Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e39362e302f32342d3234203d3e20313334373633.roa
File:                     3231312e39392e39362e302f32342d3234203d3e20313334373633.roa (raw, json)
Hash identifier:          YRP2IWaigzbjwIzLNHGY22ci99y/p+xp6JiRakmiFyM=
Subject key identifier:   5F:08:15:99:C9:D2:BB:48:17:A3:52:02:95:1A:91:49:FB:A0:A0:40
Certificate issuer:       /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Certificate serial:       09B833B06F08BF87B9CBA4C0E18E8FE54614D005
Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e39362e302f32342d3234203d3e20313334373633.roa
Signing time:             Wed 03 Jun 2026 09:27:08 +0000
ROA not before:           Wed 03 Jun 2026 09:22:08 +0000
ROA not after:            Wed 02 Jun 2027 09:27:08 +0000
asID:                     134763
IP address blocks:        211.99.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 13:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b8:33:b0:6f:08:bf:87:b9:cb:a4:c0:e1:8e:8f:e5:46:14:d0:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
        Validity
            Not Before: Jun  3 09:22:08 2026 GMT
            Not After : Jun  2 09:27:08 2027 GMT
        Subject: CN=5F081599C9D2BB4817A35202951A9149FBA0A040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:fb:80:58:dd:fd:dc:34:b3:90:15:d5:a7:
                    d3:80:2c:47:41:fc:21:46:f8:80:c5:e9:b7:13:33:
                    97:14:b8:63:d7:4e:a5:c2:f9:04:e3:36:77:11:d0:
                    fc:30:81:98:08:2d:5a:59:eb:64:31:47:c1:13:a8:
                    39:07:85:b9:d3:1a:f1:5d:d7:ce:4e:36:df:48:f1:
                    d1:14:0b:b5:53:de:50:6c:82:24:50:42:b5:4c:bb:
                    37:f4:b1:78:46:4c:5a:a9:c3:a9:c1:a7:94:e7:cf:
                    19:8e:44:38:3e:a8:54:c9:5c:f4:ff:b2:09:57:61:
                    f1:d2:7d:c0:37:91:af:85:f3:42:dc:d5:21:b5:59:
                    1f:ac:f6:9a:e0:a7:17:25:fe:4b:db:5c:a8:73:ef:
                    f6:6a:95:88:95:d5:c1:22:08:40:4d:25:c7:05:d8:
                    c3:6d:5c:d9:e2:77:78:b3:d9:76:94:60:cb:15:25:
                    dc:cd:4f:39:8b:8e:6b:5f:4e:2d:19:9e:00:14:5a:
                    8c:78:d4:98:fa:64:ec:ea:43:2c:80:46:f1:c0:85:
                    cc:46:46:f1:19:8f:99:b9:8b:3c:14:4c:09:af:f6:
                    57:8f:65:06:c6:a0:10:4e:8d:66:9a:a1:3b:98:31:
                    9e:dd:23:d5:99:9f:f3:46:2c:a0:94:58:31:51:b9:
                    c1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:08:15:99:C9:D2:BB:48:17:A3:52:02:95:1A:91:49:FB:A0:A0:40
            X509v3 Authority Key Identifier:
                keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e39362e302f32342d3234203d3e20313334373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.99.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:e1:38:bd:f7:c9:af:7f:12:70:b7:13:3d:b1:6f:e9:b6:3e:
         a7:7f:99:ff:e2:7c:d0:a5:2c:57:87:be:40:33:ea:f2:d6:b1:
         58:ce:f5:42:aa:5f:d4:b7:8c:69:06:2c:de:af:86:9f:8c:db:
         07:ae:1a:62:4d:89:d7:b0:bd:63:47:84:1e:ed:67:8d:dc:cc:
         92:2f:2f:67:b3:cb:71:f2:ab:4f:83:a5:13:62:2c:c1:4d:c9:
         79:b3:6b:0e:52:2a:7e:41:b0:e5:7b:74:31:b5:0e:31:6e:61:
         39:a6:9f:46:54:86:2a:95:43:82:d1:e1:5c:8b:2b:26:2c:50:
         9b:40:a3:65:9c:28:b4:de:53:87:37:ee:55:94:6d:c5:25:73:
         33:30:0d:42:39:09:c5:37:26:db:aa:d9:5f:4d:4f:87:aa:0d:
         8a:96:16:a9:41:74:6d:7d:20:0b:b4:40:b2:e1:0c:b0:bc:d6:
         1a:0f:e5:0b:aa:dd:16:43:89:84:b1:95:6f:22:b0:fe:cf:23:
         e1:e6:99:40:0d:64:f6:07:e7:e4:75:2f:73:d4:13:d2:20:1f:
         c5:72:b9:62:c1:77:d6:97:5e:2b:0d:ab:77:62:3c:f2:6e:eb:
         4a:11:2a:64:a4:1c:28:87:fd:85:d5:5d:dd:71:f8:dd:4f:d7:
         d4:fd:aa:e3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:48 2026 by rpki-client