Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3130322e302f32342d3234203d3e20313334373633.roa
File:                     3231312e39392e3130322e302f32342d3234203d3e20313334373633.roa (raw, json)
Hash identifier:          WoNnfbEvSeXv/rO+sJ4h+rg/mbciJqW7egJ3cM6pkX0=
Subject key identifier:   66:4F:4C:0C:8A:72:08:94:9C:DD:AE:56:85:64:7B:F8:EC:AE:0A:4F
Certificate issuer:       /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Certificate serial:       2A37B7F6B918B5862C777E28A6C6346D2EFA1096
Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3130322e302f32342d3234203d3e20313334373633.roa
Signing time:             Wed 03 Jun 2026 09:27:08 +0000
ROA not before:           Wed 03 Jun 2026 09:22:08 +0000
ROA not after:            Wed 02 Jun 2027 09:27:08 +0000
asID:                     134763
IP address blocks:        211.99.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 13:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:37:b7:f6:b9:18:b5:86:2c:77:7e:28:a6:c6:34:6d:2e:fa:10:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
        Validity
            Not Before: Jun  3 09:22:08 2026 GMT
            Not After : Jun  2 09:27:08 2027 GMT
        Subject: CN=664F4C0C8A7208949CDDAE5685647BF8ECAE0A4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:37:40:2a:f0:4e:fb:c8:4b:e9:52:2d:2b:38:
                    93:f8:37:4e:76:21:b8:90:66:17:6d:d4:b9:14:59:
                    db:99:4d:c1:28:df:a2:c4:53:69:b9:ff:e1:16:7d:
                    ab:54:f0:85:c6:ca:ce:59:9c:9c:ab:cc:1b:f6:24:
                    f9:b5:88:d5:5f:95:6f:cf:b8:91:47:9c:25:ab:36:
                    76:cc:f4:53:6c:1a:05:90:2c:7d:fc:14:06:f8:ab:
                    2d:a6:76:d1:34:bf:c8:3b:ef:57:0c:a7:7a:4a:32:
                    80:68:10:40:42:e0:06:10:29:df:3b:dd:5a:9f:eb:
                    1f:72:6c:df:ad:6a:f6:62:1d:13:72:3d:89:30:59:
                    6d:ac:cc:da:27:d1:83:8a:6c:4f:78:48:7f:26:9e:
                    4e:a2:0e:ef:80:8b:c7:23:cc:71:36:c2:c9:7c:68:
                    46:45:5e:0f:64:82:55:ef:b2:f7:50:13:2d:c5:2a:
                    4b:44:86:1e:9d:76:86:6b:45:12:e3:e8:1c:8a:2f:
                    bb:7e:02:b2:86:c0:69:50:39:5e:56:da:72:3e:f8:
                    dd:a7:6c:99:2f:0c:64:fa:21:07:89:c5:be:52:7f:
                    0f:3e:83:93:02:02:00:f4:97:d2:3e:93:70:ef:1d:
                    00:bc:d7:7e:5a:fd:da:89:89:c7:0f:0f:ac:e9:01:
                    bf:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4F:4C:0C:8A:72:08:94:9C:DD:AE:56:85:64:7B:F8:EC:AE:0A:4F
            X509v3 Authority Key Identifier:
                keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3130322e302f32342d3234203d3e20313334373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.99.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:c8:0d:11:2c:46:d8:a6:4f:4e:46:1b:25:c1:d1:2c:32:ae:
         e7:96:21:d6:d3:9a:9b:9b:8a:a7:bf:b5:8e:5f:fa:fa:24:96:
         c0:15:46:d3:98:c2:e6:c4:32:66:44:46:bd:69:36:18:bc:2f:
         c0:91:fd:af:98:23:61:85:f8:8f:67:20:8a:1b:81:ee:e9:9c:
         4a:b0:f1:4c:fd:db:19:e8:0b:69:62:6f:da:99:44:08:02:08:
         9c:6f:26:d9:06:06:97:b3:32:5b:35:14:58:e4:45:93:cb:d3:
         ab:2a:64:eb:ae:d0:93:55:f3:c9:ed:95:f3:d2:c7:5e:f5:bd:
         96:0b:9b:64:3d:71:43:be:dc:b1:c9:6b:e3:cb:a0:58:73:c5:
         66:5b:bd:26:58:da:91:a4:a6:c4:c5:5e:7f:43:6e:41:ac:d3:
         dc:99:ac:01:b7:ff:0b:0a:82:c6:22:e7:3a:7f:cb:27:31:75:
         e3:64:d7:cb:52:f1:9c:71:20:29:90:ec:de:f3:e1:68:a6:d3:
         18:27:0d:ab:1c:7c:d4:61:9e:04:69:e9:80:72:95:fb:9f:f9:
         f9:d8:b4:82:0f:bb:db:ff:83:1d:af:67:de:ea:7f:b3:53:41:
         6c:69:c3:0f:7c:9c:02:6d:44:d1:72:e5:75:0e:cc:17:89:fe:
         65:ff:78:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:22 2026 by rpki-client