Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3131342e302f32342d3234203d3e20313334353433.roa
File:                     3231312e39392e3131342e302f32342d3234203d3e20313334353433.roa (raw, json)
Hash identifier:          VDhEkG4rAzjDnGYl/ETV10Tu7BB9j1m/O1+aGVDt19o=
Subject key identifier:   36:EB:7C:2A:3A:8A:0E:E5:C5:00:76:D9:E1:10:E8:5C:12:7D:3A:F9
Certificate issuer:       /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Certificate serial:       6FA310EDA21EC31C0C3E50DE6952C3E7AAD171B4
Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3131342e302f32342d3234203d3e20313334353433.roa
Signing time:             Wed 27 May 2026 07:42:43 +0000
ROA not before:           Wed 27 May 2026 07:37:43 +0000
ROA not after:            Wed 26 May 2027 07:42:43 +0000
asID:                     134543
IP address blocks:        211.99.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:14:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a3:10:ed:a2:1e:c3:1c:0c:3e:50:de:69:52:c3:e7:aa:d1:71:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
        Validity
            Not Before: May 27 07:37:43 2026 GMT
            Not After : May 26 07:42:43 2027 GMT
        Subject: CN=36EB7C2A3A8A0EE5C50076D9E110E85C127D3AF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:62:e3:00:13:d5:0d:19:31:9b:47:bd:ad:e8:
                    19:89:b1:34:72:b9:65:1d:35:1f:00:c2:1a:6d:7e:
                    a6:00:17:98:73:24:4b:e0:fa:7e:48:9b:ae:e2:e3:
                    81:7f:72:ee:b9:f7:d0:1d:61:83:14:68:5e:20:2a:
                    9b:93:55:16:e7:30:da:15:1b:1e:42:29:99:16:5f:
                    93:5e:da:8e:25:6b:73:d5:8a:9f:78:6e:fc:2a:f3:
                    3d:57:75:12:c6:68:a0:0d:90:16:40:ab:16:bc:72:
                    a6:73:06:ae:12:a5:50:c7:6e:03:f0:b0:1c:de:b5:
                    b6:bd:c7:65:87:7c:bc:50:1f:3b:2f:80:25:9d:7f:
                    04:5c:95:e9:a1:b4:9c:2a:f4:98:d0:0f:9f:4b:c4:
                    be:dc:81:59:65:bd:35:be:63:2c:ba:2c:16:16:8c:
                    2a:01:80:37:36:b3:d5:fe:9e:05:e4:9d:2a:1f:2d:
                    7c:de:7d:76:2a:14:2d:d3:87:13:eb:8b:7e:ca:30:
                    e4:e6:e2:e2:95:10:cd:4d:10:a8:25:0c:c8:7c:79:
                    97:5d:51:22:30:08:ce:ed:33:6e:81:4d:dc:bb:30:
                    7c:b1:bd:7d:7b:d9:8e:ee:4d:1a:6f:7a:ad:af:52:
                    b8:9c:a8:6b:03:5b:43:fd:4d:a0:3b:e3:2d:81:56:
                    df:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EB:7C:2A:3A:8A:0E:E5:C5:00:76:D9:E1:10:E8:5C:12:7D:3A:F9
            X509v3 Authority Key Identifier:
                keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3131342e302f32342d3234203d3e20313334353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.99.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:a2:96:be:0a:53:63:fd:e8:13:96:5e:fb:d1:8a:4c:95:76:
         4e:d2:73:05:ff:b5:34:78:e3:53:55:8d:e4:98:d7:b2:2c:2f:
         19:e6:bc:ac:d0:61:a1:44:fe:ee:1e:64:4e:58:ae:a2:0d:03:
         7f:38:b8:73:11:62:8f:ba:7f:91:ee:fd:74:4a:c7:95:8b:2e:
         45:63:bf:dd:2d:20:0c:0f:ba:37:9f:af:6e:3e:c5:9e:7d:03:
         84:32:0b:d9:72:d5:ec:7b:6c:32:d0:ea:ab:7f:1e:c4:5a:cc:
         0f:33:4c:ea:25:5e:cc:ea:dc:72:cd:03:b0:16:ae:8d:37:d8:
         64:21:b4:ea:ca:69:9b:80:53:e8:fd:4a:21:9e:93:b2:dd:84:
         74:6b:e7:54:c1:e0:6e:ec:75:f5:b2:e6:11:14:62:74:1e:3b:
         52:6e:2b:62:fb:e6:a7:c7:54:27:47:6a:59:ba:dc:0d:52:45:
         14:a8:28:dd:aa:33:e6:ba:99:92:c4:44:6b:a8:da:62:74:82:
         36:1e:c2:4c:cf:dd:9d:90:23:06:67:94:c6:23:94:21:2f:b9:
         9b:ba:af:8c:26:84:b6:2e:85:05:da:5b:cf:ec:01:70:e3:fd:
         6a:e0:64:33:20:92:36:89:a3:42:87:73:2a:c6:40:ad:74:d3:
         c0:c6:06:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:51:22 2026 by rpki-client