Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3233322e302f32342d3234203d3e203137373735.roa
File:                     3132322e3134342e3233322e302f32342d3234203d3e203137373735.roa (raw, json)
Hash identifier:          n/B/F/7yYIfGoDum9mmp6fjfZR95zuO03RRdywzxv8k=
Subject key identifier:   C4:73:48:69:8F:2D:35:4B:A7:FA:2D:7F:26:BD:3D:61:8F:66:88:DF
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       15E0771B3F2D84E735D4FB9D663084665E0615
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3233322e302f32342d3234203d3e203137373735.roa
Signing time:             Wed 17 Jun 2026 08:21:35 +0000
ROA not before:           Wed 17 Jun 2026 08:16:35 +0000
ROA not after:            Wed 16 Jun 2027 08:21:35 +0000
asID:                     17775
IP address blocks:        122.144.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 15:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e0:77:1b:3f:2d:84:e7:35:d4:fb:9d:66:30:84:66:5e:06:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 17 08:16:35 2026 GMT
            Not After : Jun 16 08:21:35 2027 GMT
        Subject: CN=C47348698F2D354BA7FA2D7F26BD3D618F6688DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fd:42:6c:3f:ca:ad:7c:b2:41:77:67:fa:4c:
                    ee:03:b4:57:56:a2:95:59:ca:37:4d:b0:01:83:72:
                    75:1f:ff:5f:6a:1c:90:3e:20:50:f4:dc:f0:8a:5f:
                    21:a8:3b:1b:ee:07:ff:5b:54:7a:2e:c6:cc:81:51:
                    60:14:93:02:e1:b1:5e:a7:1f:b3:48:43:49:a0:1f:
                    5a:8b:0e:88:5d:da:f8:d6:ba:82:8e:a1:e6:0f:f9:
                    86:af:3c:41:85:f7:1a:fb:c4:40:c3:71:7c:1c:19:
                    43:f2:58:39:87:19:aa:bf:86:a2:37:1c:c8:51:89:
                    8c:8c:a6:17:ed:06:1f:4c:31:aa:8b:6a:6e:8f:29:
                    77:78:4f:b0:f0:85:e8:f9:5f:38:65:5c:bb:52:b6:
                    8f:25:2d:97:b5:36:b4:6f:27:7e:53:f1:63:b2:84:
                    07:91:8b:d9:1f:e6:ae:72:0d:a4:89:1c:d2:49:0d:
                    5f:29:db:05:05:4c:3f:12:47:16:b6:69:3a:53:99:
                    ef:2b:0b:16:5a:8b:ec:47:9f:68:24:5d:b5:2d:bf:
                    5b:62:b9:2a:9b:ba:cd:00:2b:cd:74:71:c7:ef:cf:
                    e6:5f:da:e5:e8:bd:f3:13:a9:62:e6:01:b1:6d:79:
                    04:f9:1a:9e:e0:c7:52:ab:98:f0:ba:10:d3:49:7f:
                    77:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:73:48:69:8F:2D:35:4B:A7:FA:2D:7F:26:BD:3D:61:8F:66:88:DF
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3233322e302f32342d3234203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.144.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:9d:14:9f:a8:07:fd:a3:bc:88:54:ba:7f:6f:70:04:fa:db:
         5d:b5:70:c8:fb:b4:2b:2e:3e:01:88:b1:98:24:cf:90:f2:05:
         dc:e3:a3:80:e7:ce:b3:8a:96:c5:d8:bb:ab:8f:21:a8:cb:c3:
         d5:f1:29:be:5e:6f:4d:d1:74:1b:ee:e4:08:81:d1:59:7b:41:
         fd:aa:8d:cd:57:1c:76:23:a2:89:38:46:a4:54:9a:35:4a:30:
         8b:c4:69:e1:d0:6a:b5:ed:38:6b:d7:1b:31:cc:73:c6:3d:7e:
         b9:18:e8:e4:1c:dc:bf:3f:f4:ae:2a:6f:3e:5b:6e:7b:63:21:
         bc:d8:6d:f8:b8:8d:16:29:a2:60:78:55:64:57:96:e4:b1:a8:
         aa:69:a5:1b:1c:d3:c2:56:97:3b:bc:5e:04:76:e9:6f:dd:45:
         ec:90:77:ee:44:c6:8e:a3:fd:5f:be:37:20:f6:68:5d:40:6f:
         32:d7:bc:cb:6b:52:0e:30:c3:d9:d1:a5:af:21:ff:8b:bb:27:
         86:86:f1:b0:d6:83:ba:74:eb:4c:a8:8d:df:74:ff:94:76:c9:
         f2:ba:51:32:29:44:81:c9:b9:29:eb:fe:df:f8:a1:b3:40:4a:
         a6:f1:4b:5c:2f:57:b8:3e:e5:fd:37:2a:92:8e:f4:3e:7d:48:
         38:7a:85:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:41 2026 by rpki-client