Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e39382e302f32342d3234203d3e20313334373633.roa
File:                     3231312e39392e39382e302f32342d3234203d3e20313334373633.roa (raw, json)
Hash identifier:          Pc3AAf+QH03NF0DwXaRGLDFQ19HizoN79538eIKwr/A=
Subject key identifier:   D8:A5:30:34:6B:AD:F2:88:F4:EF:FF:A8:8D:8B:62:5E:E6:1F:44:9D
Certificate issuer:       /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Certificate serial:       0B7EF7EC63109D9968A34130830CF4A743011912
Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e39382e302f32342d3234203d3e20313334373633.roa
Signing time:             Wed 03 Jun 2026 09:27:08 +0000
ROA not before:           Wed 03 Jun 2026 09:22:08 +0000
ROA not after:            Wed 02 Jun 2027 09:27:08 +0000
asID:                     134763
IP address blocks:        211.99.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 13:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:7e:f7:ec:63:10:9d:99:68:a3:41:30:83:0c:f4:a7:43:01:19:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
        Validity
            Not Before: Jun  3 09:22:08 2026 GMT
            Not After : Jun  2 09:27:08 2027 GMT
        Subject: CN=D8A530346BADF288F4EFFFA88D8B625EE61F449D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:80:81:46:56:0e:b6:6c:e6:46:bf:73:18:b1:
                    c2:5a:74:c9:bf:a8:32:99:9b:aa:03:e4:6a:28:40:
                    0c:22:e9:34:f7:38:03:21:2a:80:03:59:63:6d:18:
                    cd:b4:27:26:69:9f:85:68:c2:72:e2:3f:04:a5:a4:
                    12:2f:bf:fa:bc:4c:db:96:2b:8a:66:cc:d2:45:33:
                    5f:c2:8c:37:bf:f0:7b:6b:40:79:66:98:83:a3:c5:
                    db:13:32:cc:5d:93:17:9d:00:a1:00:dc:ed:e8:a9:
                    f8:d0:49:db:e0:70:a6:f4:15:39:99:16:b8:c0:4e:
                    d4:70:74:12:46:2f:08:83:f1:c5:72:cd:a9:97:77:
                    c5:6c:ec:02:ec:11:a7:91:eb:80:8b:15:7c:61:d3:
                    f8:7b:70:a6:af:0e:63:26:9e:07:ed:61:37:c9:91:
                    73:90:82:90:1b:de:33:cc:ea:3e:db:26:60:aa:ab:
                    ab:96:f5:e4:af:07:21:c7:75:2d:4e:40:6a:c0:02:
                    32:1c:74:73:a2:ba:a6:a3:90:19:67:0e:1c:18:43:
                    9b:27:6c:84:59:05:0d:36:03:91:8d:86:d3:e9:91:
                    72:a7:9a:5c:75:cc:48:0a:8e:7c:6a:db:32:f7:c6:
                    d4:58:31:6a:2b:33:a8:f8:bb:b9:c7:1d:05:81:eb:
                    f3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A5:30:34:6B:AD:F2:88:F4:EF:FF:A8:8D:8B:62:5E:E6:1F:44:9D
            X509v3 Authority Key Identifier:
                keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e39382e302f32342d3234203d3e20313334373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.99.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:a0:59:f1:51:1e:d5:1a:6b:b1:a5:aa:04:26:ee:ce:07:05:
         29:df:11:0f:38:08:5a:12:e2:e0:bf:bd:9d:e0:d0:cd:84:eb:
         7d:0c:fd:f9:95:84:29:53:b7:e1:2c:e7:db:f4:4f:61:56:dc:
         a0:8c:ec:36:9c:6a:e5:93:0f:ef:e0:b0:81:39:3b:3f:15:7f:
         58:56:4c:17:2b:d9:8b:06:fe:b8:f1:a7:61:c2:92:e8:45:c5:
         3a:c6:35:81:a8:03:49:1b:c8:62:84:9c:82:9b:6c:85:d5:46:
         fd:af:44:ed:03:79:32:40:ea:39:1b:02:6e:d9:b6:86:09:af:
         fa:49:2d:ac:a2:be:5c:24:be:2a:74:9e:98:4f:1f:03:4e:36:
         5e:89:48:61:68:63:67:af:26:3b:ca:2e:3e:0d:e1:1e:06:e2:
         47:48:81:fe:32:06:7d:94:d2:cd:48:cb:18:ea:83:d4:36:1d:
         08:2b:97:ed:9f:cd:ce:2d:02:2f:11:5c:e2:c8:46:fa:c1:f7:
         22:6b:88:2d:2b:c4:89:42:35:7b:ba:ec:63:9b:8c:68:cf:d2:
         6f:c0:f0:ca:cc:dd:1f:15:f0:9a:40:eb:36:6d:27:7c:4e:f2:
         52:61:45:83:d9:d8:2b:5c:8c:e7:36:7e:f8:eb:f9:7e:81:80:
         6d:9c:e7:9c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:16 2026 by rpki-client