Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114846589689528347/0/3231382e3234302e3138302e302f32342d3234203d3e203435303538.roa
File:                     3231382e3234302e3138302e302f32342d3234203d3e203435303538.roa (raw, json)
Hash identifier:          ZZ0ylrxDB0RtarHxxpZzISxuiZqcj7poY8afyFg+hwM=
Subject key identifier:   81:F1:2B:22:03:8D:27:DD:16:AD:BF:6C:B0:34:02:B0:4D:69:29:B1
Certificate issuer:       /CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A
Certificate serial:       3B69B84021724577AD9DE7FC1F828FD7CAAED6C5
Authority key identifier: FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/3231382e3234302e3138302e302f32342d3234203d3e203435303538.roa
Signing time:             Thu 04 Jun 2026 09:38:24 +0000
ROA not before:           Thu 04 Jun 2026 09:33:24 +0000
ROA not after:            Thu 03 Jun 2027 09:38:24 +0000
asID:                     45058
IP address blocks:        218.240.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 03:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:69:b8:40:21:72:45:77:ad:9d:e7:fc:1f:82:8f:d7:ca:ae:d6:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A
        Validity
            Not Before: Jun  4 09:33:24 2026 GMT
            Not After : Jun  3 09:38:24 2027 GMT
        Subject: CN=81F12B22038D27DD16ADBF6CB03402B04D6929B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fa:06:85:1f:ca:a6:76:84:48:22:79:9a:9b:
                    a3:c0:25:e5:4f:ac:5f:15:db:23:6d:85:68:0f:f0:
                    a7:cf:b0:bd:da:8f:e7:53:d1:68:44:b4:c1:70:28:
                    e4:33:9a:e2:65:1b:04:81:7e:53:56:9c:4e:1c:70:
                    66:08:79:f2:d9:51:ea:84:40:a0:68:14:4c:6a:82:
                    63:65:ff:f8:e0:28:9d:a4:2b:69:ea:7e:1f:47:36:
                    d5:ad:69:28:ce:d6:6d:5e:e6:dd:e8:9c:75:42:db:
                    13:e0:bd:38:1a:dc:b8:82:5d:ac:b7:5e:57:8d:e7:
                    ce:0a:59:e6:c2:f1:36:3e:bb:81:ce:d2:2b:7d:b2:
                    24:0c:10:32:a1:11:7c:dd:c7:df:c7:a8:08:f5:36:
                    5f:3d:b6:3c:ab:b5:ee:bb:5c:1b:9f:98:ea:d7:1f:
                    a1:18:5e:a2:10:41:64:82:4b:75:0a:26:52:95:58:
                    df:6b:06:5d:15:de:a8:e3:1e:db:6d:1b:10:0f:16:
                    2a:96:68:cd:36:c4:00:07:5b:87:44:37:33:63:f7:
                    6d:f1:87:11:b1:18:d0:15:5f:2d:5d:bb:fa:db:bd:
                    5b:c6:aa:84:e6:80:f7:58:5e:05:bb:01:e6:23:f8:
                    98:6c:2a:48:f8:61:a7:a9:7f:11:5d:de:88:c4:f8:
                    d1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F1:2B:22:03:8D:27:DD:16:AD:BF:6C:B0:34:02:B0:4D:69:29:B1
            X509v3 Authority Key Identifier:
                keyid:FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/3231382e3234302e3138302e302f32342d3234203d3e203435303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.240.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:b4:a3:b5:99:61:98:71:c6:09:f4:73:a7:12:85:2b:e0:79:
         e8:b9:c2:c4:8e:42:9e:bd:d0:3f:38:ff:81:e8:c0:3c:70:8c:
         12:d9:58:75:2f:9a:b2:9e:69:63:27:b7:64:e3:31:a0:86:5e:
         e9:24:c3:b0:da:e0:84:fa:69:9a:80:f5:55:a6:67:8f:06:2b:
         da:2d:fc:95:0d:0b:b4:1b:6b:64:f1:7f:8b:25:e1:a7:bb:c3:
         bb:12:e1:a9:05:1b:eb:a7:d1:b8:f0:d4:ff:92:09:a2:a7:0d:
         d8:7b:c6:cc:c3:10:ee:1f:df:ec:c3:bd:0c:90:e2:58:02:2f:
         46:3b:5b:98:7c:5b:8e:44:79:08:60:dc:01:26:41:09:db:e7:
         dc:d9:ad:68:b3:16:93:f4:15:07:10:ba:ae:bd:47:df:2b:de:
         c6:94:84:3c:af:75:cf:dd:b4:fe:56:72:1c:af:db:48:cf:15:
         06:bf:6a:39:b1:f3:87:56:9f:d1:21:d8:98:6e:d0:28:9f:7c:
         ae:f1:15:7d:f2:b6:8d:a1:80:a1:cd:67:ed:85:b4:de:83:64:
         bc:ef:b6:58:09:b0:f0:16:28:8f:d2:c3:bf:9e:1e:3c:06:9b:
         9c:76:50:81:43:2e:ad:5f:68:b4:9b:95:60:73:c0:12:40:27:
         46:0d:8c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:59 2026 by rpki-client