Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3134372e302f32342d3234203d3e203137373735.roa
File:                     3132322e3134342e3134372e302f32342d3234203d3e203137373735.roa (raw, json)
Hash identifier:          K20upVke/Q7VrrHx5ukUKcSISAMrOitWnTlQTUgGBU0=
Subject key identifier:   F2:A7:F9:E4:D0:B7:35:6A:A2:B4:33:C8:6D:E7:67:0A:82:1F:66:AF
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       63BCE4DA4E574BC3938491729D5C90AD691D6B79
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3134372e302f32342d3234203d3e203137373735.roa
Signing time:             Wed 17 Jun 2026 08:13:06 +0000
ROA not before:           Wed 17 Jun 2026 08:08:06 +0000
ROA not after:            Wed 16 Jun 2027 08:13:06 +0000
asID:                     17775
IP address blocks:        122.144.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 15:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:bc:e4:da:4e:57:4b:c3:93:84:91:72:9d:5c:90:ad:69:1d:6b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 17 08:08:06 2026 GMT
            Not After : Jun 16 08:13:06 2027 GMT
        Subject: CN=F2A7F9E4D0B7356AA2B433C86DE7670A821F66AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7c:b6:b1:ea:27:cf:87:95:16:3a:f4:90:0f:
                    9e:c6:c7:40:15:75:3b:63:4e:4d:6c:73:d7:a1:f5:
                    72:9d:a0:8a:38:2b:06:f0:97:60:a0:df:5d:59:9d:
                    38:fa:22:42:d3:88:59:c9:0d:0d:a3:9c:79:e9:73:
                    72:92:97:76:72:15:8e:a2:90:3d:9f:39:05:c8:e9:
                    31:cd:b0:c1:cb:4a:bc:4b:70:0a:d2:96:10:6c:ea:
                    04:a2:ce:17:b3:a4:88:bc:17:6f:cf:0a:c6:b3:e0:
                    2f:2e:3d:cc:2d:44:b9:63:6e:bd:33:c8:e2:f1:9d:
                    04:6d:be:87:7c:b6:7f:ad:61:34:ea:3f:95:a8:ba:
                    af:e1:b3:64:5f:3f:b9:df:01:5c:c0:a9:db:28:b0:
                    ff:bd:10:93:39:a7:e0:a5:68:23:2f:1e:3e:12:94:
                    a7:e9:40:72:c0:73:59:39:d1:c8:28:5f:85:8f:3d:
                    98:91:58:31:8b:3c:dc:dd:2a:92:c5:f8:f0:ba:08:
                    c9:e7:32:e4:5f:b9:64:9e:e2:87:b4:19:a8:c9:2d:
                    34:0d:44:8f:72:5c:8f:03:bd:07:25:2b:1b:10:d9:
                    d5:04:3d:58:3c:a9:fd:86:63:8b:9e:79:ee:82:1e:
                    21:12:00:c6:7a:6b:dc:49:03:f4:b1:60:17:ab:26:
                    cb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A7:F9:E4:D0:B7:35:6A:A2:B4:33:C8:6D:E7:67:0A:82:1F:66:AF
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3134372e302f32342d3234203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.144.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:b9:94:3a:b3:80:eb:f0:ef:67:f5:ff:c5:7a:6c:d4:cd:6c:
         4d:4b:aa:b6:a8:8f:a9:1a:ce:2b:c8:37:e3:06:93:33:0b:86:
         9b:2e:df:94:30:9a:8a:3f:a7:a2:0a:cf:92:66:6c:c6:d8:93:
         17:b5:1e:77:1d:bf:53:cb:95:0b:ff:5c:63:77:fe:8a:cc:09:
         05:f4:de:51:5c:d9:be:1d:00:be:a4:75:a8:55:5e:6e:0f:08:
         ea:25:7c:28:4e:3a:c3:d0:e1:95:6e:92:29:f4:03:da:10:34:
         26:2d:b9:17:7d:67:64:ba:cc:83:65:88:c6:a7:aa:38:6d:2c:
         3b:3a:b5:ef:c6:4f:91:4f:fc:b4:53:cd:5c:c2:5f:f4:e1:fe:
         20:af:39:8f:12:c3:ca:f7:fa:0e:e6:56:ed:a9:3d:46:70:62:
         3c:f8:da:2f:3e:19:f9:57:4c:dd:5a:6f:f6:32:d4:39:bd:d6:
         e4:60:3e:52:74:fb:a1:e9:20:4b:34:df:66:84:27:db:80:75:
         23:78:5c:b9:a6:f9:be:bc:39:39:93:08:8a:a9:99:5f:66:c8:
         e6:a3:ec:d3:0f:f7:de:aa:1c:56:bb:ff:3b:63:84:a0:0e:66:
         9c:a2:c2:7d:74:84:be:17:23:4a:c7:01:01:1d:4f:9a:ae:99:
         8a:8d:49:72
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUY7zk2k5XS8OThJFynVyQrWkda3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NF
N0IwOEEwQjAeFw0yNjA2MTcwODA4MDZaFw0yNzA2MTYwODEzMDZaMDMxMTAvBgNV
BAMTKEYyQTdGOUU0RDBCNzM1NkFBMkI0MzNDODZERTc2NzBBODIxRjY2QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrfLax6ifPh5UWOvSQD57Gx0AV
dTtjTk1sc9eh9XKdoIo4Kwbwl2Cg311ZnTj6IkLTiFnJDQ2jnHnpc3KSl3ZyFY6i
kD2fOQXI6THNsMHLSrxLcArSlhBs6gSizhezpIi8F2/PCsaz4C8uPcwtRLljbr0z
yOLxnQRtvod8tn+tYTTqP5Wouq/hs2RfP7nfAVzAqdsosP+9EJM5p+ClaCMvHj4S
lKfpQHLAc1k50cgoX4WPPZiRWDGLPNzdKpLF+PC6CMnnMuRfuWSe4oe0GajJLTQN
RI9yXI8DvQclKxsQ2dUEPVg8qf2GY4ueee6CHiESAMZ6a9xJA/SxYBerJsvNAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU8qf55NC3NWqitDPIbednCoIfZq8wHwYDVR0j
BBgwFoAUVLMaxAnbBS/VAbcFCdhUzOewigswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
OTY0NTk1Mjk1Nzg3NDE5Ny8wLzU0QjMxQUM0MDlEQjA1MkZENTAxQjcwNTA5RDg1
NENDRTdCMDhBMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NFN0IwOEEwQi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDk2NDU5NTI5NTc4NzQxOTcvMC8zMTMyMzIyZTMx
MzQzNDJlMzEzNDM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM3MzczNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAHqQkzANBgkqhkiG9w0BAQsFAAOCAQEAkrmUOrOA6/DvZ/X/xXps
1M1sTUuqtqiPqRrOK8g34waTMwuGmy7flDCaij+nogrPkmZsxtiTF7Uedx2/U8uV
C/9cY3f+iswJBfTeUVzZvh0AvqR1qFVebg8I6iV8KE46w9DhlW6SKfQD2hA0Ji25
F31nZLrMg2WIxqeqOG0sOzq178ZPkU/8tFPNXMJf9OH+IK85jxLDyvf6DuZW7ak9
RnBiPPjaLz4Z+VdM3Vpv9jLUOb3W5GA+UnT7oekgSzTfZoQn24B1I3hcuab5vrw5
OZMIiqmZX2bI5qPs0w/33qocVrv/O2OEoA5mnKLCfXSEvhcjSscBAR1Pmq6Zio1J
cg==
-----END CERTIFICATE-----
Generated at Tue Jul 14 21:56:34 2026 by rpki-client