Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3131352e302f32342d3234203d3e20313334353433.roa
File:                     3231312e39392e3131352e302f32342d3234203d3e20313334353433.roa (raw, json)
Hash identifier:          WKKau4bFwduVuMkM97n1tM+bdWJiLhiu2gAbu9lLJKo=
Subject key identifier:   15:3A:9A:D3:0A:8A:AB:CF:94:60:CB:64:6F:2C:66:7E:6C:B7:FC:20
Certificate issuer:       /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Certificate serial:       6231605B0715FDC8F8752DFFD27C7F73D33257C6
Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3131352e302f32342d3234203d3e20313334353433.roa
Signing time:             Wed 27 May 2026 07:42:43 +0000
ROA not before:           Wed 27 May 2026 07:37:43 +0000
ROA not after:            Wed 26 May 2027 07:42:43 +0000
asID:                     134543
IP address blocks:        211.99.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:14:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:31:60:5b:07:15:fd:c8:f8:75:2d:ff:d2:7c:7f:73:d3:32:57:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
        Validity
            Not Before: May 27 07:37:43 2026 GMT
            Not After : May 26 07:42:43 2027 GMT
        Subject: CN=153A9AD30A8AABCF9460CB646F2C667E6CB7FC20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:49:5b:99:b6:50:dd:df:7f:5c:da:93:d2:22:
                    62:b8:61:2c:bf:5c:3f:9f:2d:49:ab:b2:23:2e:a5:
                    31:33:4d:af:95:ca:97:b2:97:93:7e:7e:8b:86:0e:
                    a4:e4:c2:9d:bd:2e:6c:20:9f:a1:c9:80:fc:8f:80:
                    66:3e:c4:eb:75:f5:6a:a9:a7:11:47:95:a2:14:6c:
                    55:bf:3d:2d:53:43:52:bd:fb:f9:81:46:70:d4:1e:
                    c2:81:3d:73:32:35:9c:7a:36:d5:76:d8:b7:64:7a:
                    55:ec:4a:1f:fa:a1:c2:32:3b:84:83:b1:0a:49:31:
                    e6:05:19:26:60:32:ef:65:89:29:e6:d8:f4:d4:8d:
                    65:83:45:28:a6:2e:13:0a:ad:8a:a7:f8:6d:82:ad:
                    33:a4:5f:dd:6e:b0:a7:cf:1a:0d:d9:92:f1:4b:36:
                    78:d2:7f:9c:c0:9c:f7:e5:3b:dc:ab:36:ec:38:c7:
                    e3:43:e9:ec:81:25:3f:aa:85:6f:45:2b:d4:99:0a:
                    57:0f:54:28:36:d1:51:0e:f1:ae:56:13:7f:6a:ff:
                    94:ee:b4:98:38:4d:9f:20:bf:d1:b4:f3:0b:b6:48:
                    e4:cf:20:0a:1e:88:e4:20:6d:aa:56:4c:41:b4:58:
                    d9:4c:8b:c2:4c:9a:e9:d4:6a:db:c4:b6:e3:db:e9:
                    fa:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3A:9A:D3:0A:8A:AB:CF:94:60:CB:64:6F:2C:66:7E:6C:B7:FC:20
            X509v3 Authority Key Identifier:
                keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3131352e302f32342d3234203d3e20313334353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.99.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:6b:ee:ed:2b:40:c5:d3:c8:ad:4e:ff:7e:f5:66:64:7b:02:
         0c:e3:de:d3:a4:b2:39:7c:4e:45:7e:68:c9:fd:ed:af:ac:59:
         ba:43:87:9e:24:fb:91:13:06:6b:20:72:79:4b:fc:51:56:47:
         8f:44:b9:c0:8f:14:b9:65:d9:37:65:ed:71:20:a7:c3:ee:90:
         fa:64:23:15:ea:1c:1d:00:d1:d8:ff:51:80:c1:ee:b0:16:66:
         0a:dd:f4:97:28:98:63:53:0b:e8:c8:b0:28:1f:f9:73:e5:f7:
         00:04:8f:56:6f:18:5e:2e:30:70:58:a2:77:55:7b:0b:13:55:
         8f:de:99:ca:92:b3:2f:55:57:c0:b7:2a:42:fc:e6:2b:08:55:
         03:b1:47:c8:7f:1c:27:1a:bc:93:f5:ad:9f:63:ea:c0:f9:a1:
         d5:48:93:b3:f8:05:f2:89:b4:c5:56:df:d7:4f:c7:35:7e:5f:
         f7:ae:16:b6:66:5a:20:60:d0:df:05:7d:2d:00:8e:97:de:77:
         9a:5d:33:fb:68:85:ad:28:ea:3b:8c:c4:f9:c0:31:f7:9e:32:
         b7:5e:a8:a0:24:63:d0:32:d9:64:b7:65:c0:6b:da:ab:7a:ed:
         56:a1:65:b1:8e:47:5f:6b:a5:19:30:6f:fe:73:9b:57:a1:20:
         46:56:17:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:57:19 2026 by rpki-client