Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e39392e302f32342d3234203d3e20313334353433.roa
File:                     3231312e39392e39392e302f32342d3234203d3e20313334353433.roa (raw, json)
Hash identifier:          uIOjhlOQfgYg2S8c2ujA+r40985b5SnTcIxwybdUlQw=
Subject key identifier:   2E:9D:70:7F:D3:AB:5A:49:E3:9D:F5:CB:21:EA:2E:58:04:68:A8:9F
Certificate issuer:       /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Certificate serial:       7BF7B620ACAD2D9A349A85D05E791C1893C1A07F
Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e39392e302f32342d3234203d3e20313334353433.roa
Signing time:             Wed 27 May 2026 07:39:04 +0000
ROA not before:           Wed 27 May 2026 07:34:04 +0000
ROA not after:            Wed 26 May 2027 07:39:04 +0000
asID:                     134543
IP address blocks:        211.99.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:14:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f7:b6:20:ac:ad:2d:9a:34:9a:85:d0:5e:79:1c:18:93:c1:a0:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
        Validity
            Not Before: May 27 07:34:04 2026 GMT
            Not After : May 26 07:39:04 2027 GMT
        Subject: CN=2E9D707FD3AB5A49E39DF5CB21EA2E580468A89F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e2:cc:6a:f0:d5:d3:b3:6d:24:59:83:f5:98:
                    36:8d:dc:50:2c:81:1b:d1:c8:f7:a0:f8:b8:3e:7e:
                    44:4e:c3:61:d7:94:ac:0b:bb:30:2c:56:87:99:29:
                    45:b7:2d:a4:ce:53:16:eb:2c:60:7b:af:e2:48:b6:
                    33:d5:1f:c3:67:ec:38:78:c6:81:29:04:8f:59:aa:
                    a8:1e:57:9a:4d:e9:4a:4b:a0:ec:bd:d5:23:38:4a:
                    05:60:1c:d2:65:04:df:b7:8b:96:9a:d5:de:35:23:
                    7f:ae:48:73:d8:72:fa:bf:63:7f:9a:9c:65:06:6d:
                    f0:8d:e2:12:ad:3c:b1:5c:fb:e4:da:de:bd:0c:02:
                    99:fd:e9:23:a1:3a:da:f0:5c:c0:4a:79:46:8d:2c:
                    48:af:b3:58:8e:6c:8a:f0:78:b8:1c:f3:6c:a1:fe:
                    1e:bf:d6:96:75:1d:2c:c5:11:26:9e:c5:56:ba:8c:
                    5c:c4:eb:e4:cf:12:fd:04:95:e0:2e:e5:68:40:cd:
                    54:64:e6:23:97:0d:68:80:ae:4d:7d:b3:1b:21:ea:
                    fe:44:e9:18:56:f6:73:83:d9:92:df:5a:c2:88:4e:
                    f3:7f:9d:59:7f:3f:15:85:0a:6f:36:18:aa:80:66:
                    a8:3c:96:98:59:41:ec:e8:24:eb:1e:22:10:0b:a9:
                    66:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9D:70:7F:D3:AB:5A:49:E3:9D:F5:CB:21:EA:2E:58:04:68:A8:9F
            X509v3 Authority Key Identifier:
                keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e39392e302f32342d3234203d3e20313334353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.99.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:98:29:78:3e:c0:7a:38:3c:52:0c:3b:21:69:4d:47:36:82:
         32:e2:87:b7:1a:2b:b7:d6:40:eb:e4:fa:37:c8:5a:39:bc:66:
         77:1b:f7:ea:04:9e:66:15:89:1f:b7:a5:ba:ea:2e:c3:f5:1c:
         08:96:61:0d:5d:52:72:72:6c:96:37:20:a0:51:f7:32:5e:37:
         42:79:c9:99:ca:c1:d7:19:0e:bf:63:39:45:78:1c:37:e0:7f:
         92:7b:e2:9e:d9:d2:f2:fb:7e:2d:90:d4:fd:ed:7b:a4:69:34:
         d1:fb:21:47:bf:fc:0e:6a:e9:2d:f9:7a:22:72:44:27:dd:ff:
         03:fb:08:cb:29:64:c4:46:f8:1c:61:0e:3e:f9:ec:6d:89:20:
         de:73:2f:fc:64:d5:78:ef:17:4f:fa:73:4b:47:30:ad:03:85:
         0c:72:ee:d5:dd:c1:b8:e2:34:7f:c7:b0:53:eb:f0:29:10:b2:
         f7:9d:d9:63:81:0b:09:2b:a9:86:aa:48:3c:e4:ad:6a:73:98:
         af:b7:39:12:08:d0:92:6a:6a:29:7a:dc:b5:f3:b8:52:b6:e1:
         73:93:19:fc:cf:c0:40:78:da:91:89:f9:15:4d:a1:06:86:a0:
         61:3f:9b:3c:32:fc:b4:32:5f:61:80:60:c4:94:76:51:2b:d0:
         d1:88:fb:4a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:28 2026 by rpki-client