Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3134352e302f32342d3234203d3e203137373735.roa
File:                     3132322e3134342e3134352e302f32342d3234203d3e203137373735.roa (raw, json)
Hash identifier:          qhtMtP6XjyrrUbUvXLWmJfXeeHU/Fb5bPWW6Po5L10M=
Subject key identifier:   2F:C2:84:56:0D:E2:30:8B:2B:4D:FA:9C:A6:77:0B:0D:0E:88:38:D5
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       6A53BEBF6EED77EC51D2D4A6DEC6409C5D0D4DE3
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3134352e302f32342d3234203d3e203137373735.roa
Signing time:             Wed 17 Jun 2026 08:12:22 +0000
ROA not before:           Wed 17 Jun 2026 08:07:22 +0000
ROA not after:            Wed 16 Jun 2027 08:12:22 +0000
asID:                     17775
IP address blocks:        122.144.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 15:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:53:be:bf:6e:ed:77:ec:51:d2:d4:a6:de:c6:40:9c:5d:0d:4d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 17 08:07:22 2026 GMT
            Not After : Jun 16 08:12:22 2027 GMT
        Subject: CN=2FC284560DE2308B2B4DFA9CA6770B0D0E8838D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1c:7b:a8:05:a1:8c:7a:79:b2:50:07:8f:73:
                    b1:05:12:95:db:69:82:24:d6:e0:84:8c:83:a6:11:
                    f5:a3:73:b8:36:ef:a9:69:f5:e0:71:70:e0:3f:8b:
                    91:2b:3d:30:35:a5:e1:45:ee:7d:74:9c:94:00:1c:
                    5d:d8:c9:4d:65:53:51:0d:f2:76:f8:f4:1b:bf:f9:
                    cb:e8:f0:10:df:11:a2:8d:27:e0:75:a2:3c:54:a8:
                    9c:9a:7a:b3:dc:e3:51:a4:cd:9b:a6:45:11:91:e0:
                    79:4a:e9:2b:32:86:29:7b:ff:55:0d:f1:b6:e7:f6:
                    9e:55:56:2c:5c:50:74:b2:cb:d7:f0:b0:fb:6d:e3:
                    52:5a:41:bc:26:c7:33:41:9c:f7:fb:1d:d7:25:90:
                    16:1a:b9:5c:37:32:c9:26:67:17:15:83:b8:c9:35:
                    aa:5e:ab:f2:75:64:14:57:60:0a:36:cc:47:bf:db:
                    c5:4c:76:c1:3c:c6:83:cd:b2:b3:a8:eb:a5:49:18:
                    8b:77:f7:d8:d6:81:14:c0:c4:b9:ad:26:08:58:52:
                    cc:e1:05:7d:03:de:04:a2:d0:87:c5:b4:f7:fa:6c:
                    28:4e:e4:4b:fa:76:cc:93:c4:37:ce:db:a8:33:d8:
                    3e:48:0a:88:30:b6:b9:f1:ee:52:fe:e8:16:bd:90:
                    7e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C2:84:56:0D:E2:30:8B:2B:4D:FA:9C:A6:77:0B:0D:0E:88:38:D5
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3134352e302f32342d3234203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.144.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:32:a1:a2:5d:e8:fa:0e:86:bc:4b:a6:f2:bb:d7:b6:33:3e:
         50:ed:5d:dd:e1:f0:17:5e:c3:58:04:1c:9c:ea:5a:0b:a1:87:
         d3:55:37:b6:04:56:0b:28:38:11:f3:71:52:e2:fe:37:0d:15:
         94:bf:a6:25:b0:2c:d1:ce:a3:25:ee:4c:93:8e:5f:94:6b:86:
         33:a4:c8:33:90:b0:ee:76:d5:5f:cc:0f:c0:25:37:43:51:f9:
         c0:aa:ae:a7:8d:5d:dd:ad:53:3a:5b:dd:dc:39:ae:49:87:5b:
         b1:c2:d0:27:ee:bb:dd:46:83:f1:84:5a:f4:49:d6:02:05:fe:
         02:03:5d:e5:b0:14:ea:e9:ae:ab:ad:7a:57:f4:2c:48:f1:5c:
         a9:60:0b:6d:26:5b:9c:0e:a3:e8:cd:95:1f:ae:89:57:16:ad:
         42:6c:f1:62:5c:46:b7:36:b5:f8:30:43:d8:07:88:25:61:ca:
         07:13:d8:16:58:44:ae:fc:3a:cd:01:86:9f:38:55:1c:a6:f6:
         38:8c:b9:6b:8a:3c:4f:12:6e:33:e0:b7:78:91:f9:61:8a:fd:
         f1:0c:e8:67:d9:80:fe:c1:aa:98:10:7d:43:c1:3e:ec:6a:ed:
         16:46:40:e1:87:4d:38:b0:6d:78:e1:3f:a3:b7:4d:98:06:f3:
         49:b8:d2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:56:30 2026 by rpki-client