Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231382e3234342e35322e302f32332d3233203d3e2034383038.roa
File:                     3231382e3234342e35322e302f32332d3233203d3e2034383038.roa (raw, json)
Hash identifier:          Pn2j6qMsVZYY1HREO3k7cz+k0wLvRddtDan8U5SlGkU=
Subject key identifier:   B6:A7:48:26:EB:F6:E6:4B:6E:7A:95:D9:8B:75:C5:9F:55:2A:FB:7F
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       200FA95F6D15DDDE94D4B7260F56176E44FB82C6
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231382e3234342e35322e302f32332d3233203d3e2034383038.roa
Signing time:             Thu 04 Jun 2026 11:35:24 +0000
ROA not before:           Thu 04 Jun 2026 11:30:24 +0000
ROA not after:            Thu 03 Jun 2027 11:35:24 +0000
asID:                     4808
IP address blocks:        218.244.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0f:a9:5f:6d:15:dd:de:94:d4:b7:26:0f:56:17:6e:44:fb:82:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun  4 11:30:24 2026 GMT
            Not After : Jun  3 11:35:24 2027 GMT
        Subject: CN=B6A74826EBF6E64B6E7A95D98B75C59F552AFB7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2b:62:3d:97:25:75:b9:23:6c:09:d1:3f:dc:
                    54:33:f3:d1:10:5b:96:14:a0:45:ff:e9:5e:1e:f1:
                    57:e9:2c:3f:16:5c:e4:6e:72:e5:8e:7b:86:2b:90:
                    68:e3:7d:15:3c:d5:4e:c4:83:fc:86:e6:d6:52:ea:
                    47:76:ea:9f:06:ae:77:ff:7c:57:c8:59:14:48:3b:
                    c5:bd:4d:98:59:20:8c:3e:20:e9:95:f8:fb:70:87:
                    3b:a5:36:50:43:58:7e:fc:80:74:fd:8f:9f:4f:5e:
                    b2:95:af:b9:f2:80:4b:00:ce:6e:f8:2a:ec:57:49:
                    3f:5b:49:48:75:5e:8d:5f:75:32:6a:42:d0:59:5c:
                    ea:99:9a:00:15:24:0f:8f:36:27:6b:4f:29:7e:47:
                    a8:a0:48:a0:e7:26:b5:85:b5:89:c6:cd:75:64:6c:
                    85:d0:7e:a1:88:e7:c4:6e:bb:8c:e4:32:65:cf:56:
                    ea:19:f0:20:c6:ca:ca:bd:9e:34:48:80:22:52:4e:
                    eb:4f:75:be:59:a3:2f:d3:56:48:1f:30:c2:d8:83:
                    85:0d:d8:12:0d:f3:e5:de:ae:b2:55:e1:b6:6c:70:
                    3e:a8:ae:79:c6:f2:71:82:c4:2d:40:27:b9:63:a9:
                    4e:e4:a7:ce:77:fe:26:2e:ec:ad:4a:a8:4f:d0:4b:
                    48:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A7:48:26:EB:F6:E6:4B:6E:7A:95:D9:8B:75:C5:9F:55:2A:FB:7F
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231382e3234342e35322e302f32332d3233203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.244.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:74:05:ed:0e:12:8f:f6:a1:b8:a5:62:50:6f:12:1c:80:8e:
         51:1f:4e:2a:d8:a4:96:0e:ca:d9:25:7b:33:52:1d:7d:c3:19:
         ca:f9:2b:6a:8d:1d:9e:72:a4:13:3c:4a:26:36:72:11:6a:43:
         4d:df:70:ad:7a:bb:a6:8f:ca:d4:7d:78:5a:2a:6e:c4:1e:2b:
         85:3c:cb:89:7f:7f:0f:6e:c7:df:86:52:b2:c1:63:2b:e9:82:
         45:d2:89:19:00:16:bc:4a:b5:bc:df:41:22:66:cc:59:60:e1:
         37:a1:47:25:99:db:61:e8:66:66:ad:8c:51:22:d4:3c:1d:97:
         a6:81:ee:6d:db:65:77:16:6f:9c:17:5d:c0:e1:09:db:c4:8d:
         f8:7d:bf:75:29:a1:ac:f8:36:a2:e5:4a:85:f2:4b:8e:cf:ff:
         ec:c1:ed:77:73:d6:fb:06:86:5e:13:cf:7b:50:d4:7d:b9:b0:
         99:e7:ac:3e:c3:84:20:32:d8:0d:e4:97:75:72:30:2d:f9:91:
         6f:12:27:95:11:05:55:96:a4:6b:56:7b:fe:b0:7f:b4:47:59:
         02:0a:f7:63:7b:eb:59:a6:e8:d4:de:31:12:57:02:1a:df:9c:
         02:81:f5:f4:14:28:a3:07:e5:55:7e:38:95:ff:68:66:99:20:
         a2:b8:b0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:06 2026 by rpki-client