Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3232302e3130312e3139322e302f31382d3138203d3e2039383131.roa
File:                     3232302e3130312e3139322e302f31382d3138203d3e2039383131.roa (raw, json)
Hash identifier:          pMBI9nhF22TYCuZ7x4zaXmcnpW/2H0ziI7+urmojo34=
Subject key identifier:   08:5B:30:7B:63:F0:CE:DD:AC:71:DC:A1:89:AC:77:B9:A6:83:1D:A7
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       1E978C6211B8FEF5D3E37100755B40EA5A84B965
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3232302e3130312e3139322e302f31382d3138203d3e2039383131.roa
Signing time:             Fri 29 May 2026 09:15:32 +0000
ROA not before:           Fri 29 May 2026 09:10:32 +0000
ROA not after:            Fri 28 May 2027 09:15:32 +0000
asID:                     9811
IP address blocks:        220.101.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:97:8c:62:11:b8:fe:f5:d3:e3:71:00:75:5b:40:ea:5a:84:b9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: May 29 09:10:32 2026 GMT
            Not After : May 28 09:15:32 2027 GMT
        Subject: CN=085B307B63F0CEDDAC71DCA189AC77B9A6831DA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ad:fd:f8:02:76:53:35:a6:98:42:be:70:8e:
                    b6:cd:57:ad:0d:a4:bb:2b:e0:b9:33:cd:1d:54:8c:
                    a5:46:82:18:21:87:22:ce:8d:00:3d:03:ad:b9:dd:
                    76:6f:e7:f5:2c:58:33:46:56:29:43:88:2c:3e:ca:
                    c4:c0:c6:2b:1e:d3:0d:56:a4:4b:ec:51:8a:22:86:
                    37:07:95:91:8c:84:b3:26:f8:81:59:de:b8:64:4f:
                    3e:fb:f1:c4:9a:6f:29:f1:a1:b1:ec:cf:57:b4:f4:
                    05:a7:14:f7:06:6e:bb:43:e7:bf:57:fb:cf:08:00:
                    88:c7:aa:2a:e2:88:c6:04:32:fa:68:61:ce:36:6c:
                    5a:ae:22:4d:33:8c:4d:e0:55:eb:ae:67:4d:a0:43:
                    85:c4:c2:b8:4c:8f:f1:b5:33:1f:ac:55:a8:99:da:
                    04:ea:52:6e:d3:c2:3d:de:0b:05:2a:5e:af:c4:b9:
                    57:f9:81:3a:f1:de:d2:28:44:40:f9:08:43:01:b7:
                    a5:08:cd:28:ec:ea:c4:94:6a:59:1a:20:79:65:e5:
                    52:d8:0a:85:4d:af:46:c8:6f:f4:b4:23:38:b0:a0:
                    eb:b5:51:33:31:53:43:e8:34:b0:6d:a9:56:6e:11:
                    88:23:4b:ca:36:1a:63:18:07:fe:cb:ae:3f:ab:ce:
                    f8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5B:30:7B:63:F0:CE:DD:AC:71:DC:A1:89:AC:77:B9:A6:83:1D:A7
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3232302e3130312e3139322e302f31382d3138203d3e2039383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.101.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4e:b0:22:69:92:7e:37:e5:83:aa:9b:23:1d:94:ae:6a:54:1b:
         f4:f2:c0:2c:bd:cc:a4:2f:05:6d:e2:3b:c6:0f:f7:e8:e7:d4:
         79:47:ce:fa:7a:b5:1c:0e:19:ec:e5:e1:66:97:55:3d:fa:55:
         57:b7:f3:e9:89:a3:6d:55:83:48:c6:e7:af:02:b7:8f:ba:ae:
         4b:42:f8:bc:7c:4d:1e:ed:15:63:56:30:bf:99:00:b5:25:7b:
         c4:a6:61:8b:5b:0b:f5:61:0b:14:61:c4:2d:39:0e:64:f1:fb:
         72:56:f3:75:bb:78:d6:68:3e:e0:6d:74:b9:c2:36:23:99:1d:
         ba:c8:82:56:0a:02:65:b1:85:d6:cd:66:d4:e2:6a:40:1f:cd:
         5b:bb:5e:01:86:3f:04:53:2c:83:8c:cc:ab:c1:23:7c:e8:ea:
         73:50:0d:72:3c:02:1f:22:1a:5d:af:64:a1:47:83:ec:65:cc:
         e5:61:18:f8:79:b6:57:48:36:86:c3:fe:01:e6:84:2a:73:9d:
         c6:58:b1:c7:25:26:43:c4:2c:a8:f5:22:72:ac:99:73:b1:09:
         cb:90:1b:39:e2:f2:7f:de:ae:a3:a3:fd:30:ef:95:a2:ad:67:
         95:6d:e0:e6:50:54:0a:68:4c:65:1d:c3:fd:a5:07:a1:8e:53:
         18:68:7d:24
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:46 2026 by rpki-client