Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106106457318752269/0/3131302e34302e302e302f32342d3234203d3e203536303438.roa
File:                     3131302e34302e302e302f32342d3234203d3e203536303438.roa (raw, json)
Hash identifier:          dLNX6GEU/TFA1aOuowinO+W5Q17nV4otdw4fGp6rQI0=
Subject key identifier:   CE:94:79:73:4B:30:A5:CF:71:DA:AC:4C:59:7D:22:D2:E0:6A:64:D0
Certificate issuer:       /CN=6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52
Certificate serial:       4D480ECFAF8C9767D3FD764D1C1A330ACC097B1E
Authority key identifier: 6B:23:1F:5D:F7:53:5B:F8:6C:FF:EB:85:A0:B2:8E:0A:44:7C:BD:52
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/3131302e34302e302e302f32342d3234203d3e203536303438.roa
Signing time:             Mon 11 May 2026 08:06:31 +0000
ROA not before:           Mon 11 May 2026 08:01:31 +0000
ROA not after:            Mon 10 May 2027 08:06:31 +0000
asID:                     56048
IP address blocks:        110.40.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:52:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:48:0e:cf:af:8c:97:67:d3:fd:76:4d:1c:1a:33:0a:cc:09:7b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52
        Validity
            Not Before: May 11 08:01:31 2026 GMT
            Not After : May 10 08:06:31 2027 GMT
        Subject: CN=CE9479734B30A5CF71DAAC4C597D22D2E06A64D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:90:d2:15:3f:00:ae:8e:26:74:1d:c3:0f:e4:
                    ae:6a:63:de:16:05:54:d8:0f:be:c3:e7:61:c2:3a:
                    85:2b:93:09:dd:71:08:11:ba:56:3f:9b:eb:3b:4a:
                    a6:b2:9e:4e:e6:23:f9:22:9b:b0:17:f0:2d:ba:5a:
                    87:d0:d6:18:df:95:fc:bb:2f:49:09:42:41:3d:8b:
                    65:9a:de:92:e1:ff:26:d9:97:4d:e8:96:13:3e:95:
                    6f:fe:7d:15:35:d3:84:fa:f9:7e:08:68:c7:b9:3a:
                    4d:4b:ab:aa:81:0e:27:85:f7:07:52:30:5b:df:28:
                    33:3d:9b:e6:52:3f:28:e8:7b:60:10:5e:ed:30:54:
                    64:ef:0b:a8:da:19:c5:fb:01:ef:68:9a:a7:58:9b:
                    3d:14:f3:ba:d3:ab:aa:b0:0e:bd:08:8e:04:9a:d7:
                    c4:5f:40:7d:fb:b0:4d:ed:a5:76:39:9c:1b:7d:f2:
                    07:a0:04:29:35:db:28:34:c7:4f:c7:89:80:a5:5b:
                    fc:ca:47:ce:de:a7:d1:64:57:1b:69:f9:59:c4:f5:
                    9b:25:f3:ca:fa:ca:a7:31:bb:6a:e3:4b:a8:0d:33:
                    9a:00:e4:10:9f:30:5d:4d:ae:ec:fe:5f:e9:a7:dc:
                    3d:28:84:8c:cd:06:56:80:17:f4:7b:f1:5c:5e:f0:
                    04:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:94:79:73:4B:30:A5:CF:71:DA:AC:4C:59:7D:22:D2:E0:6A:64:D0
            X509v3 Authority Key Identifier:
                keyid:6B:23:1F:5D:F7:53:5B:F8:6C:FF:EB:85:A0:B2:8E:0A:44:7C:BD:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/3131302e34302e302e302f32342d3234203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.40.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:eb:a3:45:46:1b:cb:54:83:77:6d:ac:9a:00:70:7d:2d:08:
         c6:b2:17:81:be:c5:2c:be:37:01:36:37:e7:91:3d:42:b7:31:
         13:ec:ff:9b:19:7c:e5:21:b5:05:4c:11:0f:e8:8e:f9:17:1f:
         75:76:16:c5:45:6b:18:26:65:f9:db:5d:bb:08:99:62:45:c0:
         5f:e2:28:12:03:88:09:09:13:40:a5:aa:70:f5:c0:c1:6d:74:
         78:4f:24:37:c8:f3:0b:60:30:68:c6:2c:91:4b:05:0b:a0:91:
         29:17:cf:43:4f:65:bd:ef:a0:97:1d:94:1d:4c:6a:8a:20:09:
         33:2c:cf:af:b9:e3:0c:5f:0d:2d:95:10:f0:e9:04:9e:77:b7:
         d9:54:87:ad:5f:5b:27:2f:91:f9:51:1f:8e:2a:aa:d7:b5:e9:
         83:3d:c7:1c:a1:20:e8:b9:d9:70:85:c8:4c:43:08:44:97:d5:
         aa:3b:d1:75:b6:f2:30:00:bd:18:2c:e6:a6:e4:60:53:45:be:
         85:20:d6:7f:b7:46:ea:87:8a:a1:95:0b:31:74:52:7c:e4:e1:
         a0:4d:bd:15:8f:9b:30:7e:83:5a:20:af:0b:fc:c4:ff:6f:40:
         6c:0e:55:c7:c6:c5:93:2c:2e:e3:c9:90:ee:24:16:ba:e2:22:
         1f:1c:35:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:20 2026 by rpki-client