Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131302e35362e33322e302f31392d3139203d3e203234313338.roa
File:                     3131302e35362e33322e302f31392d3139203d3e203234313338.roa (raw, json)
Hash identifier:          OtKBLmWzQT/Q3kP+HjfCQ+IG4XUQTXZHnnBdiENY2Wk=
Subject key identifier:   A0:8B:D7:74:99:25:50:15:94:5D:41:5A:0C:47:42:69:62:90:07:7B
Certificate issuer:       /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial:       7D1AA7D35E94FB3E23D20BBDD544ACD5269BD595
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131302e35362e33322e302f31392d3139203d3e203234313338.roa
Signing time:             Thu 21 May 2026 08:23:02 +0000
ROA not before:           Thu 21 May 2026 08:18:02 +0000
ROA not after:            Thu 20 May 2027 08:23:02 +0000
asID:                     24138
IP address blocks:        110.56.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 May 2026 22:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:1a:a7:d3:5e:94:fb:3e:23:d2:0b:bd:d5:44:ac:d5:26:9b:d5:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
        Validity
            Not Before: May 21 08:18:02 2026 GMT
            Not After : May 20 08:23:02 2027 GMT
        Subject: CN=A08BD77499255015945D415A0C4742696290077B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b6:13:8a:48:9f:aa:93:78:06:56:bc:01:01:
                    b8:0b:c9:f2:af:aa:d4:7c:1b:e7:38:a0:e7:c0:2d:
                    8c:5c:75:2c:35:47:77:03:2e:e0:c7:66:25:36:a0:
                    de:45:ec:7e:c8:0f:07:ea:4e:cd:1f:5d:5f:8c:9a:
                    40:ea:e8:15:34:20:23:a2:42:e8:d9:f2:c4:17:51:
                    f7:df:d2:4e:1e:a9:4d:f3:78:63:6e:8a:78:45:2b:
                    59:a6:29:c7:84:e7:1e:ee:3d:76:f1:8e:af:e5:d4:
                    19:08:89:27:8f:b5:ce:06:cd:f4:9d:90:ea:95:94:
                    f5:00:3b:de:14:8f:08:5d:9e:90:71:e0:9b:4e:5f:
                    60:3b:e5:c1:2c:51:9f:74:ff:71:6d:cc:b6:7a:a1:
                    aa:ef:d4:8c:3e:2f:9b:39:43:90:5c:c0:d4:0c:50:
                    55:80:fe:dd:06:37:84:ef:c0:c2:98:b4:0b:00:f7:
                    81:28:f4:5e:53:ea:50:e0:9b:75:b9:c7:92:b7:97:
                    b6:b4:02:b0:8a:6a:d2:c2:f5:dc:60:6f:95:0a:6e:
                    9d:39:99:59:1b:8a:87:c1:e3:79:70:fa:52:35:d8:
                    73:b8:69:fa:2b:82:18:22:35:71:1f:23:9d:7d:97:
                    e0:55:b3:f5:03:17:f9:ab:25:57:3e:44:38:cc:84:
                    09:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8B:D7:74:99:25:50:15:94:5D:41:5A:0C:47:42:69:62:90:07:7B
            X509v3 Authority Key Identifier:
                keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131302e35362e33322e302f31392d3139203d3e203234313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.56.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         37:29:18:89:52:46:06:3d:6e:91:b8:8e:9d:83:20:c8:b1:97:
         9a:5a:fc:42:5b:93:a7:33:f3:ff:e7:a0:1a:01:69:e0:4d:26:
         9e:06:aa:dd:4f:e3:3f:13:26:a0:07:46:be:20:3e:f8:87:22:
         fb:7f:92:00:5f:7b:8a:58:9c:fb:14:fd:dd:5e:8e:96:29:b7:
         6a:89:58:0e:18:1d:22:61:39:42:11:c1:e8:f6:23:e6:09:9c:
         32:35:56:a0:c5:56:54:31:88:17:4d:f2:e6:83:43:3f:27:b4:
         af:0d:cf:29:ba:6c:5d:cc:55:cb:4e:0c:3f:94:e2:bd:9c:ac:
         43:df:25:8d:1a:a6:e8:16:3a:b1:4c:3f:e7:34:01:73:fd:3b:
         f0:2e:16:29:09:ce:6a:d8:da:4f:6f:75:24:a9:ee:f8:25:ff:
         c6:7b:2b:cd:c7:00:9f:68:12:41:e8:f0:ab:c8:a6:fb:95:a1:
         3c:84:23:a6:32:5b:f1:86:5d:e9:1a:52:88:06:31:bb:93:64:
         36:c7:cd:16:90:a4:1e:e6:1e:84:b6:8b:5b:2b:43:29:06:cf:
         48:46:8b:8e:5d:06:f6:a9:50:58:ab:9e:44:ce:92:e9:6c:1f:
         d1:00:46:c1:3c:b9:2e:00:fe:bd:0e:7f:e7:da:29:4c:ca:40:
         d4:1e:8a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 06:24:39 2026 by rpki-client