Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3234382e302f32332d3233203d3e203137373735.roa
File:                     3132322e3134342e3234382e302f32332d3233203d3e203137373735.roa (raw, json)
Hash identifier:          dO/jBwncmUIy1XA8SN7giwOHRkKc8mStVDa6zlMyDkQ=
Subject key identifier:   22:65:31:8D:E0:B3:B3:82:38:3C:F6:F2:D2:C1:97:5F:20:3D:0C:44
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       57365570E975F3E4F8654A923CCCB5EF2122114B
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3234382e302f32332d3233203d3e203137373735.roa
Signing time:             Wed 17 Jun 2026 08:26:27 +0000
ROA not before:           Wed 17 Jun 2026 08:21:27 +0000
ROA not after:            Wed 16 Jun 2027 08:26:27 +0000
asID:                     17775
IP address blocks:        122.144.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 15:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:36:55:70:e9:75:f3:e4:f8:65:4a:92:3c:cc:b5:ef:21:22:11:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 17 08:21:27 2026 GMT
            Not After : Jun 16 08:26:27 2027 GMT
        Subject: CN=2265318DE0B3B382383CF6F2D2C1975F203D0C44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3d:56:e6:2e:ed:ac:df:ad:4d:48:86:24:68:
                    95:6d:7f:15:e8:71:68:dc:4f:7e:6c:2c:07:5b:7d:
                    c6:a4:f4:68:05:d8:f4:a4:b7:53:07:10:76:26:b0:
                    e7:4e:72:31:af:22:d7:cd:ea:f4:a8:39:20:a5:bc:
                    55:28:4d:87:c3:c3:7b:68:17:89:7d:18:a2:e7:cb:
                    fd:6f:05:d8:a7:b5:04:89:5f:10:97:86:5c:54:3b:
                    d3:61:22:c5:ad:3c:6b:1a:40:c6:60:9b:92:dd:a3:
                    48:e4:da:01:7b:36:88:4a:ac:f4:5c:7a:33:ef:95:
                    24:dc:44:33:7a:83:bd:b7:80:6e:33:2e:1a:c4:04:
                    6b:84:46:f7:59:ce:5f:8a:f9:91:ff:ca:3c:04:84:
                    7b:9a:ce:cc:b0:2a:a7:d1:06:cb:57:02:60:fb:95:
                    25:5f:23:5e:a8:cd:dc:9f:18:fa:c2:b0:28:c8:71:
                    ee:3e:b3:47:00:95:62:c7:73:b6:a6:25:d0:e4:65:
                    34:6e:3b:d5:ff:e3:9a:e2:97:ad:b2:8e:c1:39:db:
                    80:59:c0:b8:f5:dd:72:83:25:6c:8e:c3:05:cc:85:
                    f7:98:10:e2:5b:16:0b:78:99:41:4b:f9:95:b5:2f:
                    50:d5:be:d2:24:a6:1d:8f:40:bc:f2:2c:6a:7a:6e:
                    95:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:65:31:8D:E0:B3:B3:82:38:3C:F6:F2:D2:C1:97:5F:20:3D:0C:44
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3234382e302f32332d3233203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.144.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:43:38:b7:ca:9a:c5:91:64:e3:2d:6f:bd:8c:f7:05:99:3b:
         1b:11:c4:37:b6:0a:59:5f:16:13:6a:8a:bf:6c:4f:60:8d:ea:
         7d:66:d5:81:ff:fd:14:30:a8:59:4d:74:64:73:9b:fc:d4:96:
         1c:71:1a:35:f3:97:72:26:fc:47:6f:24:90:2c:68:ce:b7:aa:
         1b:d5:8b:27:71:58:a7:5e:36:4e:47:a6:88:de:ca:b5:a5:bb:
         6c:b5:32:1b:40:8e:79:00:68:48:a0:a3:ba:f1:9b:38:2a:26:
         9a:19:af:a2:4b:c0:94:f9:38:04:ea:28:af:50:94:b8:58:9e:
         5c:c8:44:e4:4a:2d:8f:16:c9:98:3d:86:46:c5:92:63:b6:c0:
         f1:3f:c2:e2:70:da:e7:04:33:35:8d:3e:92:e8:7d:18:13:79:
         7d:53:d0:3e:cd:82:67:f2:68:6c:0f:b7:e6:e7:75:e0:36:bf:
         8f:d7:0e:27:e3:e6:12:6e:0b:6f:0a:dd:27:03:86:12:36:d1:
         f9:d0:28:d9:09:ac:1d:3d:1c:23:ed:f0:33:d0:13:9e:f5:4b:
         80:60:05:59:aa:43:ba:cd:59:b6:75:12:bf:ad:03:ab:18:86:
         0a:1b:42:2c:e9:38:ca:b8:60:30:c4:6d:00:f9:a3:f6:0e:d1:
         68:45:aa:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:49 2026 by rpki-client