Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3135322e302f32332d3233203d3e203137373735.roa
File:                     3132322e3134342e3135322e302f32332d3233203d3e203137373735.roa (raw, json)
Hash identifier:          LIYgZC58Yhz/9O5RXMiaY5EOh9pKZJVsxzK9zn33/yc=
Subject key identifier:   0F:FA:B3:7B:E2:F1:0C:E0:2B:3C:36:50:E4:A2:1D:87:51:9A:89:E9
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       2EB1FD2CAAFA157D7599E4BA90DD8BC3530246EF
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3135322e302f32332d3233203d3e203137373735.roa
Signing time:             Wed 17 Jun 2026 08:13:36 +0000
ROA not before:           Wed 17 Jun 2026 08:08:36 +0000
ROA not after:            Wed 16 Jun 2027 08:13:36 +0000
asID:                     17775
IP address blocks:        122.144.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 15:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b1:fd:2c:aa:fa:15:7d:75:99:e4:ba:90:dd:8b:c3:53:02:46:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 17 08:08:36 2026 GMT
            Not After : Jun 16 08:13:36 2027 GMT
        Subject: CN=0FFAB37BE2F10CE02B3C3650E4A21D87519A89E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3e:de:15:ca:16:15:44:df:4f:03:89:02:0f:
                    91:b6:cd:be:de:a1:04:f8:92:6c:e0:74:8d:74:86:
                    5f:52:74:75:9f:4d:c5:1f:33:3f:4f:c5:27:c8:77:
                    b0:2b:7a:05:69:2c:3d:bf:aa:c3:d0:3d:14:4b:31:
                    22:ea:18:9c:33:6b:1c:01:23:cb:c6:9a:d9:65:93:
                    f3:59:c1:ed:f6:f0:c3:34:27:c1:90:51:a6:cf:ed:
                    19:e8:b4:92:9c:79:9d:4b:85:a8:da:26:ef:94:11:
                    7a:66:b5:dd:4f:f7:1e:02:d2:15:23:84:d6:d4:91:
                    fb:8d:7c:8c:53:8e:8a:f5:2d:72:32:1c:29:e0:2d:
                    8e:72:ef:75:8d:e9:24:29:f7:d5:cf:4a:80:e6:ce:
                    9d:4a:7b:06:46:79:29:62:f4:7e:91:4e:df:71:f7:
                    c7:d0:a5:d1:1f:5e:53:c0:fc:ec:9e:c7:11:dd:25:
                    0a:e7:06:9c:5d:c4:10:ad:47:c4:3c:ec:e7:37:ee:
                    8e:45:ec:ce:07:31:e2:97:03:a6:c9:8a:ea:d4:f6:
                    e6:73:44:bf:b5:34:7b:ac:b8:f6:31:2d:fb:df:4d:
                    5c:88:16:20:ab:ae:d5:dd:3c:db:f7:9b:cf:0f:a3:
                    3d:9f:ba:85:ac:90:7c:cf:ff:67:d8:0c:20:89:17:
                    b2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FA:B3:7B:E2:F1:0C:E0:2B:3C:36:50:E4:A2:1D:87:51:9A:89:E9
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3135322e302f32332d3233203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.144.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:be:66:e4:a8:8e:78:c8:b3:b2:89:a4:c1:f9:0d:f3:63:f9:
         7f:f0:52:ce:68:15:2e:b5:52:19:8e:54:c8:7c:c8:b2:7c:e5:
         3b:6e:60:cb:2f:75:0c:62:72:15:4a:a0:c5:05:49:22:fa:45:
         2c:2a:52:2a:f0:1b:c5:ad:eb:33:d2:66:c6:6e:c0:dd:fe:b0:
         0b:b8:b0:72:5f:85:95:71:5e:6e:ec:32:4c:00:28:d6:f6:02:
         b9:11:19:67:00:1f:2d:bf:95:f1:03:d9:44:65:66:21:1b:31:
         38:f1:59:c0:0d:3a:e4:f7:7f:e4:bb:bd:a8:0d:87:7d:ac:35:
         02:c9:eb:7b:5b:56:ad:8d:68:ed:c4:c2:b7:61:5e:26:96:d9:
         6c:c4:6d:86:1c:0d:a7:8e:65:23:23:71:08:ce:c0:62:e5:59:
         03:9f:f1:50:0c:03:04:83:aa:c0:e0:11:09:ef:01:50:f7:0c:
         4a:f2:b6:89:75:cb:7c:7a:68:09:88:e7:c4:8a:bf:58:28:0b:
         02:b4:55:de:d9:77:66:60:2d:45:25:1d:97:0b:9f:a8:3d:fc:
         e7:de:63:76:0d:85:c3:c6:37:67:59:e0:4f:ee:d5:90:da:68:
         dc:9c:95:37:12:ef:f7:7d:ef:ee:77:e7:6f:f1:68:47:6f:c5:
         2c:47:f6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:55:20 2026 by rpki-client