Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e39372e302f32342d3234203d3e20313334373633.roa
File:                     3231312e39392e39372e302f32342d3234203d3e20313334373633.roa (raw, json)
Hash identifier:          TTA/+soDpNNCc0jmTna/323IAOrKrjtYxQVV9ca4VFA=
Subject key identifier:   C1:8A:64:EB:EF:D5:4B:D3:4C:CF:99:12:36:F5:A7:36:C3:B6:48:A2
Certificate issuer:       /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Certificate serial:       2AF10886A1241A8B974AF97CBBC92EB07003F678
Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e39372e302f32342d3234203d3e20313334373633.roa
Signing time:             Wed 03 Jun 2026 09:27:08 +0000
ROA not before:           Wed 03 Jun 2026 09:22:08 +0000
ROA not after:            Wed 02 Jun 2027 09:27:08 +0000
asID:                     134763
IP address blocks:        211.99.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 13:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f1:08:86:a1:24:1a:8b:97:4a:f9:7c:bb:c9:2e:b0:70:03:f6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
        Validity
            Not Before: Jun  3 09:22:08 2026 GMT
            Not After : Jun  2 09:27:08 2027 GMT
        Subject: CN=C18A64EBEFD54BD34CCF991236F5A736C3B648A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e4:83:15:89:d5:d9:71:af:80:14:1e:b9:22:
                    d6:f2:45:0c:5e:c1:8a:d0:3a:af:21:58:2f:45:ab:
                    a6:a8:28:15:cc:f9:3c:87:c2:b6:02:3f:f1:38:8b:
                    ae:b5:1a:b7:01:fa:2e:d1:39:26:4e:d6:3c:dd:5d:
                    8a:9f:2f:9b:61:a1:0f:c5:ad:b0:4c:15:68:e1:6c:
                    e3:ef:5e:fa:ac:33:a0:19:57:65:b8:96:4e:ae:a1:
                    58:b1:d3:fd:67:28:59:a5:e9:8a:a5:eb:aa:65:70:
                    5f:e8:90:22:e5:a8:6a:81:d8:66:50:be:4a:51:56:
                    83:78:7d:3e:91:df:cd:e8:a1:08:e3:8c:73:89:c7:
                    ad:1c:21:25:6b:07:aa:1d:f2:6d:72:2b:5c:4e:91:
                    a6:1a:c6:40:8b:2b:4b:33:20:e1:94:13:76:c5:d5:
                    3d:73:0b:44:29:f2:81:f4:ab:c9:1a:fa:b2:77:6d:
                    07:4e:cc:2b:ce:ce:ad:76:3b:c5:d4:2e:d3:3d:72:
                    e5:2f:8a:85:27:27:c7:51:9d:b4:70:b1:c2:c1:00:
                    70:96:af:d8:14:35:2f:eb:d3:58:3f:d4:27:74:56:
                    f4:20:2c:f5:e1:1c:47:83:5a:9e:5b:d7:b7:b4:f8:
                    05:6c:25:04:a6:1e:eb:50:91:a3:33:f2:59:cc:b8:
                    9c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8A:64:EB:EF:D5:4B:D3:4C:CF:99:12:36:F5:A7:36:C3:B6:48:A2
            X509v3 Authority Key Identifier:
                keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e39372e302f32342d3234203d3e20313334373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.99.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:87:42:73:4c:4c:4b:f6:e8:ec:5e:bd:74:33:16:c3:08:2d:
         6d:39:fc:43:cb:4e:c3:96:ae:1b:a1:fd:ee:3c:e6:70:34:f6:
         fe:41:6e:b7:da:95:4b:8d:b5:f8:a0:6d:82:9a:a0:2a:35:94:
         07:73:7e:a8:f2:03:34:56:36:7f:8e:6d:74:e3:58:ab:36:a6:
         26:c3:a4:91:49:6d:68:20:28:59:c5:23:f0:0d:b6:ec:fb:0f:
         24:08:22:03:e0:12:61:6c:8d:75:89:c6:19:80:db:07:3a:aa:
         b6:a6:88:bf:41:92:60:c4:09:49:a7:30:de:c2:50:4f:2a:fe:
         e7:1b:f1:d3:0e:ff:9b:1e:0b:33:b2:ac:9c:f2:af:94:3a:94:
         be:98:51:07:70:f6:ff:86:61:12:9b:f0:5a:e8:19:c5:87:dc:
         d0:dc:27:6d:d3:fc:f7:9c:7d:60:a9:41:59:28:f7:96:3e:b7:
         97:68:c1:f1:e5:c8:b5:2f:15:65:9d:1a:02:93:49:69:47:08:
         3d:55:24:98:03:d5:5d:8f:45:9e:32:e1:8e:3a:e1:ca:53:29:
         55:10:4b:d2:be:db:33:d9:22:90:5f:a6:22:7e:d8:9c:a2:de:
         2d:92:52:81:65:0b:06:4d:c7:2d:91:20:8f:86:4b:b2:f5:d7:
         c0:6d:31:d6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:50 2026 by rpki-client