Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231382e3234342e34342e302f32322d3232203d3e2034383038.roa
File:                     3231382e3234342e34342e302f32322d3232203d3e2034383038.roa (raw, json)
Hash identifier:          9TvilzeITSoaW5VFw4s6x4iFni5h3IND+YxZ3iXWjns=
Subject key identifier:   09:95:36:7D:48:60:14:D3:A7:3E:6C:95:7D:60:C9:D7:1C:D3:9C:1C
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       41840F3D2F6E99185C97F81BA3960CBD89FAAADA
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231382e3234342e34342e302f32322d3232203d3e2034383038.roa
Signing time:             Mon 08 Jun 2026 10:14:57 +0000
ROA not before:           Mon 08 Jun 2026 10:09:57 +0000
ROA not after:            Mon 07 Jun 2027 10:14:57 +0000
asID:                     4808
IP address blocks:        218.244.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:84:0f:3d:2f:6e:99:18:5c:97:f8:1b:a3:96:0c:bd:89:fa:aa:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun  8 10:09:57 2026 GMT
            Not After : Jun  7 10:14:57 2027 GMT
        Subject: CN=0995367D486014D3A73E6C957D60C9D71CD39C1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:52:c8:1f:ed:ce:5e:d4:c8:f1:36:35:4d:43:
                    9e:b7:42:50:58:b7:9a:ac:fb:cf:87:53:78:16:8f:
                    05:b7:1d:b2:28:6b:4d:18:c9:ee:fd:01:95:0b:08:
                    83:11:5d:57:4d:2e:bb:e1:cb:ae:9b:b1:6b:a2:f6:
                    6b:b8:3e:cc:2d:fd:99:67:6b:b0:0d:12:89:93:d4:
                    99:7f:19:1f:35:6a:2a:f5:c9:b4:af:46:bf:47:65:
                    c4:82:1c:9d:5b:24:02:ec:7a:f0:66:25:d1:5c:c8:
                    f7:be:c1:9f:1d:18:30:25:3f:e7:9a:63:5a:8e:a9:
                    99:f4:6b:c0:a0:a2:68:c7:18:19:65:b2:2e:9d:7f:
                    6b:6b:9e:57:3e:29:b1:f7:82:98:57:37:b9:d2:7f:
                    43:21:bd:e8:86:be:07:09:53:4f:b0:43:78:68:de:
                    3f:5b:7a:49:c4:6c:63:5b:c9:ec:12:cb:0b:74:cb:
                    27:1a:a2:66:59:1c:dd:b1:d2:7c:ef:2c:cd:e5:a1:
                    49:9a:d8:26:29:71:e0:d6:91:13:33:84:15:a0:e8:
                    89:9d:31:0c:66:ea:af:6c:18:65:c2:ac:ff:1a:6d:
                    d5:13:74:ef:e9:b1:a4:93:7e:c1:d6:44:a9:cb:2a:
                    0a:f1:24:8c:6f:48:84:1e:75:4f:64:d5:2e:49:3d:
                    67:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:95:36:7D:48:60:14:D3:A7:3E:6C:95:7D:60:C9:D7:1C:D3:9C:1C
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231382e3234342e34342e302f32322d3232203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.244.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:fc:41:e9:0f:2a:13:83:06:4c:5b:fc:20:e0:ef:97:85:c2:
         25:83:d1:94:01:fe:42:39:96:2e:75:27:3b:de:a3:77:13:af:
         8c:be:b4:16:1f:d1:af:b7:fe:1b:d3:a4:07:f1:b7:61:d3:b4:
         57:dc:00:b4:58:50:fb:0f:c2:58:5f:1e:32:d5:24:94:f1:93:
         a5:34:5d:b5:ee:c0:ce:07:79:67:28:e7:65:e0:c3:f6:25:9d:
         25:7c:ce:74:72:87:dc:b4:de:41:a4:00:ee:89:93:99:b6:a9:
         00:6a:35:9f:8b:3f:1d:d5:89:3c:d9:fd:21:e9:b4:8d:2a:e3:
         08:44:7e:2d:c6:d5:80:11:18:32:d4:2a:56:00:8e:e3:62:9a:
         c9:72:b4:ae:fa:ff:ab:8c:45:d9:03:c4:c0:65:33:26:0a:47:
         de:14:3a:78:eb:14:a3:f6:d8:4b:a6:49:81:b5:9b:27:97:9a:
         9b:96:d7:b5:12:b8:bf:3d:4a:e0:99:81:da:91:b4:42:e8:fb:
         ec:f7:f7:2e:71:c4:a4:2d:24:fb:f5:aa:f4:fe:75:2d:68:57:
         f3:bb:d0:68:ca:30:ff:c3:c3:fc:69:3a:ed:98:33:cf:b4:aa:
         65:11:6f:bc:ff:cd:ea:49:e4:b2:73:00:92:78:39:c7:79:53:
         f7:46:c9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:50 2026 by rpki-client