Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106106457318752269/0/3131302e34302e31332e302f32342d3234203d3e203536303438.roa
File:                     3131302e34302e31332e302f32342d3234203d3e203536303438.roa (raw, json)
Hash identifier:          8uClidPzRIIi2TY0jNDCZTbJG1tTD01k7EjzLGmYbG4=
Subject key identifier:   2C:5A:26:93:26:37:4F:E7:9E:A2:57:D8:35:30:97:BB:BC:7E:B6:E5
Certificate issuer:       /CN=6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52
Certificate serial:       2A8EF5462D89898491DF4ADE2A9A6637F9E0D4D0
Authority key identifier: 6B:23:1F:5D:F7:53:5B:F8:6C:FF:EB:85:A0:B2:8E:0A:44:7C:BD:52
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/3131302e34302e31332e302f32342d3234203d3e203536303438.roa
Signing time:             Mon 11 May 2026 08:06:31 +0000
ROA not before:           Mon 11 May 2026 08:01:31 +0000
ROA not after:            Mon 10 May 2027 08:06:31 +0000
asID:                     56048
IP address blocks:        110.40.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:52:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:8e:f5:46:2d:89:89:84:91:df:4a:de:2a:9a:66:37:f9:e0:d4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52
        Validity
            Not Before: May 11 08:01:31 2026 GMT
            Not After : May 10 08:06:31 2027 GMT
        Subject: CN=2C5A269326374FE79EA257D8353097BBBC7EB6E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0d:ba:e2:e1:c1:86:fb:97:17:56:4d:e0:70:
                    58:ee:d6:b4:87:cc:0f:02:dd:fc:d5:ab:9f:bd:de:
                    6d:c7:34:2e:8b:c8:4a:69:d1:12:18:29:a2:21:fe:
                    ce:88:50:f6:0c:88:fe:6b:d0:0e:09:cf:24:31:4d:
                    c4:c1:67:cf:52:9d:ea:77:9c:f2:91:dd:2e:a8:7e:
                    14:d4:44:3f:18:f0:95:cb:16:f1:d1:3e:67:9e:a7:
                    ed:15:53:17:99:6b:c0:01:1c:e3:ea:8e:72:76:eb:
                    5c:cc:70:d5:6c:11:12:e0:25:10:63:c3:2d:66:ca:
                    80:85:f2:7b:29:df:1c:64:64:a6:c4:4d:32:e7:45:
                    d9:8e:05:bd:f8:34:d9:26:c9:01:27:cd:8c:8d:96:
                    7d:4f:8f:a2:9e:ea:e1:81:29:db:cb:78:69:66:5d:
                    53:f3:4a:5b:04:f8:ff:84:78:fe:61:ba:9d:41:1f:
                    b4:07:07:a0:2c:0c:93:55:b1:e0:d0:83:d0:88:c7:
                    28:5f:98:fd:a6:21:a3:40:ca:e2:bf:26:7f:cf:5e:
                    88:05:8f:e3:8d:59:d5:32:8b:2c:38:b7:5d:6a:c2:
                    a9:7e:3f:bf:8a:ac:d5:57:f1:dd:a1:50:ff:e9:8d:
                    79:61:a1:e6:b0:d6:e6:0f:42:0a:5b:08:e7:c8:5a:
                    47:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5A:26:93:26:37:4F:E7:9E:A2:57:D8:35:30:97:BB:BC:7E:B6:E5
            X509v3 Authority Key Identifier:
                keyid:6B:23:1F:5D:F7:53:5B:F8:6C:FF:EB:85:A0:B2:8E:0A:44:7C:BD:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/3131302e34302e31332e302f32342d3234203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.40.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:d9:89:9d:18:1a:47:25:82:17:82:f3:e5:b2:b0:46:1e:d6:
         77:fc:ec:33:49:52:42:0b:ed:68:60:48:96:1f:9a:c5:7b:8a:
         27:73:3d:c6:93:b2:5c:86:4f:9e:e9:12:7a:4c:42:ef:44:f1:
         91:92:f9:9d:cb:ff:01:d0:ab:4b:94:de:66:cb:a9:a0:a3:9e:
         c8:1c:7d:47:20:0e:76:65:b4:37:38:3d:67:b9:55:4a:b5:57:
         fc:20:50:31:33:de:42:0f:28:99:cd:b1:15:05:e0:79:2d:d1:
         43:61:cd:73:0c:63:0c:72:6f:8c:43:68:13:83:c4:2b:33:f4:
         cb:f8:5f:30:80:4d:3f:31:56:06:54:9a:05:14:80:91:c2:df:
         fe:0e:2f:92:da:08:55:61:b2:7c:d3:c3:13:93:0f:2c:c0:ca:
         89:3c:90:78:f7:4d:38:7c:36:a6:77:65:7d:3a:62:3a:7a:f3:
         bc:82:f8:eb:a3:78:34:5c:2b:52:d0:4b:51:dd:c3:e3:2d:27:
         7b:55:5c:c6:22:76:9e:3d:65:13:f4:04:9c:29:ba:f4:d4:67:
         1a:e8:82:5c:6f:e8:58:33:ff:7a:b3:51:89:94:74:8a:23:89:
         e1:5c:c9:0f:c1:7a:22:c9:81:91:ea:e3:4d:3c:63:48:ec:a5:
         fa:06:5d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:12 2026 by rpki-client