Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e39372e302f32342d3234203d3e20313334353433.roa
File:                     3231312e39392e39372e302f32342d3234203d3e20313334353433.roa (raw, json)
Hash identifier:          Txhj55bvp+hIGH3hFsyr9OHDHwnG7sTt02jalayiNrA=
Subject key identifier:   48:1E:E6:86:E2:04:8B:6B:D0:BE:AB:25:6F:E3:D3:34:D6:D7:4E:C2
Certificate issuer:       /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Certificate serial:       0A8034F2CB3F47184371093F1742155DD8A659C5
Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e39372e302f32342d3234203d3e20313334353433.roa
Signing time:             Wed 27 May 2026 07:39:04 +0000
ROA not before:           Wed 27 May 2026 07:34:04 +0000
ROA not after:            Wed 26 May 2027 07:39:04 +0000
asID:                     134543
IP address blocks:        211.99.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:14:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:80:34:f2:cb:3f:47:18:43:71:09:3f:17:42:15:5d:d8:a6:59:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
        Validity
            Not Before: May 27 07:34:04 2026 GMT
            Not After : May 26 07:39:04 2027 GMT
        Subject: CN=481EE686E2048B6BD0BEAB256FE3D334D6D74EC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0b:07:88:92:3b:43:b9:1e:ac:36:b8:8e:42:
                    5e:00:9b:69:74:3b:32:0f:64:aa:82:51:1b:69:d7:
                    7b:fd:6e:ca:b5:23:a9:36:7a:0f:c9:f1:4e:dd:e2:
                    98:a8:51:63:86:5a:38:fd:83:c5:4d:6e:2b:06:81:
                    7c:46:d7:84:4f:6f:30:eb:45:ed:76:78:d4:ff:3a:
                    92:7e:0d:0e:42:81:e6:88:a4:7e:ef:13:1e:9c:43:
                    cb:ef:f2:5f:a6:3a:e4:fa:f8:d3:c3:2c:69:41:34:
                    fc:f6:44:a4:0c:c7:b3:72:49:df:cd:96:35:08:86:
                    5a:a8:12:34:7d:18:75:1c:12:87:d3:84:e6:d0:ae:
                    6c:97:bc:05:da:ae:7a:38:6a:36:7f:03:e7:e1:7d:
                    a8:43:c7:26:84:bb:16:74:41:ab:47:62:f0:26:b4:
                    08:20:fc:6a:3a:1b:ae:76:34:f2:6f:ad:b3:76:c9:
                    8d:96:a6:86:f3:ff:6e:7a:22:c0:3e:48:74:33:09:
                    ac:01:6b:7b:cb:fe:a6:60:ae:98:6c:52:8e:bb:6f:
                    b5:f4:95:1b:9d:e3:a6:c2:d1:0e:22:10:b2:4b:47:
                    9b:b0:08:31:dd:4c:8b:ed:2a:69:6f:70:7a:d4:b6:
                    2b:86:87:ac:21:6b:9e:77:f7:b4:85:a2:31:0f:70:
                    cb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1E:E6:86:E2:04:8B:6B:D0:BE:AB:25:6F:E3:D3:34:D6:D7:4E:C2
            X509v3 Authority Key Identifier:
                keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e39372e302f32342d3234203d3e20313334353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.99.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:58:a0:8a:db:7b:c4:d0:6f:33:8b:2d:ef:35:1f:68:f6:bc:
         b2:b3:b2:90:71:af:7b:18:e4:f3:db:08:b8:c1:ed:d0:bc:62:
         76:79:18:0e:23:57:df:f8:0e:a5:ca:6d:17:2f:09:82:87:af:
         f0:07:d2:c9:59:b8:ac:cf:af:e6:3f:ba:e7:f5:94:cc:4b:f5:
         15:64:80:f0:23:43:ba:7e:cf:4b:ec:4c:81:87:a7:e1:95:e9:
         1d:15:d2:57:a0:16:3b:e8:37:9d:28:9f:42:3d:95:42:50:44:
         4f:06:1d:c0:af:70:6b:ec:7d:fc:7e:08:91:0a:1a:db:16:35:
         e3:df:72:cb:87:5d:5a:fb:53:20:b8:09:9c:78:b9:f3:56:e2:
         7d:68:e5:cc:65:52:ac:d5:ee:aa:19:8b:3a:02:bb:37:bf:f7:
         e3:9e:69:04:3c:ce:ca:b8:bf:af:8b:88:db:03:86:0d:68:71:
         70:8e:a0:4f:fd:15:6b:65:4c:53:fc:8c:7a:0b:85:d1:c5:25:
         85:be:6a:86:a1:2b:d3:ae:81:bc:b4:22:af:07:e5:cf:44:93:
         a2:63:e3:aa:29:23:a6:f8:3f:17:fc:b3:11:60:af:45:2b:c1:
         43:28:76:6b:cc:98:45:2a:aa:8d:84:c4:70:15:88:a4:70:b3:
         55:8b:b5:db
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUCoA08ss/RxhDcQk/F0IVXdimWcUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5
NUJFMDBBQTAeFw0yNjA1MjcwNzM0MDRaFw0yNzA1MjYwNzM5MDRaMDMxMTAvBgNV
BAMTKDQ4MUVFNjg2RTIwNDhCNkJEMEJFQUIyNTZGRTNEMzM0RDZENzRFQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDCweIkjtDuR6sNriOQl4Am2l0
OzIPZKqCURtp13v9bsq1I6k2eg/J8U7d4pioUWOGWjj9g8VNbisGgXxG14RPbzDr
Re12eNT/OpJ+DQ5CgeaIpH7vEx6cQ8vv8l+mOuT6+NPDLGlBNPz2RKQMx7NySd/N
ljUIhlqoEjR9GHUcEofThObQrmyXvAXarno4ajZ/A+fhfahDxyaEuxZ0QatHYvAm
tAgg/Go6G652NPJvrbN2yY2Wpobz/256IsA+SHQzCawBa3vL/qZgrphsUo67b7X0
lRud46bC0Q4iELJLR5uwCDHdTIvtKmlvcHrUtiuGh6wha55397SFojEPcMt1AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUSB7mhuIEi2vQvqslb+PTNNbXTsIwHwYDVR0j
BBgwFoAUU4FOLN+VzJdH2R47WgFHhpW+AKowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MTkwOTMzNDMxNDM4NTQyNy8wLzUzODE0RTJDREY5NUNDOTc0N0Q5MUUzQjVBMDE0
Nzg2OTVCRTAwQUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5NUJFMDBBQS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTExMTkwOTMzNDMxNDM4NTQyNy8wLzMyMzEzMTJlMzkz
OTJlMzkzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM1MzQzMy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEANNjYTANBgkqhkiG9w0BAQsFAAOCAQEApVigitt7xNBvM4st7zUfaPa8
srOykHGvexjk89sIuMHt0LxidnkYDiNX3/gOpcptFy8Jgoev8AfSyVm4rM+v5j+6
5/WUzEv1FWSA8CNDun7PS+xMgYen4ZXpHRXSV6AWO+g3nSifQj2VQlBETwYdwK9w
a+x9/H4IkQoa2xY1499yy4ddWvtTILgJnHi581bifWjlzGVSrNXuqhmLOgK7N7/3
455pBDzOyri/r4uI2wOGDWhxcI6gT/0Va2VMU/yMeguF0cUlhb5qhqEr066BvLQi
rwflz0STomPjqikjpvg/F/yzEWCvRSvBQyh2a8yYRSqqjYTEcBWIpHCzVYu12w==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:49 2026 by rpki-client