Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3134342e302f32332d3233203d3e203137373735.roa
File:                     3132322e3134342e3134342e302f32332d3233203d3e203137373735.roa (raw, json)
Hash identifier:          IAKSL6bZABPaRMUEBhz/H1XY1VtVjb6Y+tOsihyKED4=
Subject key identifier:   02:76:5B:BC:1C:E9:B6:87:0E:02:48:FA:A2:7D:1E:59:FB:2E:BC:D4
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       7CF387C7FA80EB2485AF8DB49C490D84689EE1C4
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3134342e302f32332d3233203d3e203137373735.roa
Signing time:             Wed 17 Jun 2026 08:12:34 +0000
ROA not before:           Wed 17 Jun 2026 08:07:34 +0000
ROA not after:            Wed 16 Jun 2027 08:12:34 +0000
asID:                     17775
IP address blocks:        122.144.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 15:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f3:87:c7:fa:80:eb:24:85:af:8d:b4:9c:49:0d:84:68:9e:e1:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 17 08:07:34 2026 GMT
            Not After : Jun 16 08:12:34 2027 GMT
        Subject: CN=02765BBC1CE9B6870E0248FAA27D1E59FB2EBCD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b4:7d:f9:04:a4:ed:4c:c1:3a:57:23:66:6d:
                    1c:cf:1a:f3:93:67:38:e5:c6:04:4f:07:6b:bc:4a:
                    3c:5c:92:77:f4:58:bf:de:6e:0e:92:4e:31:6c:fb:
                    ec:84:72:6f:05:33:b2:8f:44:db:d2:3c:e6:59:7a:
                    28:65:fa:56:68:4a:32:cd:be:2a:34:fb:d3:e5:53:
                    a6:c3:63:84:7f:00:5d:5e:0e:14:7d:53:5b:a0:c6:
                    ee:29:1b:df:19:d6:4e:26:59:3d:69:d0:d1:bf:ee:
                    da:31:52:95:08:25:f6:74:1b:c4:0f:42:31:62:74:
                    b8:47:c7:42:dd:bf:b6:88:ae:c9:5b:c0:9f:ad:b6:
                    ee:7f:89:8b:18:25:b7:e4:77:b9:d9:53:40:b1:69:
                    40:a0:de:0d:67:8b:c0:5a:51:bf:17:11:a9:9f:82:
                    16:69:21:e0:3b:bf:92:39:83:5f:02:e3:e3:e2:e2:
                    d3:cd:3d:fb:25:9a:67:e3:34:a6:71:84:bc:a9:ab:
                    ff:f1:56:33:9b:50:2e:56:79:c8:fd:3a:ad:fe:fd:
                    6b:f6:73:e8:e3:9b:09:dc:2a:84:b3:0a:79:9c:02:
                    28:bc:d9:29:6d:81:b6:75:0f:72:25:c3:60:f6:8a:
                    85:a5:33:28:b8:a5:4b:9d:b7:f2:e1:b2:d9:d6:d7:
                    c6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:76:5B:BC:1C:E9:B6:87:0E:02:48:FA:A2:7D:1E:59:FB:2E:BC:D4
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3134342e302f32332d3233203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.144.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:45:10:8b:c6:7f:0c:08:a3:72:0c:5c:45:36:3b:b4:e8:df:
         bb:77:f2:82:b6:69:92:5d:01:8c:ab:2c:0f:d3:7e:66:3a:8f:
         1b:5f:c4:a5:fd:80:2a:cd:7c:dc:ae:eb:3c:c3:6d:c1:b3:21:
         92:46:26:e2:08:75:d0:db:2a:ce:08:5c:da:5a:31:8c:08:ea:
         b6:09:39:94:33:0b:99:3d:5a:7a:f5:d0:9f:cf:4b:a6:70:04:
         85:47:64:cf:70:5e:f4:2d:be:e6:81:bb:f4:bd:69:aa:14:16:
         5e:bf:97:1b:2c:df:aa:22:27:30:54:66:a9:cb:26:b5:e0:66:
         ab:13:f0:24:74:e3:71:8d:09:ec:25:99:7c:af:9e:94:cb:44:
         1b:8a:81:74:dc:79:3c:79:89:5e:92:86:cc:22:b8:8c:73:03:
         fb:78:f8:78:49:f4:60:ed:38:ae:1c:a2:9d:72:ed:7a:39:aa:
         52:70:dc:c4:14:60:db:7c:95:ac:70:79:af:5d:73:d0:de:76:
         23:3c:fb:a4:b1:30:fd:f4:87:23:35:cc:9d:64:0e:9f:21:ee:
         1c:e6:8a:75:08:25:bc:41:d4:dd:21:ff:e1:94:79:35:80:43:
         f4:29:9c:b3:df:c5:12:d7:2b:5c:92:41:1a:74:2b:9f:1a:8e:
         d0:55:70:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:55:30 2026 by rpki-client