Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e36342e302f32312d3231203d3e203234313338.roa
File:                     3131312e3133322e36342e302f32312d3231203d3e203234313338.roa (raw, json)
Hash identifier:          yvsNs6M2PbLDtQnRGIl5H9JFFbOuozfowHPwnitlfe8=
Subject key identifier:   0B:8D:BE:DE:14:2C:76:D6:B1:25:1C:8F:28:AB:05:17:63:A9:9F:60
Certificate issuer:       /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial:       36F4DBD7AC058C8F001A8F71F45E9103E6CB7B91
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e36342e302f32312d3231203d3e203234313338.roa
Signing time:             Thu 21 May 2026 08:33:21 +0000
ROA not before:           Thu 21 May 2026 08:28:21 +0000
ROA not after:            Thu 20 May 2027 08:33:21 +0000
asID:                     24138
IP address blocks:        111.132.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 May 2026 22:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f4:db:d7:ac:05:8c:8f:00:1a:8f:71:f4:5e:91:03:e6:cb:7b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
        Validity
            Not Before: May 21 08:28:21 2026 GMT
            Not After : May 20 08:33:21 2027 GMT
        Subject: CN=0B8DBEDE142C76D6B1251C8F28AB051763A99F60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a3:8a:a7:48:06:85:51:58:94:12:c8:e8:36:
                    f3:25:f8:43:cc:58:c1:58:ec:e7:e7:3d:db:a0:4d:
                    d4:65:e5:00:e0:1e:d8:48:71:81:fb:15:be:b1:db:
                    6a:92:73:ee:e3:09:8a:6c:cb:fc:72:68:eb:1b:72:
                    09:81:8a:95:b8:e4:9e:82:4b:a4:be:13:b3:1a:4a:
                    e5:d3:c2:54:f8:e0:a8:b1:e9:73:9d:f4:c3:20:c6:
                    02:75:90:10:ac:54:c4:c7:53:63:31:91:1a:ad:da:
                    c2:32:f6:0c:8e:b5:a2:18:8f:63:32:67:85:68:c1:
                    16:a9:3b:9b:b4:81:8f:67:a1:f7:0a:1f:04:2b:fe:
                    06:49:0d:6d:f4:b5:4a:fd:51:9a:df:c6:88:c6:ba:
                    54:09:b9:59:73:15:03:d1:de:7e:9b:88:77:8e:7a:
                    e4:d7:68:15:fd:f1:15:d6:89:6d:dd:b4:fe:22:cf:
                    58:b3:a5:43:ff:6d:14:4e:66:76:57:a9:ab:a2:5b:
                    a7:25:ed:73:2e:bc:66:48:94:59:c3:5f:87:ab:88:
                    b1:f3:02:33:16:96:c3:8a:dc:21:b9:23:47:9e:61:
                    ca:f9:b1:78:04:7b:10:b7:bb:ab:62:65:95:51:6c:
                    cd:c2:ed:8b:bf:43:8a:a6:fd:1c:27:bd:ec:0c:7e:
                    40:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8D:BE:DE:14:2C:76:D6:B1:25:1C:8F:28:AB:05:17:63:A9:9F:60
            X509v3 Authority Key Identifier:
                keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e36342e302f32312d3231203d3e203234313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.132.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1f:29:43:aa:3f:4a:ce:ae:f6:1d:1c:c5:b0:55:4b:b1:28:e7:
         75:00:be:fd:88:9f:b3:11:ad:83:9c:bc:9f:fe:a0:19:3c:7c:
         94:6e:9a:4d:7f:97:3e:90:40:e3:13:a3:ca:42:7f:20:2e:44:
         b0:f7:9a:f6:c0:cb:e7:8d:e8:06:35:ee:5f:bb:47:75:ce:64:
         01:7c:f8:26:40:60:a3:d2:db:2c:cd:93:4f:97:0f:44:e1:91:
         e6:13:d2:e0:1a:bb:83:17:e6:12:84:5c:86:21:80:d0:9c:9b:
         d3:b9:cd:1b:5e:a5:45:8d:df:48:d6:48:58:86:56:5e:d2:01:
         38:7f:5b:bf:57:82:a2:d0:17:d3:27:75:f8:75:bf:6d:2c:f8:
         8d:63:56:03:a1:3d:3f:e8:01:ec:31:2d:ce:69:c7:ca:68:d8:
         e3:5c:d1:4e:84:68:2d:b5:3c:33:6f:7b:6d:29:06:a3:4f:ea:
         2a:bd:7d:15:5c:d0:9b:a4:1c:87:6e:40:ad:08:cd:24:b1:dd:
         59:f7:cb:82:19:4e:0d:23:54:6e:2a:ac:31:12:a0:c4:c8:ba:
         e4:42:f5:b7:49:16:2c:06:53:a8:b2:f5:60:0a:8b:44:1e:8b:
         6d:31:45:3c:98:77:9a:52:cd:ce:59:c2:47:2c:d6:0c:4e:a6:
         cb:60:84:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 06:24:39 2026 by rpki-client