Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e39392e302f32342d3234203d3e20313334373633.roa
File:                     3231312e39392e39392e302f32342d3234203d3e20313334373633.roa (raw, json)
Hash identifier:          YyEe1fPuFNGlplRggHQqo/RL5UAVshPU+kg4w3PsmHE=
Subject key identifier:   81:25:D7:5F:C9:32:DF:60:49:32:16:CA:87:DC:54:F9:17:28:86:A4
Certificate issuer:       /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Certificate serial:       34AC593555E25A5DE9B2007BE9B05AB144BB31B9
Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e39392e302f32342d3234203d3e20313334373633.roa
Signing time:             Wed 03 Jun 2026 09:27:08 +0000
ROA not before:           Wed 03 Jun 2026 09:22:08 +0000
ROA not after:            Wed 02 Jun 2027 09:27:08 +0000
asID:                     134763
IP address blocks:        211.99.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 13:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ac:59:35:55:e2:5a:5d:e9:b2:00:7b:e9:b0:5a:b1:44:bb:31:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
        Validity
            Not Before: Jun  3 09:22:08 2026 GMT
            Not After : Jun  2 09:27:08 2027 GMT
        Subject: CN=8125D75FC932DF60493216CA87DC54F9172886A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:55:bc:bf:91:51:ed:61:83:54:dd:06:01:d3:
                    63:f1:50:77:16:fc:30:c5:c6:6f:4e:b2:cd:56:f3:
                    c6:3f:75:7d:b3:0b:b6:33:66:bc:3d:71:69:ce:64:
                    fa:c4:2c:77:15:61:0e:2b:1e:b6:9c:c2:4d:92:1a:
                    8e:91:70:a5:06:8a:52:15:b9:5e:5d:2a:38:7f:09:
                    82:ca:c0:f3:58:1f:6f:32:a3:2a:72:6b:2e:c0:36:
                    59:f4:a1:8f:41:f9:91:ea:36:b9:13:c8:93:e3:dd:
                    08:88:a3:31:09:1f:6a:17:a1:2d:be:42:7e:5b:64:
                    81:f6:84:d9:01:af:fd:ce:ec:88:1a:97:82:a1:85:
                    12:06:a4:5c:57:d8:3c:ea:c3:ad:1b:3c:f2:6c:f5:
                    f4:fc:cc:c8:2d:d2:cf:4a:5f:93:4e:31:23:00:8b:
                    c6:b8:0d:86:18:f4:c7:c1:d3:94:f6:4d:5e:96:50:
                    6f:e9:d6:ae:e7:f8:ad:4d:0d:44:bc:f9:3a:18:14:
                    a7:14:55:6b:1f:aa:ea:32:62:a4:78:b7:cf:de:ab:
                    42:a0:37:14:8f:d2:9d:50:68:96:2a:16:84:60:1c:
                    1f:44:e3:6f:b7:06:7a:30:97:96:4f:7c:0f:76:3e:
                    3f:e1:05:19:ba:60:02:78:e1:94:ea:8a:b8:57:8d:
                    f9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:25:D7:5F:C9:32:DF:60:49:32:16:CA:87:DC:54:F9:17:28:86:A4
            X509v3 Authority Key Identifier:
                keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e39392e302f32342d3234203d3e20313334373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.99.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:56:4c:f7:0d:97:ad:b5:de:15:9e:31:4c:86:fa:32:04:10:
         d9:5f:7c:7b:8f:7f:40:b5:ed:4c:de:83:96:3f:bf:7b:c9:bd:
         f8:f4:42:67:bf:60:fd:f7:3e:c0:1a:b7:98:d4:00:e9:be:61:
         b9:56:25:0b:c5:f2:94:dc:52:6b:df:eb:49:c0:32:97:e9:d7:
         32:2e:c8:f4:48:d3:95:3b:e7:11:ef:9e:ba:a0:98:ea:a5:7e:
         80:c0:27:20:06:20:1a:87:e8:54:4d:f7:70:03:1d:53:f3:b2:
         67:20:2d:d9:e4:7e:71:18:02:fe:34:6a:7d:35:4d:16:58:2c:
         53:b4:d5:b9:a2:a2:f5:7e:15:31:fa:37:7d:3d:8f:80:8a:da:
         5b:80:f4:c1:37:7f:2f:27:0f:38:25:3f:56:d2:30:4c:8a:18:
         96:10:34:90:f1:c5:69:68:7d:06:54:4d:75:a2:a7:ef:07:90:
         c4:c8:29:86:ad:7f:2a:5a:48:53:92:c3:bd:d5:44:7d:76:68:
         b4:0b:a6:21:83:b8:b8:d2:1e:c5:20:58:70:e1:df:01:4b:a1:
         09:fd:be:dc:31:d9:c4:3d:fc:a7:0b:93:d7:b9:cd:40:1b:52:
         58:d9:44:9e:25:4f:00:08:fe:a8:cc:77:ec:5b:44:e7:aa:a3:
         95:17:10:39
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:14 2026 by rpki-client