Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3230382e302f32332d3233203d3e203137373735.roa
File:                     3132322e3134342e3230382e302f32332d3233203d3e203137373735.roa (raw, json)
Hash identifier:          O2jGplRly/hAZShuRpatqymALcXtrEXX57ugVRN7L50=
Subject key identifier:   19:82:59:78:A7:CF:3C:25:A1:51:7F:3F:C5:5E:36:C1:22:A1:92:81
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       2179146BEDCA3855EDD266CD1B05D3E8E711624A
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3230382e302f32332d3233203d3e203137373735.roa
Signing time:             Wed 17 Jun 2026 08:20:13 +0000
ROA not before:           Wed 17 Jun 2026 08:15:13 +0000
ROA not after:            Wed 16 Jun 2027 08:20:13 +0000
asID:                     17775
IP address blocks:        122.144.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 15:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:79:14:6b:ed:ca:38:55:ed:d2:66:cd:1b:05:d3:e8:e7:11:62:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 17 08:15:13 2026 GMT
            Not After : Jun 16 08:20:13 2027 GMT
        Subject: CN=19825978A7CF3C25A1517F3FC55E36C122A19281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:08:cd:84:43:fc:ca:29:7c:75:77:33:61:b1:
                    a8:47:5e:4b:e2:94:1f:c3:6f:96:47:86:c8:f8:8a:
                    06:ad:7f:57:1b:62:79:e6:ae:0f:67:e0:60:39:f4:
                    51:7c:ae:8d:ad:54:48:be:e9:b0:5d:3e:d9:58:1b:
                    29:65:a8:14:99:9c:43:9f:2b:63:16:64:7d:32:2b:
                    82:78:21:66:cd:eb:19:ea:70:21:50:8a:53:d6:47:
                    9a:cf:46:22:f7:62:9f:e5:db:a6:51:75:88:f6:13:
                    e4:ec:57:7e:79:12:80:2a:41:f6:c4:a6:09:ce:6d:
                    bc:aa:cb:af:4c:6b:05:4b:6f:55:0d:00:4a:d1:e5:
                    0d:99:87:e6:66:2e:e8:35:d4:12:48:a1:01:09:0e:
                    24:1a:7a:41:50:84:bf:32:80:6a:24:5e:a6:a3:7b:
                    27:d8:e1:68:6a:50:f2:c7:15:fd:e7:63:d5:b8:a5:
                    ee:b0:50:af:1e:e0:7b:02:74:2a:48:b7:07:2d:bb:
                    a0:d4:5c:a9:98:ec:d0:3a:9b:fd:86:37:5d:fc:a6:
                    3a:68:6e:d5:9b:7e:57:0d:d4:70:fc:61:b8:f4:fa:
                    74:87:c4:34:75:a1:82:16:f7:9d:8f:ff:39:10:17:
                    96:be:47:65:93:c2:96:01:32:c6:39:1b:59:13:2e:
                    9f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:82:59:78:A7:CF:3C:25:A1:51:7F:3F:C5:5E:36:C1:22:A1:92:81
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3230382e302f32332d3233203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.144.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:0f:e2:34:e0:44:6f:4b:5d:0a:d2:26:a0:9d:07:79:a4:39:
         08:f0:38:01:d4:66:44:e7:1b:fe:ba:15:20:5e:7a:a4:3a:42:
         c6:d4:88:08:5b:e5:64:b4:f0:4f:25:4f:97:b3:0d:30:91:03:
         16:2b:60:b5:72:3a:01:a8:66:8d:79:fd:e3:a5:9f:11:b7:08:
         00:e5:1a:d7:b3:d4:11:08:77:ac:03:3b:94:d7:38:16:94:0b:
         b0:a6:7d:9d:22:1f:57:bc:d7:74:99:1e:37:78:c8:1c:ec:2e:
         5d:bb:07:b3:f5:48:cf:70:35:54:d6:8e:a9:a8:b6:ab:22:fb:
         cc:9d:40:7a:77:8d:43:1e:40:a8:e2:5b:bc:bf:e5:0f:d0:a9:
         80:7d:36:89:cb:f0:09:6f:e1:18:84:81:67:58:ca:0a:07:44:
         f3:e6:c4:b1:7a:11:7a:87:29:d2:66:4c:dd:50:ce:b9:6a:ea:
         ce:39:0e:18:ec:00:29:d1:be:ae:5c:04:40:0a:08:1f:c3:b5:
         c9:09:78:6d:f3:d1:d4:64:eb:5e:92:9a:08:16:07:bb:d2:49:
         ca:3f:55:a4:fb:1b:51:64:9b:15:83:f0:f7:da:f6:86:dc:e8:
         19:e9:f4:79:96:1d:93:6c:88:5a:36:2d:6d:8b:fa:ea:6e:eb:
         72:be:20:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:11 2026 by rpki-client