Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e382e302f32312d3231203d3e203234313338.roa
File:                     3131312e3133322e382e302f32312d3231203d3e203234313338.roa (raw, json)
Hash identifier:          UbT5lQ6JG7pq4fufnpju9r+uIfHb4FrbT8lPuXUigVU=
Subject key identifier:   28:6F:C9:3F:A0:8B:5C:D8:5B:A1:FA:93:DE:E7:4F:2B:D4:C9:20:9B
Certificate issuer:       /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial:       6E3EA2F1D792D75B7BB5370C238DA6AD57E79733
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e382e302f32312d3231203d3e203234313338.roa
Signing time:             Thu 21 May 2026 08:33:20 +0000
ROA not before:           Thu 21 May 2026 08:28:20 +0000
ROA not after:            Thu 20 May 2027 08:33:20 +0000
asID:                     24138
IP address blocks:        111.132.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 May 2026 22:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:3e:a2:f1:d7:92:d7:5b:7b:b5:37:0c:23:8d:a6:ad:57:e7:97:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
        Validity
            Not Before: May 21 08:28:20 2026 GMT
            Not After : May 20 08:33:20 2027 GMT
        Subject: CN=286FC93FA08B5CD85BA1FA93DEE74F2BD4C9209B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9c:66:79:45:cb:98:cb:b1:a5:76:9d:65:59:
                    d0:62:05:c2:5e:b3:e0:be:65:66:d8:63:3f:83:29:
                    4f:5a:57:ab:e3:6a:27:53:25:78:95:29:99:79:56:
                    5e:68:6b:77:b1:ed:d5:2b:4e:ef:92:36:b3:9f:df:
                    89:e3:da:b9:24:91:59:67:63:73:09:5e:ad:42:75:
                    68:8d:a3:5b:0d:ad:4c:4b:01:33:b9:5a:45:1c:c8:
                    d3:24:76:32:46:71:56:d1:39:8d:55:8e:8d:eb:e6:
                    9a:65:3c:d4:50:2e:54:5d:1c:07:80:5b:98:6b:32:
                    a2:1a:99:7b:ba:f3:52:f5:f3:ab:7c:4e:dc:f2:5f:
                    44:c6:91:c8:e1:05:31:a2:34:52:67:f6:cd:70:0d:
                    04:70:aa:a8:74:b7:b7:d2:b6:b3:b5:7d:ef:5f:b5:
                    0a:ab:8e:49:93:26:e8:79:71:2b:1e:9c:f3:cb:93:
                    6c:a8:fe:9a:b3:4b:4e:f3:e7:db:83:2c:6f:3d:44:
                    52:68:8a:7e:a8:63:39:b7:78:70:3f:e4:e9:a5:5a:
                    35:a1:fd:11:4e:68:78:0e:c3:e9:91:79:07:c6:da:
                    73:e2:ac:45:e2:12:a9:6b:f9:d9:9f:ec:31:17:64:
                    e8:42:4c:4e:5c:b1:25:cc:4f:d1:e3:be:37:f5:57:
                    0f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6F:C9:3F:A0:8B:5C:D8:5B:A1:FA:93:DE:E7:4F:2B:D4:C9:20:9B
            X509v3 Authority Key Identifier:
                keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e382e302f32312d3231203d3e203234313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.132.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         71:33:ee:5a:d0:3e:ff:b7:85:45:60:25:1d:56:13:42:a6:fb:
         9a:b0:5f:36:ea:5a:10:aa:42:af:81:fc:47:1b:64:49:fa:9d:
         6b:18:6a:68:32:30:24:fe:03:df:f1:c8:ac:f7:69:45:85:0d:
         a3:e7:a6:2d:99:33:5f:49:cc:7a:b3:db:96:c1:8b:d0:65:6c:
         e0:31:f6:9c:bc:72:d3:b8:8a:30:01:9b:66:b9:6e:31:ff:f4:
         5d:33:1c:48:7a:88:16:54:3b:c0:4a:bf:a2:af:34:f6:d4:65:
         16:7d:7e:4e:86:20:92:e1:72:c3:4e:ad:70:3f:38:0d:7c:19:
         17:b1:7a:ec:e1:0e:e8:ee:83:ee:4e:e4:5d:d0:3f:09:17:8c:
         8c:ec:60:30:a7:68:e1:de:4b:af:e2:59:ba:20:f7:a4:42:64:
         ac:df:42:f4:df:ce:a9:c7:18:4d:0e:ac:c7:7f:bc:8b:89:04:
         ac:ab:06:28:e2:b1:91:c7:05:27:2e:8f:6c:34:8d:6e:ac:b8:
         5c:f0:7d:78:ab:7f:13:b5:1a:5d:ac:80:eb:76:ba:8d:cc:07:
         36:41:32:dd:7b:a2:52:2f:11:f1:ae:f1:18:1c:81:0c:55:2d:
         c7:1f:00:9e:a7:ec:b8:0a:67:54:ff:c7:74:d1:b2:c5:1d:8d:
         69:a8:81:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 06:24:39 2026 by rpki-client