Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1110934764212191253/0/3231392e3233322e3131322e302f32342d3234203d3e2034383038.roa
File:                     3231392e3233322e3131322e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          OO8vRmAkg4+dMfmbzdTiV+9Mv+Az21ASxb9SPkL1gG8=
Subject key identifier:   8A:33:B6:61:E6:10:AE:97:CD:86:1E:0B:D8:45:2F:48:9E:A0:A0:AA
Certificate issuer:       /CN=AE053C2402CB47FCF6E875C30756E16C9742BFE3
Certificate serial:       765E77AA68B694FD01DC463C3EE972A437F3D287
Authority key identifier: AE:05:3C:24:02:CB:47:FC:F6:E8:75:C3:07:56:E1:6C:97:42:BF:E3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/3231392e3233322e3131322e302f32342d3234203d3e2034383038.roa
Signing time:             Sun 24 May 2026 14:43:23 +0000
ROA not before:           Sun 24 May 2026 14:38:23 +0000
ROA not after:            Sun 23 May 2027 14:43:23 +0000
asID:                     4808
IP address blocks:        219.232.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 05:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:5e:77:aa:68:b6:94:fd:01:dc:46:3c:3e:e9:72:a4:37:f3:d2:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE053C2402CB47FCF6E875C30756E16C9742BFE3
        Validity
            Not Before: May 24 14:38:23 2026 GMT
            Not After : May 23 14:43:23 2027 GMT
        Subject: CN=8A33B661E610AE97CD861E0BD8452F489EA0A0AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dd:61:67:ec:7e:d3:27:0f:e9:ed:a8:47:fe:
                    6b:ec:44:41:e6:b4:03:2a:eb:21:08:f1:a1:be:3b:
                    ab:f4:a4:8f:fb:de:ed:0f:71:ee:4d:fc:ca:34:c7:
                    ba:b6:b8:b2:77:31:24:63:0a:c7:4a:cb:87:19:a8:
                    c0:76:5d:f4:49:6b:fc:6a:71:25:e9:8d:81:4e:6b:
                    aa:a3:ec:40:8a:1f:ed:d1:fe:25:22:a4:9e:f2:7f:
                    3a:b3:ee:fe:88:d8:44:d8:e2:08:ba:30:87:d3:0a:
                    37:2b:da:69:88:57:55:c3:43:99:ab:21:a2:80:e8:
                    58:7f:a2:96:03:ed:84:ce:c4:0a:50:d0:57:e4:16:
                    7a:9d:f4:78:fe:7e:f3:19:82:4e:89:76:ea:5e:d0:
                    a7:06:db:3e:10:cc:78:a6:af:c9:21:01:58:47:fc:
                    1b:4b:a2:6a:e6:c7:14:72:b5:e5:6e:42:0b:e1:0b:
                    ab:c5:36:aa:3c:93:f7:56:ae:aa:44:ab:6a:0c:44:
                    8a:2c:10:fd:4b:9b:d9:6b:a7:42:9d:87:5c:9e:af:
                    48:94:1d:ee:ab:3f:99:40:ea:ca:14:7e:cc:3e:cd:
                    04:0b:14:d4:c8:9f:8e:83:f2:02:71:4b:ca:38:c6:
                    bd:82:90:4f:f2:45:d7:77:4d:2b:d0:1b:f0:dc:8d:
                    82:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:33:B6:61:E6:10:AE:97:CD:86:1E:0B:D8:45:2F:48:9E:A0:A0:AA
            X509v3 Authority Key Identifier:
                keyid:AE:05:3C:24:02:CB:47:FC:F6:E8:75:C3:07:56:E1:6C:97:42:BF:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/3231392e3233322e3131322e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.232.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:a7:6f:1b:67:fe:95:bc:e1:94:40:cd:c0:8c:07:dd:bd:4c:
         81:50:88:b5:5f:80:3a:67:4e:d9:a4:53:0b:2d:b5:92:fc:2c:
         e0:94:16:d2:98:ed:ef:91:9a:9d:05:89:7e:77:54:95:da:4d:
         bc:d8:9a:1d:14:c7:b6:4b:14:7f:73:6a:13:7e:7f:59:d2:df:
         90:39:f8:04:31:05:54:fd:23:3c:c9:72:0c:c7:70:81:70:f0:
         0b:66:89:02:bd:cb:7b:b3:b4:58:d3:25:e6:08:4d:f6:5b:95:
         bf:49:23:be:49:f6:eb:15:a7:10:b3:d6:df:89:91:9e:08:6b:
         6b:05:87:ed:b9:14:bb:4b:4c:34:09:2f:32:29:b9:54:b3:48:
         ef:93:6d:a2:48:a8:f7:84:8b:c7:5c:8c:94:7e:24:d9:96:35:
         7c:33:63:54:84:7b:0b:96:90:09:ab:09:6c:31:d5:43:72:0a:
         30:0a:ff:2d:e4:b3:66:e0:f4:48:a0:71:ce:10:97:2a:87:ac:
         38:9e:6a:4b:b0:d1:be:32:38:86:82:f7:fd:8e:a8:c8:58:d0:
         90:95:99:e1:83:7c:35:ca:8e:16:b4:a0:6f:92:ac:22:8d:d1:
         25:dc:0e:57:91:4b:13:fb:43:8d:a2:35:03:9e:53:0d:72:82:
         25:fd:71:6f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:15 2026 by rpki-client