFzv+NKOh+zFg1Q
09e3ncKWBW3VL3rUvYmmejX0x52Uc+hWq0DR4VYaVxHBRCDWIZGaow9Os2eITjcu
BfBDofaQGsKuOA9/NW3oHeMaAnIYpoAgErslz28+XaMXQrgWu37XWMYD0omPouln
lZTriP/lUT4sl6v0zXDTzCvyD/7nig5AOF8A6JSJUVUqcG6SlHx9ihyca0wQ/b99
0h2C+7KDJV0KiFBlH98xXEXJvVs8BT80R+PfWoe1z4uogjiq4Pj1DZsy0bQRAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU0qtnoWRecVyF37qqjsoerQ+6Nl0wHwYDVR0j
BBgwFoAUpgmQqcpYkWQFBDK9BUc9z5+T9vgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NzU3NTQzNzUzMTI4MzQ3Ny8wL0E2MDk5MEE5Q0E1ODkxNjQwNTA0MzJCRDA1NDcz
RENGOUY5M0Y2RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5RjkzRjZGOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNzU3NTQzNzUzMTI4MzQ3Ny8wLzMyMzEzMTJlMzEz
NTM0MmUzMTM5MzIyZTMwMmYzMTM4MmQzMTM4MjAzZDNlMjAzNDM4MzAzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBtOawDANBgkqhkiG9w0BAQsFAAOCAQEAX4wUCA68F/YYPVVmMe5qbLNl
6MHGlqaAXsI6uQ4uSlvEE1ogByhmhw0yeDnuzjRHCAq+2Mcw0fhaEFYjHuUKsr5P
dh+lxb0TDcX9FGyrGcbb+iBrHs93Nu0OINxwN48IksqX2QhzJZBRc66qZndI1nml
2pZ/C9j9xVnviuZm/6nwu6ONTn8oR23xOs6csLfUNni+UAFQnghV5Uwyst3P7KdJ
8XOspU4HxEAJLJ80FjJx0jT/JEZUH05aRgPcyCq747BK/SIxjISnCiml0RmzWhVY
YZR0oQYcQeT6Uu9gnl49NGN9Lgw0ZchEt51N6fPZSaitdnVykjJDnwapkk4YNA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:12 2026 by rpki-client