Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e39362e302f31392d3139203d3e203234313338.roa
File:                     3131312e3133322e39362e302f31392d3139203d3e203234313338.roa (raw, json)
Hash identifier:          nynsp4c2L7TuIkZLYyXvrwT/e+CJRV+6XGskGDAbUGE=
Subject key identifier:   0C:C8:44:DC:23:BE:96:7B:6D:4C:D8:CB:08:40:5D:F4:34:05:9C:60
Certificate issuer:       /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial:       2C77FC9E58358DDEBBC4B4AA5CADA8E8D9C07459
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e39362e302f31392d3139203d3e203234313338.roa
Signing time:             Thu 21 May 2026 08:33:21 +0000
ROA not before:           Thu 21 May 2026 08:28:21 +0000
ROA not after:            Thu 20 May 2027 08:33:21 +0000
asID:                     24138
IP address blocks:        111.132.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 May 2026 22:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:77:fc:9e:58:35:8d:de:bb:c4:b4:aa:5c:ad:a8:e8:d9:c0:74:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
        Validity
            Not Before: May 21 08:28:21 2026 GMT
            Not After : May 20 08:33:21 2027 GMT
        Subject: CN=0CC844DC23BE967B6D4CD8CB08405DF434059C60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a6:61:9f:eb:cd:83:10:75:77:ce:d1:c2:2c:
                    07:69:0a:9f:69:e1:93:e0:8d:0e:cb:2e:3c:7f:4a:
                    e3:45:a0:4a:b9:cb:c0:a8:5d:2f:a4:96:3e:6e:f3:
                    fe:e5:2d:83:ff:4f:b0:59:fa:c9:63:b8:5b:df:e3:
                    9a:43:66:ba:d1:61:be:ca:4b:c5:f6:8a:c1:74:8e:
                    06:e3:c4:1b:88:68:03:ed:27:90:49:da:92:fa:d7:
                    69:b1:87:65:56:0e:77:74:9c:1c:10:0f:0a:a0:9e:
                    d6:65:9a:62:9f:96:eb:c2:74:4f:97:66:b1:4a:dd:
                    c5:b6:fb:cd:cb:f6:2f:8c:13:7e:a5:c1:16:16:3a:
                    80:a6:17:96:71:db:02:76:15:84:95:52:41:e0:24:
                    7a:09:de:38:6d:9b:ed:a2:0a:73:e6:34:0a:a0:3b:
                    26:89:de:b7:d4:56:80:ae:e3:91:35:29:e5:1a:b3:
                    c3:6b:83:22:56:95:be:6d:86:a9:05:c8:03:07:68:
                    97:3e:7f:86:ca:f2:b2:b5:af:63:36:e5:6e:53:d7:
                    66:55:a9:4a:59:00:a4:37:6b:6f:84:27:ce:53:b5:
                    6b:df:ad:e9:a7:43:5b:dc:42:22:9b:43:f3:38:af:
                    69:28:9b:14:35:85:a4:fc:0b:9e:19:a2:84:24:81:
                    90:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C8:44:DC:23:BE:96:7B:6D:4C:D8:CB:08:40:5D:F4:34:05:9C:60
            X509v3 Authority Key Identifier:
                keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e39362e302f31392d3139203d3e203234313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.132.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ca:85:f0:db:d2:cc:af:1b:c4:82:e7:b6:75:5f:a1:e6:aa:54:
         0b:09:44:9d:b2:75:81:4e:e7:6b:67:56:a7:64:f4:37:9c:6d:
         82:ec:2c:bc:be:0e:a2:d1:7b:bf:3d:00:ff:34:aa:4f:b3:b9:
         91:f7:d5:12:13:f4:62:41:3f:9b:4a:93:bd:78:1a:04:31:ce:
         6f:34:c3:5b:ea:a2:de:ba:a1:74:bf:4c:7d:38:a7:3d:ef:b3:
         5f:63:13:1a:1a:c8:ee:f3:06:e0:cf:ab:3b:74:38:50:2f:02:
         2b:fd:fa:34:99:4a:3b:29:36:a8:3c:f6:f5:f9:2d:3c:a8:6c:
         0f:32:a9:cb:a5:5f:5a:86:e9:ea:4c:29:0a:60:65:9c:56:bf:
         78:24:60:43:e6:e7:79:5c:8b:1d:34:07:cb:98:a6:e2:ef:93:
         0e:b8:ae:b0:85:f1:b6:7e:fa:4c:19:07:cd:30:f5:72:71:dd:
         53:8c:8b:b3:2a:ac:60:6a:fe:f5:3d:ab:c4:db:44:5b:b5:b1:
         0a:23:d2:75:59:91:bd:85:56:d8:44:20:5b:39:72:ca:7b:df:
         b5:be:01:7d:10:f7:39:c0:af:a5:dd:da:7d:9e:4c:fd:0b:5b:
         1b:8f:b3:14:28:b8:c5:7b:43:60:5b:63:34:42:d1:71:79:31:
         cd:da:0c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 06:24:38 2026 by rpki-client