Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114852675259727895/0/312e3131392e3231322e302f32322d3232203d3e2030.roa
File:                     312e3131392e3231322e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          +HKaT/JYu9OdbtkKLylMRvfLIjfMgH4tlTzH+mamNA0=
Subject key identifier:   51:D6:95:DC:18:F2:9B:8D:2D:F7:5C:9A:41:09:50:6A:29:E2:54:59
Certificate issuer:       /CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23
Certificate serial:       7C9438C5E9668B880AFF21C185EC9434567626FE
Authority key identifier: D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/312e3131392e3231322e302f32322d3232203d3e2030.roa
Signing time:             Thu 04 Jun 2026 10:08:22 +0000
ROA not before:           Thu 04 Jun 2026 10:03:22 +0000
ROA not after:            Thu 03 Jun 2027 10:08:22 +0000
asID:                     0
IP address blocks:        1.119.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 22:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:94:38:c5:e9:66:8b:88:0a:ff:21:c1:85:ec:94:34:56:76:26:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23
        Validity
            Not Before: Jun  4 10:03:22 2026 GMT
            Not After : Jun  3 10:08:22 2027 GMT
        Subject: CN=51D695DC18F29B8D2DF75C9A4109506A29E25459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:37:ff:b0:f1:60:73:36:31:2b:a4:f2:ba:42:
                    97:41:6b:ed:d3:2c:7a:ab:26:2b:13:cf:d9:55:ce:
                    2b:37:24:a1:a8:d8:16:95:f1:3c:a0:ce:9a:57:3a:
                    50:a0:5b:7e:a0:8a:e1:87:99:c1:58:12:7e:6f:bb:
                    95:75:4d:9b:64:ae:12:e0:45:43:a4:a2:88:2c:2f:
                    6a:5c:4f:9a:6e:6d:de:5e:da:2e:9c:a3:8f:e7:2b:
                    89:3f:45:35:d2:60:0e:18:fe:d0:9a:e5:5c:47:af:
                    52:35:07:01:2e:1a:5e:ac:47:76:1f:1a:3e:70:29:
                    d8:f5:9d:18:61:9f:01:dd:64:ff:d3:8b:cc:df:d4:
                    7f:79:a6:ab:e3:3f:d2:f6:68:df:d9:3e:f8:bf:98:
                    16:72:00:bd:9d:57:37:ff:bc:c9:90:6a:db:b7:21:
                    ae:98:b8:bb:0d:1c:db:92:ff:1c:ce:fe:8c:29:90:
                    f3:11:09:b6:a5:71:0e:e5:b8:e2:4d:26:4e:e2:ac:
                    ec:d7:19:fc:bb:3d:31:f5:b0:42:89:e1:c9:1a:b2:
                    00:ce:31:5c:26:8c:67:47:2c:3e:ed:ce:74:db:e2:
                    82:c8:45:98:f0:77:61:9d:8f:24:a0:73:96:4c:17:
                    8b:1a:ee:9d:f6:fd:bc:38:69:8e:79:70:b6:c5:0e:
                    12:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D6:95:DC:18:F2:9B:8D:2D:F7:5C:9A:41:09:50:6A:29:E2:54:59
            X509v3 Authority Key Identifier:
                keyid:D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/312e3131392e3231322e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.119.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:55:18:78:6c:c3:d1:4d:a9:0f:2e:d2:65:38:9d:55:23:27:
         d1:95:4d:2e:09:55:ac:e5:fd:2f:21:64:55:e1:ef:f6:ba:92:
         3e:0d:0c:3d:a7:6d:24:c2:76:eb:fe:24:31:79:c9:6a:26:d8:
         4b:4d:e3:46:48:e3:4f:4b:3b:9c:93:fe:8d:2a:bf:ff:2d:d1:
         4f:00:59:a8:e7:9e:68:d9:d3:75:77:3d:98:69:6c:17:fa:90:
         73:3e:e7:55:b3:41:4a:71:6b:46:3c:3c:2b:a8:7f:f4:e0:ea:
         22:af:3d:ef:c7:af:4d:93:1c:45:1c:76:ef:92:52:03:34:f5:
         f5:36:30:8e:35:a4:a5:ce:3d:6e:16:28:13:af:cd:ec:10:ae:
         12:9c:74:9f:63:12:4e:76:2e:50:66:8b:70:b9:6a:2e:7e:64:
         8a:56:aa:6a:c3:64:94:a6:e0:4b:e2:fc:24:f9:4c:a5:b7:ca:
         9d:7f:ad:26:9c:f2:1c:5c:13:64:f3:f6:74:ff:65:e4:c7:9b:
         0a:00:92:da:bd:6a:f0:07:23:a0:9b:38:26:1e:48:c1:44:dd:
         55:84:ab:38:c8:d6:64:ff:32:ea:b1:ac:41:2d:7f:79:da:41:
         11:5f:ec:38:a4:73:87:ea:e8:98:78:41:8f:b8:f6:7a:3f:ea:
         4e:90:f2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:53 2026 by rpki-client