Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e302e302f31392d3139203d3e2039383131.roa
File:                     3231382e3234362e302e302f31392d3139203d3e2039383131.roa (raw, json)
Hash identifier:          dU7H9uNQaeRiIoLIQC4NPsVdZpQcqFmDGwDxbgi37l8=
Subject key identifier:   16:44:71:E4:4D:FE:D5:99:6B:89:69:35:0E:72:06:62:71:19:31:16
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       1A2151F1542B309BDC0F4676374956DE476750CD
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e302e302f31392d3139203d3e2039383131.roa
Signing time:             Mon 22 Jun 2026 02:10:48 +0000
ROA not before:           Mon 22 Jun 2026 02:05:48 +0000
ROA not after:            Mon 21 Jun 2027 02:10:48 +0000
asID:                     9811
IP address blocks:        218.246.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 16:32:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:21:51:f1:54:2b:30:9b:dc:0f:46:76:37:49:56:de:47:67:50:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Jun 22 02:05:48 2026 GMT
            Not After : Jun 21 02:10:48 2027 GMT
        Subject: CN=164471E44DFED5996B8969350E72066271193116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5d:11:9e:f1:eb:47:63:85:1b:94:d3:80:ae:
                    34:93:d8:82:dd:47:72:9e:c0:30:0e:b0:db:4d:a3:
                    7a:8d:28:b4:bd:e9:36:43:f6:2d:25:7e:d2:de:4e:
                    f1:6c:da:21:6d:23:3e:96:c3:41:7f:6c:be:a1:b6:
                    0f:c4:76:92:ba:9c:8a:42:ce:bc:6e:60:76:53:be:
                    1c:e4:cf:b7:bb:20:12:a8:83:41:e7:e0:11:48:96:
                    4d:0d:f3:71:53:57:c8:6e:5f:c9:69:4c:59:fb:3c:
                    85:e2:68:30:a8:0b:6a:6b:be:e7:ca:ea:5c:06:31:
                    96:a1:34:e0:69:74:58:d7:8e:ee:c2:1c:7b:8e:e6:
                    70:7f:7e:91:8c:42:f9:ba:28:3b:09:b8:de:44:cb:
                    b5:99:2a:79:e6:fb:32:ba:eb:09:48:73:dc:73:97:
                    19:2b:4e:b1:22:01:df:d7:d3:1c:6c:d3:e4:27:7f:
                    34:a1:40:73:b3:25:b3:34:c7:0c:fb:ee:a7:37:b3:
                    3c:1c:59:f3:23:ab:65:6b:72:9b:f5:e1:06:93:be:
                    15:53:e5:56:67:ef:09:cd:14:2f:c8:e4:0b:0d:73:
                    e5:ff:59:21:4d:62:be:03:95:eb:d3:5f:ce:5d:31:
                    6e:c9:82:11:98:67:bd:5c:8c:6c:80:6c:56:76:f4:
                    2f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:44:71:E4:4D:FE:D5:99:6B:89:69:35:0E:72:06:62:71:19:31:16
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e302e302f31392d3139203d3e2039383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.246.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d5:d3:15:d4:45:3a:4d:26:2e:99:9d:d8:41:60:2c:c6:6f:6b:
         3b:7a:22:9f:4b:92:51:a5:83:67:53:f6:ed:b8:bd:ad:68:19:
         dc:a9:f0:a0:8b:57:28:b1:3a:b2:6c:1b:2e:ff:44:74:b9:73:
         0e:c4:df:3a:9e:e4:be:a1:b6:9f:bf:47:ac:7d:a6:4d:62:d9:
         8c:ba:ce:f3:f9:c5:a6:69:35:d7:a0:a0:c3:64:d6:6b:71:1b:
         69:11:fe:e2:d0:ed:ab:1c:92:4b:08:e0:76:ac:c4:e2:11:2d:
         49:94:39:48:2b:fd:dc:df:84:d3:7a:87:a1:b0:95:f6:75:6c:
         2d:86:ad:93:02:4b:41:8e:c3:b0:db:bd:5e:0a:5f:b5:1c:8c:
         d3:6e:34:14:7e:6f:7b:19:1f:e2:17:ee:40:ff:bd:d7:16:35:
         0d:8d:1c:8d:d0:d5:97:8a:7f:50:cd:e9:74:1c:f5:84:6a:75:
         b1:41:b3:4f:a8:e1:ce:a7:c7:64:96:76:c2:2e:e2:8e:b1:ea:
         82:4b:d9:e6:90:37:31:0b:22:72:e6:43:7b:dd:37:ab:a4:e1:
         cd:70:70:ad:57:0e:f7:34:f1:41:91:c0:a2:ea:2a:1b:18:43:
         5c:1e:11:f4:b6:0e:0e:a9:e1:39:ad:50:66:7c:9b:89:f8:72:
         52:8b:3b:3b
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUGiFR8VQrMJvcD0Z2N0lW3kdnUM0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDhEQ0MxMEE3RTkyNDQ0RTgwNjU1OTk5RTdDMzNDODc2
Q0YxQzVBODAeFw0yNjA2MjIwMjA1NDhaFw0yNzA2MjEwMjEwNDhaMDMxMTAvBgNV
BAMTKDE2NDQ3MUU0NERGRUQ1OTk2Qjg5NjkzNTBFNzIwNjYyNzExOTMxMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvXRGe8etHY4UblNOArjST2ILd
R3KewDAOsNtNo3qNKLS96TZD9i0lftLeTvFs2iFtIz6Ww0F/bL6htg/EdpK6nIpC
zrxuYHZTvhzkz7e7IBKog0Hn4BFIlk0N83FTV8huX8lpTFn7PIXiaDCoC2prvufK
6lwGMZahNOBpdFjXju7CHHuO5nB/fpGMQvm6KDsJuN5Ey7WZKnnm+zK66wlIc9xz
lxkrTrEiAd/X0xxs0+QnfzShQHOzJbM0xwz77qc3szwcWfMjq2Vrcpv14QaTvhVT
5VZn7wnNFC/I5AsNc+X/WSFNYr4DlevTX85dMW7JghGYZ71cjGyAbFZ29C+LAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUFkRx5E3+1ZlriWk1DnIGYnEZMRYwHwYDVR0j
BBgwFoAUSNzBCn6SRE6AZVmZ58M8h2zxxagwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjY2OTkwNDI4NjI1MzA3NS8wLzQ4RENDMTBBN0U5MjQ0NEU4MDY1NTk5OUU3QzMz
Qzg3NkNGMUM1QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNDhEQ0MxMEE3RTkyNDQ0RTgwNjU1OTk5RTdDMzNDODc2Q0YxQzVBOC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTEyNjY5OTA0Mjg2MjUzMDc1LzAvMzIzMTM4MmUzMjM0
MzYyZTMwMmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzkzODMxMzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAXa9gAwDQYJKoZIhvcNAQELBQADggEBANXTFdRFOk0mLpmd2EFgLMZvazt6Ip9L
klGlg2dT9u24va1oGdyp8KCLVyixOrJsGy7/RHS5cw7E3zqe5L6htp+/R6x9pk1i
2Yy6zvP5xaZpNdegoMNk1mtxG2kR/uLQ7asckksI4HasxOIRLUmUOUgr/dzfhNN6
h6GwlfZ1bC2GrZMCS0GOw7DbvV4KX7UcjNNuNBR+b3sZH+IX7kD/vdcWNQ2NHI3Q
1ZeKf1DN6XQc9YRqdbFBs0+o4c6nx2SWdsIu4o6x6oJL2eaQNzELInLmQ3vdN6uk
4c1wcK1XDvc08UGRwKLqKhsYQ1weEfS2Dg6p4TmtUGZ8m4n4clKLOzs=
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:17 2026 by rpki-client