Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3234302e302f32342d3234203d3e2034383132.roa
File:                     3132322e3134342e3234302e302f32342d3234203d3e2034383132.roa (raw, json)
Hash identifier:          OvJ1oomnUYGSxpjVG1Iud1INb0CDbTGVdORctaQoDwQ=
Subject key identifier:   EF:6A:B0:58:E8:09:04:C4:A0:70:21:51:95:AF:9A:CF:A6:89:75:93
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       25CC9167485FD95396DA9501CE72A500CBB29714
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3234302e302f32342d3234203d3e2034383132.roa
Signing time:             Wed 17 Jun 2026 08:28:07 +0000
ROA not before:           Wed 17 Jun 2026 08:23:07 +0000
ROA not after:            Wed 16 Jun 2027 08:28:07 +0000
asID:                     4812
IP address blocks:        122.144.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 15:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:cc:91:67:48:5f:d9:53:96:da:95:01:ce:72:a5:00:cb:b2:97:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 17 08:23:07 2026 GMT
            Not After : Jun 16 08:28:07 2027 GMT
        Subject: CN=EF6AB058E80904C4A070215195AF9ACFA6897593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:51:48:96:bf:0c:f5:cd:89:05:c5:4d:ad:72:
                    01:84:2e:a5:43:9c:1a:38:99:07:e5:b2:7b:06:75:
                    b3:20:6f:0c:db:42:f9:64:e3:ae:91:18:4f:13:3d:
                    21:f0:a7:7a:00:77:29:d4:71:18:87:9d:76:c1:cf:
                    c1:8e:3d:3d:af:60:13:42:6e:7a:d4:1b:83:1c:2d:
                    ed:be:d8:f3:c4:4c:a0:35:3e:b0:3c:12:ee:43:10:
                    22:ae:f1:9c:6a:6c:97:f2:25:57:3b:c0:b1:be:ea:
                    aa:92:18:5a:61:1d:ed:0b:68:c1:8f:c4:de:b8:8f:
                    c7:4d:f7:33:62:0c:e8:42:2c:eb:61:0b:35:04:92:
                    36:a9:5a:38:1f:8b:3a:8a:3b:bc:42:97:8e:49:d6:
                    83:92:86:9b:7e:f7:d4:fc:83:66:4c:2d:35:28:fb:
                    58:52:02:00:28:99:01:c3:3e:75:70:26:a7:4a:cd:
                    f5:9c:b9:83:b5:f1:61:4f:42:29:c3:5c:f6:53:66:
                    71:66:f9:03:bf:d0:f8:eb:c5:ec:a3:08:60:3a:c9:
                    1b:bf:1f:66:c5:e3:fc:ab:bf:13:d2:2e:be:de:3d:
                    b1:56:75:99:2b:e8:5f:95:d7:0c:61:63:17:fa:10:
                    79:52:1f:3b:b0:cf:9b:39:4e:ab:a0:e0:8d:56:27:
                    d5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6A:B0:58:E8:09:04:C4:A0:70:21:51:95:AF:9A:CF:A6:89:75:93
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3234302e302f32342d3234203d3e2034383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.144.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:93:33:8b:8a:18:e9:16:6b:55:71:4a:19:da:3b:d6:03:fa:
         ba:eb:69:d6:4a:74:0d:9f:72:ff:4d:13:96:41:88:c0:03:17:
         b5:84:7a:1f:34:79:00:3e:8d:53:52:ae:0b:a0:5e:70:07:95:
         ea:47:63:f3:30:b1:1e:c3:ef:0c:0a:da:48:ca:81:6e:cc:5d:
         48:b4:95:2e:f4:09:b4:2e:9a:70:32:f8:1b:43:de:d9:13:8c:
         bf:f5:11:48:1a:d0:2c:73:99:8b:1f:d9:44:ff:68:e2:4d:db:
         c5:ed:64:be:8b:44:d9:05:7d:3d:34:78:e8:06:9d:c1:f1:58:
         00:61:d7:86:9e:72:61:92:4c:57:aa:3c:e4:62:5f:1d:05:76:
         ac:70:87:09:fa:56:3e:bb:d1:04:c5:cd:4b:1c:f5:b2:1d:20:
         2d:fe:a3:86:fd:b5:25:42:a0:9f:2d:54:e3:2f:75:65:b1:cf:
         7a:3d:cc:67:b3:7d:58:f6:25:9f:89:2a:b2:84:c1:ce:56:60:
         5e:90:b4:9c:21:44:b8:56:e4:e1:98:f1:71:b3:74:77:d4:e8:
         13:2d:b5:f0:5d:dd:ed:81:1f:f4:1c:1b:4f:26:70:41:c7:cd:
         c1:d9:e5:38:f4:15:f5:11:11:f6:fb:27:07:95:bc:87:54:38:
         0e:9b:26:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:47 2026 by rpki-client