Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3130312e302f32342d3234203d3e20313334373633.roa
File:                     3231312e39392e3130312e302f32342d3234203d3e20313334373633.roa (raw, json)
Hash identifier:          Ec8NHuv7FzdetZc9s3j6Sz1wAuRdEl8JhNtwRb5nuB8=
Subject key identifier:   43:D0:FB:7E:91:F0:60:0D:60:B2:19:A5:3F:77:46:1E:60:BA:CD:5B
Certificate issuer:       /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Certificate serial:       486ECD368D687AB2C9C08288CE0C22534C13D9D9
Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3130312e302f32342d3234203d3e20313334373633.roa
Signing time:             Wed 03 Jun 2026 09:27:08 +0000
ROA not before:           Wed 03 Jun 2026 09:22:08 +0000
ROA not after:            Wed 02 Jun 2027 09:27:08 +0000
asID:                     134763
IP address blocks:        211.99.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 13:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6e:cd:36:8d:68:7a:b2:c9:c0:82:88:ce:0c:22:53:4c:13:d9:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
        Validity
            Not Before: Jun  3 09:22:08 2026 GMT
            Not After : Jun  2 09:27:08 2027 GMT
        Subject: CN=43D0FB7E91F0600D60B219A53F77461E60BACD5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e9:7d:60:05:24:b9:df:55:3b:11:04:f0:61:
                    65:67:cd:28:e5:5e:8d:da:47:99:2e:f6:b6:ee:b8:
                    33:af:47:2a:13:f9:11:c2:56:0b:00:2e:dc:44:5b:
                    ce:4c:98:7c:7f:49:65:d8:7a:dd:2b:55:f3:24:f9:
                    b9:f8:1e:3f:49:51:13:46:b4:7b:17:82:e4:4a:7e:
                    a9:b6:b8:77:a3:9e:81:90:53:3c:8c:52:f0:53:d1:
                    dd:0e:3e:f8:60:33:cb:40:70:a2:d7:1a:2a:34:5a:
                    1d:e8:dc:53:d3:b0:84:bd:2b:4a:b9:36:00:04:ec:
                    3c:ba:89:0b:20:cd:f1:97:2d:e3:ed:4e:d3:3d:33:
                    56:de:8f:75:f3:3b:ea:5a:6e:c7:30:2e:ba:cd:dc:
                    cc:a1:4d:a4:b1:c8:da:28:02:9d:1c:99:a0:7b:da:
                    51:35:53:b4:c1:bf:f8:d9:6e:c5:48:51:5c:48:cc:
                    87:93:14:cc:d4:61:e1:9e:05:61:78:41:e4:d5:12:
                    8d:d1:73:0b:4c:c5:36:09:f9:6c:f3:96:fb:4e:fd:
                    59:a2:c9:7e:da:d4:6e:f2:1c:c0:2d:e0:66:82:6d:
                    95:0a:11:cd:30:72:f3:f0:af:62:9e:1f:59:a7:c1:
                    5c:fe:18:5e:fd:e6:34:4f:65:0d:32:ab:b4:ce:0b:
                    cb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D0:FB:7E:91:F0:60:0D:60:B2:19:A5:3F:77:46:1E:60:BA:CD:5B
            X509v3 Authority Key Identifier:
                keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3130312e302f32342d3234203d3e20313334373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.99.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:37:f6:77:17:e6:27:a3:c1:94:08:4c:ba:56:a1:e1:cc:57:
         8b:b6:32:16:24:e0:b5:61:ad:1a:1a:90:75:a2:83:c7:ac:49:
         41:0b:1d:93:88:b9:c4:00:d0:28:d1:58:2f:08:cb:cd:15:24:
         f1:8d:34:97:09:af:cb:7b:5b:ac:66:d3:d2:8a:7d:e5:47:db:
         ff:ef:c1:34:aa:10:d4:d0:9d:dc:26:48:31:cd:fd:f8:3b:60:
         77:38:5d:9d:20:98:91:be:9a:dd:18:22:87:b7:a1:ff:e1:5b:
         f1:c0:3e:01:ff:c7:46:48:ae:d7:10:f3:dc:55:c1:2a:a4:1e:
         54:44:17:52:1e:93:a2:67:c4:18:24:49:9d:6b:61:55:3d:03:
         4f:1f:a6:e6:10:e4:af:59:64:03:76:b9:02:65:66:72:a1:30:
         44:b7:dd:ea:ec:50:dc:c4:80:e9:e5:83:28:7c:c9:30:ca:26:
         27:59:92:75:81:58:b3:52:aa:c6:e7:b1:19:10:a5:15:fe:50:
         7b:00:26:48:12:8d:36:6b:7e:f2:e7:f0:9d:e2:bb:1a:79:2a:
         43:a3:55:0a:dc:8c:94:69:5c:15:f5:d1:b4:99:e0:8f:3a:69:
         cb:a1:d4:c1:b3:78:77:bd:b7:2c:c9:04:9a:33:dd:c7:5f:37:
         8a:fb:23:f7
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUSG7NNo1oerLJwIKIzgwiU0wT2dkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5
NUJFMDBBQTAeFw0yNjA2MDMwOTIyMDhaFw0yNzA2MDIwOTI3MDhaMDMxMTAvBgNV
BAMTKDQzRDBGQjdFOTFGMDYwMEQ2MEIyMTlBNTNGNzc0NjFFNjBCQUNENUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE6X1gBSS531U7EQTwYWVnzSjl
Xo3aR5ku9rbuuDOvRyoT+RHCVgsALtxEW85MmHx/SWXYet0rVfMk+bn4Hj9JURNG
tHsXguRKfqm2uHejnoGQUzyMUvBT0d0OPvhgM8tAcKLXGio0Wh3o3FPTsIS9K0q5
NgAE7Dy6iQsgzfGXLePtTtM9M1bej3XzO+pabscwLrrN3MyhTaSxyNooAp0cmaB7
2lE1U7TBv/jZbsVIUVxIzIeTFMzUYeGeBWF4QeTVEo3RcwtMxTYJ+WzzlvtO/Vmi
yX7a1G7yHMAt4GaCbZUKEc0wcvPwr2KeH1mnwVz+GF795jRPZQ0yq7TOC8sTAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUQ9D7fpHwYA1gshmlP3dGHmC6zVswHwYDVR0j
BBgwFoAUU4FOLN+VzJdH2R47WgFHhpW+AKowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MTkwOTMzNDMxNDM4NTQyNy8wLzUzODE0RTJDREY5NUNDOTc0N0Q5MUUzQjVBMDE0
Nzg2OTVCRTAwQUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5NUJFMDBBQS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMTE5MDkzMzQzMTQzODU0MjcvMC8zMjMxMzEyZTM5
MzkyZTMxMzAzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzYzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEANNjZTANBgkqhkiG9w0BAQsFAAOCAQEAKTf2dxfmJ6PBlAhMulah
4cxXi7YyFiTgtWGtGhqQdaKDx6xJQQsdk4i5xADQKNFYLwjLzRUk8Y00lwmvy3tb
rGbT0op95Ufb/+/BNKoQ1NCd3CZIMc39+DtgdzhdnSCYkb6a3Rgih7eh/+Fb8cA+
Af/HRkiu1xDz3FXBKqQeVEQXUh6TomfEGCRJnWthVT0DTx+m5hDkr1lkA3a5AmVm
cqEwRLfd6uxQ3MSA6eWDKHzJMMomJ1mSdYFYs1KqxuexGRClFf5QewAmSBKNNmt+
8ufwneK7GnkqQ6NVCtyMlGlcFfXRtJngjzppy6HUwbN4d723LMkEmjPdx183ivsj
9w==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:08 2026 by rpki-client