Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3137382e302f32332d3233203d3e203137373735.roa
File:                     3132322e3134342e3137382e302f32332d3233203d3e203137373735.roa (raw, json)
Hash identifier:          nutPG2TM5JLVTOeSEe4DNxCd+aZ5tDnrF0kc01HgKlc=
Subject key identifier:   29:26:E4:A9:17:0F:48:0E:58:BF:F9:0C:08:FE:C2:8E:3E:4D:E0:4D
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       4522DB5A3601F967D080E370FCC316AA176B9867
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3137382e302f32332d3233203d3e203137373735.roa
Signing time:             Wed 17 Jun 2026 08:15:31 +0000
ROA not before:           Wed 17 Jun 2026 08:10:31 +0000
ROA not after:            Wed 16 Jun 2027 08:15:31 +0000
asID:                     17775
IP address blocks:        122.144.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 15:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:22:db:5a:36:01:f9:67:d0:80:e3:70:fc:c3:16:aa:17:6b:98:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 17 08:10:31 2026 GMT
            Not After : Jun 16 08:15:31 2027 GMT
        Subject: CN=2926E4A9170F480E58BFF90C08FEC28E3E4DE04D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d1:b7:4e:62:06:d4:8a:c8:74:9f:ab:7c:f5:
                    55:dc:a9:59:35:05:d3:64:86:4c:0a:17:42:94:9a:
                    a5:4a:30:44:95:94:36:b6:5a:cd:8e:44:aa:6d:71:
                    7a:d8:52:bf:a9:43:25:af:e7:65:58:ea:ee:b8:9c:
                    8c:e2:3a:d6:17:b2:52:e0:99:f4:25:d0:bd:57:34:
                    04:c4:dc:19:fe:e0:b0:1b:97:8b:fd:55:49:e5:87:
                    78:b3:f8:1c:f2:09:1c:89:14:bc:45:c0:ba:20:25:
                    e0:18:b8:cc:ba:e5:1b:1b:67:b4:2e:a3:15:c7:67:
                    08:f8:fa:98:c8:75:6c:b8:c1:6c:18:6c:92:48:f9:
                    e3:37:06:73:6e:df:fe:2b:dd:90:76:6d:59:e3:24:
                    7a:66:63:c2:3f:9c:24:82:c5:c7:88:fd:5b:60:a3:
                    a1:8a:43:5c:35:eb:a7:92:c7:8d:cd:42:82:e9:ef:
                    46:9b:a2:fa:18:b2:86:b0:ca:cc:72:71:cf:65:34:
                    02:98:60:0a:0a:3e:e3:c9:45:3b:4d:27:fa:37:7f:
                    5f:cf:83:e0:90:39:ce:29:5d:19:ef:d8:36:cd:1a:
                    6d:28:64:26:1a:96:7b:e9:c7:36:bf:b3:cd:d8:de:
                    84:d7:c6:6b:6a:1a:43:76:11:79:be:a5:18:db:38:
                    6d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:26:E4:A9:17:0F:48:0E:58:BF:F9:0C:08:FE:C2:8E:3E:4D:E0:4D
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3137382e302f32332d3233203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.144.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:ef:15:09:ee:03:ec:0f:7b:aa:f4:0c:36:94:f2:67:a6:92:
         40:b0:1e:98:bd:29:5c:e7:c2:79:ed:d0:4e:e7:ab:e6:52:f4:
         21:f1:3d:1a:4e:0b:f7:9d:57:33:16:ac:52:6d:c9:d9:b3:46:
         f5:d8:a6:cd:07:ed:33:7e:40:01:d5:7e:ff:a9:d8:7f:80:12:
         d5:1a:07:ed:0a:59:24:51:5b:d7:17:5f:e3:ed:fc:1a:23:09:
         03:7c:3d:98:d4:97:9e:b8:b6:d2:16:9e:ca:65:d4:e0:c9:67:
         31:b2:33:c1:0f:74:8a:e0:09:2f:81:47:85:60:c1:2d:77:c8:
         df:4d:4d:10:06:ce:23:07:07:bd:0f:13:61:7e:a1:f7:92:7a:
         3b:24:05:01:f4:c3:de:08:df:e5:c8:da:01:a9:9b:14:c4:2b:
         64:2f:f0:ac:d7:fb:e1:68:63:73:fc:1b:b9:47:af:0e:74:59:
         b9:6e:88:1c:d5:c0:f0:a0:d9:57:09:0b:94:f7:51:5b:57:91:
         cc:cf:c5:52:6d:d4:6d:5f:df:77:43:09:0d:4f:0b:68:e8:a8:
         bd:af:db:dc:90:4b:c4:cf:9c:e8:ba:1d:d5:6d:04:c6:70:54:
         f2:8d:a4:24:73:e6:ae:9b:09:78:33:a2:db:3a:a3:2e:81:c9:
         b2:2a:c8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:48 2026 by rpki-client