Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3132382e302f32302d3230203d3e203137373735.roa
File:                     3132322e3134342e3132382e302f32302d3230203d3e203137373735.roa (raw, json)
Hash identifier:          UMi1TShL9GsbSSOLOZr/dNdEVjYlr1VeYALyhPn7D4Y=
Subject key identifier:   44:04:74:75:46:A5:1F:D4:79:EA:77:0C:74:77:82:1A:F8:3F:C9:65
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       4EDDADC822CE24329AE0D38D756F2CB97EFB0331
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3132382e302f32302d3230203d3e203137373735.roa
Signing time:             Wed 17 Jun 2026 08:12:03 +0000
ROA not before:           Wed 17 Jun 2026 08:07:03 +0000
ROA not after:            Wed 16 Jun 2027 08:12:03 +0000
asID:                     17775
IP address blocks:        122.144.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 15:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:dd:ad:c8:22:ce:24:32:9a:e0:d3:8d:75:6f:2c:b9:7e:fb:03:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 17 08:07:03 2026 GMT
            Not After : Jun 16 08:12:03 2027 GMT
        Subject: CN=4404747546A51FD479EA770C7477821AF83FC965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1f:08:ce:7b:24:9c:bc:c9:a5:6a:22:88:ac:
                    80:d6:87:86:9e:12:70:ca:f0:44:35:c9:96:ac:27:
                    ca:40:84:fa:2e:9d:5d:9d:d7:c4:68:57:b3:e7:94:
                    0a:49:74:0f:43:f9:68:d3:1c:55:8b:a8:26:29:a3:
                    db:e7:e9:e6:c0:2a:b3:b9:66:65:ff:11:45:6f:ff:
                    8f:58:df:66:c2:b0:ec:dc:b9:00:c4:3a:26:55:31:
                    42:f9:03:04:b6:68:a5:bd:08:18:ea:f7:5c:11:94:
                    f3:8e:ea:ce:0f:86:ce:c1:1d:27:e1:67:82:8d:fa:
                    2f:54:38:bc:4c:48:83:15:54:c6:17:0a:e0:f1:45:
                    99:2a:31:67:a4:93:64:ca:0f:be:88:4e:30:d4:ae:
                    ac:f4:66:a6:49:ab:ca:4d:31:b7:7d:ff:d5:f1:f3:
                    32:c6:ff:cd:32:48:6c:c7:06:37:78:34:b7:bf:63:
                    1a:e3:cf:91:f0:10:83:b0:b0:48:23:46:5a:56:0a:
                    cd:ab:df:e6:96:3c:8d:0a:80:06:dd:37:bf:75:cb:
                    b7:49:1b:73:97:c8:fa:44:c0:a2:34:01:35:9d:6d:
                    0b:05:57:76:8c:fd:70:f3:81:18:34:ab:22:b6:b3:
                    04:bb:1c:35:3d:a5:fc:18:dd:a2:77:a0:89:45:97:
                    f1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:04:74:75:46:A5:1F:D4:79:EA:77:0C:74:77:82:1A:F8:3F:C9:65
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3132382e302f32302d3230203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.144.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7f:1c:18:84:7c:0a:59:5f:e7:1f:5a:a7:c8:c5:aa:f6:64:8c:
         52:8b:ac:72:59:be:d6:fa:09:fe:47:a3:6e:69:6f:59:3e:ff:
         42:17:2f:da:24:3e:d4:8e:6b:53:1d:00:81:24:23:44:c2:30:
         1b:35:71:7a:1b:e1:21:a2:eb:84:66:d6:6a:df:6e:0a:28:82:
         95:0c:cd:02:2b:b1:06:15:80:5a:c9:88:b3:a9:2c:44:c8:68:
         d1:c7:7f:35:3b:ac:90:49:3c:ba:1d:84:5c:b9:64:bb:b4:5b:
         33:0d:35:3f:46:d9:1c:08:6f:93:eb:4e:39:00:fe:24:c6:f2:
         be:39:6b:a3:76:eb:b0:e1:b5:0c:ba:ab:84:40:9b:3f:a1:07:
         d7:1b:44:9a:44:a0:de:ed:eb:55:96:e0:ee:f2:51:5f:04:58:
         60:4b:9e:8b:ee:8c:a3:73:2f:63:1a:77:0e:8d:2a:81:8c:17:
         c9:69:59:69:c5:54:ba:98:7d:1e:1e:8e:68:16:51:09:21:40:
         56:e4:63:4e:a9:5b:ac:ff:d9:fa:5b:cd:6c:d0:b3:5d:07:9c:
         e4:53:21:e0:12:37:1a:e4:40:bb:35:91:c2:1c:11:c0:b6:fd:
         0b:77:a3:d0:9e:4b:68:71:5e:79:0e:fb:76:01:3f:d3:f7:45:
         19:9b:9b:f6
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUTt2tyCLOJDKa4NONdW8suX77AzEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NF
N0IwOEEwQjAeFw0yNjA2MTcwODA3MDNaFw0yNzA2MTYwODEyMDNaMDMxMTAvBgNV
BAMTKDQ0MDQ3NDc1NDZBNTFGRDQ3OUVBNzcwQzc0Nzc4MjFBRjgzRkM5NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJHwjOeyScvMmlaiKIrIDWh4ae
EnDK8EQ1yZasJ8pAhPounV2d18RoV7PnlApJdA9D+WjTHFWLqCYpo9vn6ebAKrO5
ZmX/EUVv/49Y32bCsOzcuQDEOiZVMUL5AwS2aKW9CBjq91wRlPOO6s4Phs7BHSfh
Z4KN+i9UOLxMSIMVVMYXCuDxRZkqMWekk2TKD76ITjDUrqz0ZqZJq8pNMbd9/9Xx
8zLG/80ySGzHBjd4NLe/Yxrjz5HwEIOwsEgjRlpWCs2r3+aWPI0KgAbdN791y7dJ
G3OXyPpEwKI0ATWdbQsFV3aM/XDzgRg0qyK2swS7HDU9pfwY3aJ3oIlFl/GzAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQURAR0dUalH9R56ncMdHeCGvg/yWUwHwYDVR0j
BBgwFoAUVLMaxAnbBS/VAbcFCdhUzOewigswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
OTY0NTk1Mjk1Nzg3NDE5Ny8wLzU0QjMxQUM0MDlEQjA1MkZENTAxQjcwNTA5RDg1
NENDRTdCMDhBMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NFN0IwOEEwQi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDk2NDU5NTI5NTc4NzQxOTcvMC8zMTMyMzIyZTMx
MzQzNDJlMzEzMjM4MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzEzNzM3MzczNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBHqQgDANBgkqhkiG9w0BAQsFAAOCAQEAfxwYhHwKWV/nH1qnyMWq
9mSMUousclm+1voJ/kejbmlvWT7/Qhcv2iQ+1I5rUx0AgSQjRMIwGzVxehvhIaLr
hGbWat9uCiiClQzNAiuxBhWAWsmIs6ksRMho0cd/NTuskEk8uh2EXLlku7RbMw01
P0bZHAhvk+tOOQD+JMbyvjlro3brsOG1DLqrhECbP6EH1xtEmkSg3u3rVZbg7vJR
XwRYYEuei+6Mo3MvYxp3Do0qgYwXyWlZacVUuph9Hh6OaBZRCSFAVuRjTqlbrP/Z
+lvNbNCzXQec5FMh4BI3GuRAuzWRwhwRwLb9C3ej0J5LaHFeeQ77dgE/0/dFGZub
9g==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:12 2026 by rpki-client