Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114861900895617051/0/3231312e3130322e3230382e302f32302d3230203d3e203538383531.roa
File:                     3231312e3130322e3230382e302f32302d3230203d3e203538383531.roa (raw, json)
Hash identifier:          j5Rdo2Js55PNYoidEZ9f2WJvO7iSzLGP5wKzIv/CRG8=
Subject key identifier:   AD:23:C2:3A:01:C2:79:0C:9D:15:65:A6:57:34:CB:84:28:3C:21:14
Certificate issuer:       /CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2
Certificate serial:       15CF4A80A71B9B5B0EF802FECB55FDFB65A9FED0
Authority key identifier: 2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/3231312e3130322e3230382e302f32302d3230203d3e203538383531.roa
Signing time:             Thu 04 Jun 2026 10:26:11 +0000
ROA not before:           Thu 04 Jun 2026 10:21:11 +0000
ROA not after:            Thu 03 Jun 2027 10:26:11 +0000
asID:                     58851
IP address blocks:        211.102.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 04:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:cf:4a:80:a7:1b:9b:5b:0e:f8:02:fe:cb:55:fd:fb:65:a9:fe:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2
        Validity
            Not Before: Jun  4 10:21:11 2026 GMT
            Not After : Jun  3 10:26:11 2027 GMT
        Subject: CN=AD23C23A01C2790C9D1565A65734CB84283C2114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f6:56:2f:07:8f:85:10:07:29:1b:51:fb:c6:
                    86:29:74:8f:c3:7e:57:e3:9d:8a:20:dc:4c:b4:54:
                    9d:5c:89:8a:e2:18:be:4d:67:73:f9:ba:c6:1e:2c:
                    88:2e:af:2f:f0:11:26:03:52:69:f8:a5:28:1e:ec:
                    09:4a:5c:9d:84:ca:c5:15:37:7d:1b:c7:10:f2:c1:
                    2f:32:23:ba:78:3b:75:07:2b:19:38:db:ea:7a:45:
                    d0:85:2f:98:fa:d1:b5:0b:b9:16:f2:fb:7e:73:f8:
                    8d:ee:e9:e3:4b:10:48:1f:f6:e7:62:c8:5e:73:f1:
                    c1:0b:73:c2:63:36:2f:a5:82:c0:eb:06:5d:26:96:
                    4a:12:99:d2:f7:1d:0e:80:e4:0b:e4:e3:44:00:9a:
                    de:80:52:bb:08:e3:ae:39:46:a8:64:6a:48:d7:5e:
                    3a:9e:24:2e:2e:0c:98:11:d2:64:98:65:f4:42:a7:
                    28:f4:08:ce:be:0d:d7:a7:8c:80:75:0a:e6:2e:70:
                    23:e5:02:45:49:f4:06:88:71:aa:f9:39:70:c2:d8:
                    b4:8b:3a:54:7b:48:96:a3:3a:d6:1f:ac:5d:23:16:
                    fb:63:0e:af:8e:71:e5:c8:68:0e:05:5a:93:70:38:
                    94:e2:e6:e7:5f:57:f0:da:90:94:46:38:ac:84:e3:
                    6f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:23:C2:3A:01:C2:79:0C:9D:15:65:A6:57:34:CB:84:28:3C:21:14
            X509v3 Authority Key Identifier:
                keyid:2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/3231312e3130322e3230382e302f32302d3230203d3e203538383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.102.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6f:ba:51:08:89:bb:02:53:db:76:87:20:9d:26:97:ba:94:87:
         91:b6:a9:93:2b:0d:75:93:ae:70:bf:fe:1b:73:71:78:01:8c:
         9c:33:50:22:bb:bb:44:5e:b6:da:1b:85:93:05:c5:a0:50:ff:
         1b:97:fa:74:4e:a9:bd:3d:68:c9:4a:27:32:bc:ce:92:bc:30:
         ee:8c:53:46:92:1f:77:d7:ac:be:79:15:de:6d:51:79:13:42:
         9a:96:5b:90:77:a2:91:c4:ec:36:bd:69:9f:4c:a8:3b:08:a9:
         40:7e:b3:72:2d:11:d8:f3:98:97:45:ee:b0:d3:1e:87:41:f6:
         5e:b6:c7:4e:af:21:e1:b3:25:23:62:55:b9:4f:39:a2:fe:a6:
         28:67:72:77:4c:6b:1e:bf:16:41:03:8d:60:d1:50:af:d0:ba:
         9d:51:28:6c:0c:fb:90:8b:42:c4:45:c6:b7:57:2b:df:5d:23:
         31:59:d5:6d:29:29:a4:11:54:f9:57:48:04:03:3b:ab:ea:30:
         3a:e4:26:59:de:92:7a:1e:85:33:70:b9:f9:00:85:f4:f4:0e:
         d8:58:89:b4:79:24:7a:61:b1:d3:49:ff:70:37:3a:33:1b:ad:
         1e:22:1e:39:2c:29:09:e2:c5:33:5b:4b:7d:0a:0c:c1:ad:cc:
         04:1a:ab:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:52 2026 by rpki-client