Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123880523131781155/0/3131312e3231312e3139322e302f31382d3332203d3e203435313036.roa
File:                     3131312e3231312e3139322e302f31382d3332203d3e203435313036.roa (raw, json)
Hash identifier:          8Mn803+TcdNNZRgp/2XUzUL1fvd82Vt2Hzq8sENe0Us=
Subject key identifier:   00:53:53:D7:F5:42:13:EF:39:CE:B7:2F:00:EE:C6:E2:4E:2B:CA:44
Certificate issuer:       /CN=7E8EBDDCE23312FAF91758581FB143F7AF35FA8F
Certificate serial:       10C3ED80FC4D4B66DF27586F541F057C4C995DA8
Authority key identifier: 7E:8E:BD:DC:E2:33:12:FA:F9:17:58:58:1F:B1:43:F7:AF:35:FA:8F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/3131312e3231312e3139322e302f31382d3332203d3e203435313036.roa
Signing time:             Mon 29 Jun 2026 07:44:15 +0000
ROA not before:           Mon 29 Jun 2026 07:39:15 +0000
ROA not after:            Mon 28 Jun 2027 07:44:15 +0000
asID:                     45106
IP address blocks:        111.211.192.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 06:30:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c3:ed:80:fc:4d:4b:66:df:27:58:6f:54:1f:05:7c:4c:99:5d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E8EBDDCE23312FAF91758581FB143F7AF35FA8F
        Validity
            Not Before: Jun 29 07:39:15 2026 GMT
            Not After : Jun 28 07:44:15 2027 GMT
        Subject: CN=005353D7F54213EF39CEB72F00EEC6E24E2BCA44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6d:84:5d:0f:f4:a9:74:39:9e:2b:91:2b:2e:
                    ad:f0:f6:4f:06:07:32:c1:85:f7:64:aa:70:8b:6a:
                    a6:a0:1f:b9:ed:0d:5f:a6:2d:28:5f:1c:9b:5d:6f:
                    61:e0:f1:ae:9a:68:ef:f5:c1:d7:0e:80:2e:7a:fe:
                    96:24:85:3f:ec:16:41:be:75:71:3f:d9:a6:3a:0c:
                    8e:82:5b:2f:e3:e9:a2:b0:b4:6d:77:0d:4a:4e:24:
                    42:53:be:71:40:89:76:9e:bb:e5:45:1c:e5:e0:bb:
                    61:d2:8a:e9:a0:7a:c2:46:4f:d9:4e:f3:df:34:48:
                    76:69:a4:b3:02:bf:41:8f:42:ef:d0:89:f0:ae:fa:
                    2b:bc:ce:6c:55:9f:54:9c:07:5a:7d:7a:fe:fa:85:
                    68:7f:c3:c0:03:9f:4c:25:c8:9a:16:f4:85:c0:df:
                    bc:54:ca:24:70:d5:c0:6a:4a:4d:9e:9b:97:c2:3e:
                    44:44:be:a2:f0:cf:4f:7d:56:f6:f4:ce:99:d5:fc:
                    18:4e:32:3e:bf:12:fe:ab:50:6f:2e:bf:00:a9:39:
                    ba:54:fb:42:6e:43:c5:54:55:5b:a6:0f:d5:cd:5a:
                    df:c3:c4:be:ab:02:9b:f0:65:1f:b6:ff:86:c0:16:
                    91:d6:61:97:1b:77:03:1b:c5:ca:2d:d4:96:64:79:
                    38:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:53:53:D7:F5:42:13:EF:39:CE:B7:2F:00:EE:C6:E2:4E:2B:CA:44
            X509v3 Authority Key Identifier:
                keyid:7E:8E:BD:DC:E2:33:12:FA:F9:17:58:58:1F:B1:43:F7:AF:35:FA:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/3131312e3231312e3139322e302f31382d3332203d3e203435313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.211.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         15:97:bc:13:f8:2c:85:ce:6d:9f:5f:fc:82:81:f3:22:af:d7:
         fc:0b:98:eb:be:72:b3:3d:a5:ed:8a:f0:f4:06:f7:5b:50:62:
         42:c1:a4:42:7a:fc:20:26:87:64:a1:7e:54:b2:87:98:0c:1a:
         d9:4a:63:70:b9:9b:31:52:02:b9:1b:3d:95:c8:a5:c4:47:8c:
         23:90:6d:d0:90:e8:78:3d:36:81:27:c2:8d:cb:8e:81:f1:3c:
         21:72:a1:85:bf:91:d5:98:0f:fd:3a:59:b0:a9:eb:a3:e5:d9:
         9e:d3:ab:c4:11:21:f1:94:41:27:5d:57:5e:e9:b5:63:a1:ab:
         e5:d6:5d:68:56:8f:4b:b7:88:ba:19:65:ff:8f:37:b7:b6:64:
         87:ef:1f:2b:5f:38:ed:0d:22:b4:72:5b:33:0b:9e:3f:a8:0f:
         5c:26:df:93:5d:ea:a5:a5:54:fb:2e:d2:7d:6c:3d:5b:ed:a2:
         6c:21:a2:b7:83:7c:25:9b:7b:62:97:57:21:9c:61:e8:b6:ad:
         2d:26:2d:7e:dc:36:57:b4:75:79:4d:68:95:f0:5f:f1:27:ce:
         e4:12:e7:42:83:82:44:65:75:91:60:4e:6a:97:9f:9d:1e:25:
         10:a4:97:67:b3:49:b2:22:16:22:a0:d4:e0:cf:03:b0:cc:95:
         dc:20:f0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:52 2026 by rpki-client