Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3131362e302f32342d3234203d3e20313334353433.roa
File:                     3231312e39392e3131362e302f32342d3234203d3e20313334353433.roa (raw, json)
Hash identifier:          pOqHpF9F0KOnTuAw/lB3hNfE8p/RJ3WxOHY/AeOPsZs=
Subject key identifier:   54:FB:82:BE:A4:3B:FF:E5:9D:8A:95:4A:76:EB:31:82:15:88:E1:2B
Certificate issuer:       /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Certificate serial:       595CB39CE2B8DE2A834F1431ECDED7230539ADAF
Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3131362e302f32342d3234203d3e20313334353433.roa
Signing time:             Wed 27 May 2026 07:42:43 +0000
ROA not before:           Wed 27 May 2026 07:37:43 +0000
ROA not after:            Wed 26 May 2027 07:42:43 +0000
asID:                     134543
IP address blocks:        211.99.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:14:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5c:b3:9c:e2:b8:de:2a:83:4f:14:31:ec:de:d7:23:05:39:ad:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
        Validity
            Not Before: May 27 07:37:43 2026 GMT
            Not After : May 26 07:42:43 2027 GMT
        Subject: CN=54FB82BEA43BFFE59D8A954A76EB31821588E12B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f5:59:74:bf:9e:1f:ec:00:b0:a9:d2:56:6e:
                    9a:14:3c:e4:08:5c:86:64:ce:bc:40:89:15:57:02:
                    09:8e:8d:3a:23:34:6e:18:54:53:a2:a3:6b:47:06:
                    aa:34:e9:48:c8:b3:62:90:18:51:5c:2f:7f:df:1a:
                    04:0b:62:15:45:f5:bd:11:4c:a1:9c:66:0f:07:8c:
                    64:2b:fe:0e:c5:4a:b4:98:43:99:c7:39:25:e3:16:
                    68:83:de:2b:05:ea:92:ef:f2:0c:58:70:bc:e0:f8:
                    e7:ac:cd:a8:8c:39:72:25:9c:15:81:14:9e:85:59:
                    2c:61:ff:fb:9b:56:cb:f1:de:1d:2c:89:76:5a:fd:
                    94:66:66:05:87:78:e0:f5:a2:5f:91:6d:f3:a0:65:
                    f9:49:90:53:e6:92:3a:6f:b9:2b:46:2f:d8:dc:81:
                    7d:95:5f:a9:77:e9:2c:5e:46:76:2b:27:3b:ee:cd:
                    1a:36:b4:fe:3c:3c:8b:9e:e6:77:d7:75:95:8e:af:
                    82:1c:99:d2:71:f3:ab:99:8f:d9:9b:12:e5:0b:3a:
                    d7:14:45:34:ba:f8:db:5b:ac:c6:c5:f6:e9:8f:15:
                    97:ef:94:1b:c2:63:50:a2:4b:62:c3:ae:6f:4c:ca:
                    a2:33:24:18:da:1f:35:67:22:24:24:15:c9:55:47:
                    dd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FB:82:BE:A4:3B:FF:E5:9D:8A:95:4A:76:EB:31:82:15:88:E1:2B
            X509v3 Authority Key Identifier:
                keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3131362e302f32342d3234203d3e20313334353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.99.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:47:1e:f2:73:23:7c:72:18:99:dc:7b:f0:d3:ae:c0:53:5c:
         b8:c8:22:59:c7:cf:9e:81:18:ff:cc:a2:76:22:13:41:60:e3:
         98:6b:d2:d1:2a:25:12:cc:32:84:3e:eb:e6:e4:f8:a3:26:b1:
         6b:90:de:f4:89:12:ee:d4:ac:38:28:5a:aa:f8:47:89:97:af:
         a6:eb:72:db:41:10:fc:39:11:40:96:80:44:49:03:e1:26:c3:
         cf:3c:9c:e7:03:46:3d:80:95:d5:27:e1:26:50:8b:cc:c5:0b:
         99:28:ab:c9:c2:4f:cf:d5:be:59:35:f1:7e:b9:0e:8a:3c:ff:
         3d:d4:9d:bf:a7:44:a9:28:1a:d6:05:1f:f4:4c:59:f1:39:de:
         3e:2d:f0:ef:2b:8b:fd:4a:60:75:ce:9b:8a:4d:31:19:1a:8e:
         84:49:ed:e1:4e:a2:fe:11:5e:f8:10:82:ca:0e:75:dc:34:d7:
         d7:90:9d:04:82:95:24:12:7d:57:ef:a1:4c:35:47:47:68:52:
         14:93:9c:94:07:35:93:b5:db:2d:a2:ef:69:1c:dd:2a:9e:e2:
         09:3a:c0:24:a3:40:f6:03:a6:8b:09:54:9d:43:35:d5:2b:20:
         b9:f0:7c:1e:2a:8e:0e:2e:0a:1f:b7:f0:db:2c:bc:d8:f3:06:
         7f:da:4a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:57:16 2026 by rpki-client