Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3136392e302f32342d3234203d3e203137373735.roa
File:                     3132322e3134342e3136392e302f32342d3234203d3e203137373735.roa (raw, json)
Hash identifier:          ODuCxMcg4zRK31wWjrkT0TCCw49Sj5D3OG+CrAuFWIM=
Subject key identifier:   FF:BC:08:34:4C:41:22:EC:25:D0:8E:79:A1:5D:C7:65:AA:3C:FD:89
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       10D573536BA660B0E059D7EBE2F34EF275EAF320
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3136392e302f32342d3234203d3e203137373735.roa
Signing time:             Wed 17 Jun 2026 08:14:45 +0000
ROA not before:           Wed 17 Jun 2026 08:09:45 +0000
ROA not after:            Wed 16 Jun 2027 08:14:45 +0000
asID:                     17775
IP address blocks:        122.144.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 15:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d5:73:53:6b:a6:60:b0:e0:59:d7:eb:e2:f3:4e:f2:75:ea:f3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 17 08:09:45 2026 GMT
            Not After : Jun 16 08:14:45 2027 GMT
        Subject: CN=FFBC08344C4122EC25D08E79A15DC765AA3CFD89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:62:1d:6b:57:2a:d3:89:8c:a4:51:e5:4d:7b:
                    15:24:be:b4:d8:b6:70:e2:cf:46:53:b0:2f:39:7b:
                    10:d7:79:a6:c4:83:92:23:fe:60:56:b3:80:b9:34:
                    04:24:be:02:97:cc:25:39:1e:38:ec:fe:92:c1:8c:
                    c2:13:96:43:a3:64:2a:d9:7c:f7:ce:a3:e8:41:98:
                    a4:14:fb:04:c3:a0:b9:ea:fc:51:dd:a4:5a:11:5c:
                    76:28:71:3e:65:77:21:cc:0d:2b:8f:ca:be:eb:c7:
                    8d:b1:e6:7b:09:f2:f7:a0:9b:e5:67:95:f2:63:1b:
                    61:86:25:ab:86:87:36:31:85:e1:30:4d:1d:b5:ea:
                    95:44:77:2e:60:b1:16:db:fe:a3:be:46:76:07:d1:
                    7d:ad:a5:ca:0e:e6:cb:c8:eb:18:f7:6a:ee:31:01:
                    1b:03:51:68:f0:f7:35:45:07:40:aa:6a:3e:b6:a8:
                    30:ad:9a:46:87:6f:eb:75:81:44:f7:b6:5e:51:6b:
                    31:08:39:56:b3:fe:ec:ef:71:a4:00:86:79:5f:bb:
                    f2:2f:cb:b0:48:35:af:82:5e:21:ef:33:5b:5e:68:
                    a4:52:76:7e:c9:45:5e:ad:73:bb:1c:f9:c0:16:fb:
                    7f:e4:f4:53:44:a6:23:d7:db:fb:5f:a8:b6:89:f9:
                    29:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BC:08:34:4C:41:22:EC:25:D0:8E:79:A1:5D:C7:65:AA:3C:FD:89
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3136392e302f32342d3234203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.144.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:3f:05:7f:66:e5:ff:8d:09:ac:a9:5e:b2:2e:c1:97:bc:2a:
         95:58:e8:b8:91:ab:7b:62:ff:47:76:c8:bd:78:49:ed:2c:1f:
         4e:67:db:e7:b5:45:28:bc:e0:69:ec:53:fe:2f:a2:6b:92:e0:
         b1:30:0c:d9:51:56:7b:df:1d:c4:17:6d:f7:ca:90:dd:18:ea:
         af:60:46:43:fb:ab:22:ca:bf:be:eb:8e:95:0c:cd:46:0f:32:
         ac:df:1e:4b:62:02:cd:57:44:a9:2c:c7:d7:44:19:fa:55:b9:
         76:c1:6c:f1:52:0a:e0:30:40:11:52:94:23:e3:94:0f:05:3d:
         c6:a3:d1:11:5a:02:13:ae:4d:21:c4:f3:ab:57:c8:16:f5:06:
         30:16:77:3d:2b:21:30:a3:df:3a:f1:67:4b:54:b4:60:ce:b5:
         12:95:22:e7:ab:c5:0a:96:6f:1b:10:94:14:b9:3f:1e:29:0f:
         83:92:aa:ed:92:81:67:c7:c0:10:8c:08:47:33:b4:95:13:9c:
         41:d3:ef:73:d3:e4:fe:0a:40:6f:57:58:62:e5:59:40:26:47:
         60:b5:ed:36:cb:ef:f5:7c:a6:29:df:9c:3c:c2:3f:c7:44:8a:
         93:3f:b1:e8:24:49:c4:72:df:69:67:2e:66:0a:ce:40:09:c9:
         2f:b6:5c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:05 2026 by rpki-client