Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114846589689528347/0/3231382e3234302e3136302e302f32322d3232203d3e2034383038.roa
File:                     3231382e3234302e3136302e302f32322d3232203d3e2034383038.roa (raw, json)
Hash identifier:          jJXMVgde2pxbfq2NcR3+ZwHj4k6TJr3LdkEaBURBLXc=
Subject key identifier:   F8:BE:57:6C:E6:80:67:69:50:1E:A6:0B:5A:83:AD:C4:11:37:24:3F
Certificate issuer:       /CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A
Certificate serial:       1FF220C2F21A5449C9D8607BBCD9F71FB110E90F
Authority key identifier: FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/3231382e3234302e3136302e302f32322d3232203d3e2034383038.roa
Signing time:             Thu 04 Jun 2026 09:38:24 +0000
ROA not before:           Thu 04 Jun 2026 09:33:24 +0000
ROA not after:            Thu 03 Jun 2027 09:38:24 +0000
asID:                     4808
IP address blocks:        218.240.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 09:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f2:20:c2:f2:1a:54:49:c9:d8:60:7b:bc:d9:f7:1f:b1:10:e9:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A
        Validity
            Not Before: Jun  4 09:33:24 2026 GMT
            Not After : Jun  3 09:38:24 2027 GMT
        Subject: CN=F8BE576CE6806769501EA60B5A83ADC41137243F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c4:11:b4:80:e7:c2:0d:a2:7a:78:88:76:5a:
                    64:31:e5:8e:60:6b:dd:d6:bc:90:2b:9b:74:b9:d5:
                    54:6b:25:d9:11:f3:c9:b9:bc:d8:6b:31:0e:17:02:
                    0b:01:ea:1c:1f:d3:c5:e3:20:8e:e2:5b:53:b0:c3:
                    7c:48:bd:d7:2f:45:63:13:09:4f:c5:86:31:2c:e1:
                    21:19:b5:c4:dd:e3:83:7a:e7:85:05:89:ee:3d:1e:
                    b9:b7:ee:b8:96:76:18:0d:3b:37:bb:2d:e4:03:53:
                    7a:fa:35:ef:73:4b:76:e7:e1:db:78:31:b4:c3:d9:
                    11:3c:5e:af:0d:0c:da:ae:01:c3:50:18:26:b1:d6:
                    58:8a:ac:a9:c3:d6:1e:c9:f0:83:b1:77:28:f5:46:
                    6d:86:25:1a:54:15:bf:12:a4:b9:68:65:66:89:04:
                    4c:7d:d2:4e:aa:d6:ef:29:27:6a:76:62:50:7b:42:
                    4e:41:2f:6f:d3:17:fa:4f:d1:9f:ec:e9:ba:af:4e:
                    3a:18:71:b8:d1:a3:49:83:96:3b:9a:55:3c:a4:ce:
                    69:f0:2c:8d:73:c4:49:a5:e9:ee:30:5d:cf:9c:f5:
                    d1:13:35:da:3a:f4:fb:ba:1e:46:4c:8c:fb:41:df:
                    3c:2a:8c:9d:fe:46:ef:84:38:f8:a5:ad:51:a4:88:
                    62:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BE:57:6C:E6:80:67:69:50:1E:A6:0B:5A:83:AD:C4:11:37:24:3F
            X509v3 Authority Key Identifier:
                keyid:FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/3231382e3234302e3136302e302f32322d3232203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.240.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:36:a4:35:9c:26:6f:c8:97:aa:8d:69:89:c0:ca:79:6f:08:
         50:e6:91:de:ea:83:ae:6a:f3:fd:f6:73:bd:77:ba:88:f2:2c:
         b7:78:f3:11:38:b4:79:fb:c9:9e:5c:87:87:e9:47:8d:9a:b4:
         c6:2f:a3:0c:c0:d6:69:5b:df:90:5f:16:01:4f:6f:1f:28:49:
         fe:31:1e:21:7f:6b:7e:bd:8a:a0:00:29:10:c0:a4:1e:b4:6d:
         13:31:38:df:2f:6a:a2:ba:5f:b7:99:47:bd:a8:9a:62:b7:db:
         08:64:0e:26:91:7f:6e:9d:1d:4f:d2:d1:0a:17:e3:1f:25:0f:
         d2:18:4d:07:30:5d:21:21:e1:58:d8:d0:23:24:ba:64:58:65:
         ef:d7:dc:56:f8:11:59:b2:0e:ad:0f:3a:27:05:85:34:92:44:
         75:73:0b:3d:b4:ba:82:35:40:22:89:a9:46:ea:9e:40:9f:b6:
         a1:df:20:b4:c5:8b:6f:24:c1:e0:6f:53:ce:0e:44:f3:39:39:
         29:7f:f1:2b:b3:e9:34:a2:96:01:5a:86:7d:cb:5c:93:3c:d5:
         5d:40:69:6e:83:00:dd:0f:f2:69:fa:b5:b1:96:dc:84:1f:34:
         58:ef:c3:8a:f3:45:21:cb:c4:95:f9:3f:51:15:02:e9:c8:91:
         56:b1:f5:20
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:05 2026 by rpki-client