Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131302e35362e36342e302f31392d3139203d3e203234313338.roa
File:                     3131302e35362e36342e302f31392d3139203d3e203234313338.roa (raw, json)
Hash identifier:          59oGr0ky+O3j98rwX6JHVD/hqkOvCvGLeUztt39BOOs=
Subject key identifier:   FB:4A:B0:84:CB:6F:5C:A0:90:32:01:4F:79:D7:54:3C:61:0D:AC:96
Certificate issuer:       /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial:       1D83836485BA1BD6FCEA8143D95FCBF783ADC38E
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131302e35362e36342e302f31392d3139203d3e203234313338.roa
Signing time:             Thu 21 May 2026 08:23:02 +0000
ROA not before:           Thu 21 May 2026 08:18:02 +0000
ROA not after:            Thu 20 May 2027 08:23:02 +0000
asID:                     24138
IP address blocks:        110.56.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 May 2026 22:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:83:83:64:85:ba:1b:d6:fc:ea:81:43:d9:5f:cb:f7:83:ad:c3:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
        Validity
            Not Before: May 21 08:18:02 2026 GMT
            Not After : May 20 08:23:02 2027 GMT
        Subject: CN=FB4AB084CB6F5CA09032014F79D7543C610DAC96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:13:b5:78:df:e0:f3:da:52:99:c5:91:9a:15:
                    1e:fc:b2:d9:f3:54:fc:ab:7b:a7:5c:97:dd:d3:d2:
                    52:be:a9:01:6d:02:6c:20:05:51:03:34:ef:5c:2b:
                    9c:b8:90:71:20:86:53:35:b3:3c:d2:a4:06:65:66:
                    b5:db:36:f7:37:35:0d:48:d2:c6:75:b5:12:3c:83:
                    bb:7f:b1:8a:0f:7b:89:0f:b5:f4:3c:84:ad:b6:84:
                    41:0e:fb:2f:89:b9:5f:a6:5e:c1:b7:b7:02:3f:8d:
                    a4:6e:5d:54:26:7e:6d:29:2a:45:26:c7:29:38:a3:
                    a4:cd:82:5c:d6:da:ad:e5:16:f7:a7:bd:39:3f:da:
                    cc:98:23:67:79:92:d5:79:cb:06:b3:81:38:bd:f5:
                    7e:dc:7a:5d:75:49:47:f9:1b:d9:98:30:52:ce:e2:
                    5c:76:bc:f3:af:31:70:c5:9d:94:99:6c:e7:b4:5a:
                    9d:51:77:c0:10:23:bb:f5:1e:9b:9a:a8:c4:90:8d:
                    0c:ac:e8:5e:7d:0d:02:18:44:77:c9:cc:1e:88:f9:
                    ac:72:3f:4c:cf:a8:17:16:17:38:5a:92:5c:6f:2b:
                    2c:67:3d:a4:67:3d:f1:a6:d0:d4:e1:3a:37:44:9a:
                    af:0a:de:d9:32:6b:35:7f:7f:9f:f6:23:03:fc:0e:
                    5c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4A:B0:84:CB:6F:5C:A0:90:32:01:4F:79:D7:54:3C:61:0D:AC:96
            X509v3 Authority Key Identifier:
                keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131302e35362e36342e302f31392d3139203d3e203234313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.56.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         46:9c:b8:dc:6d:7e:de:08:87:c7:0f:e1:1c:4e:85:ab:2d:65:
         66:bd:02:cb:82:5e:0b:0e:84:ed:db:20:1b:74:08:4b:4c:55:
         70:6b:60:a3:59:8d:2e:1d:0b:8a:7d:16:f0:8a:c4:98:83:c6:
         2a:96:bf:69:c6:86:e1:12:87:e1:ec:c5:2a:3d:18:0e:85:b9:
         01:13:80:5f:d4:68:03:bf:c7:7f:69:67:47:42:54:18:83:0e:
         02:35:c8:33:c1:5d:22:e4:ed:f2:6c:35:17:c4:85:12:7f:9a:
         8e:07:6b:7f:df:13:d0:0c:61:7c:dd:98:eb:fd:47:df:a0:6c:
         31:a2:33:3f:d7:e9:93:57:0a:03:ca:76:9b:8e:96:b9:06:a3:
         54:10:be:fa:e1:d4:14:07:3e:a4:41:87:5b:0d:e0:ca:fd:29:
         4f:ea:d1:53:b9:3f:e1:dd:62:cc:bc:4f:1b:07:bf:98:f0:41:
         42:7e:9f:ff:db:04:02:e3:ed:9c:7f:ae:51:ed:a2:50:c5:95:
         7a:2f:ff:d5:83:e7:c6:c3:9c:90:15:8a:cd:0a:02:a2:03:58:
         a0:db:d9:2d:34:24:3c:44:18:8e:80:76:47:17:c2:fb:08:46:
         26:4a:1e:35:44:c5:43:0a:19:5e:69:6b:d1:9f:15:74:25:42:
         80:a7:e5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 06:24:25 2026 by rpki-client