Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106106457318752269/0/3131302e34302e31342e302f32332d3233203d3e203536303438.roa
File:                     3131302e34302e31342e302f32332d3233203d3e203536303438.roa (raw, json)
Hash identifier:          C1DKsXtMqd0t7ylQxOUhqTDxBE8Xn0uqC4mMsJrvS/0=
Subject key identifier:   92:3E:9F:71:1B:80:DD:CD:9C:14:3B:9C:2A:7B:B5:C2:19:BE:FA:C3
Certificate issuer:       /CN=6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52
Certificate serial:       7DA64F7DE2367BAFF6C95DCD9812207DD74BC122
Authority key identifier: 6B:23:1F:5D:F7:53:5B:F8:6C:FF:EB:85:A0:B2:8E:0A:44:7C:BD:52
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/3131302e34302e31342e302f32332d3233203d3e203536303438.roa
Signing time:             Mon 11 May 2026 08:06:31 +0000
ROA not before:           Mon 11 May 2026 08:01:31 +0000
ROA not after:            Mon 10 May 2027 08:06:31 +0000
asID:                     56048
IP address blocks:        110.40.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:52:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a6:4f:7d:e2:36:7b:af:f6:c9:5d:cd:98:12:20:7d:d7:4b:c1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52
        Validity
            Not Before: May 11 08:01:31 2026 GMT
            Not After : May 10 08:06:31 2027 GMT
        Subject: CN=923E9F711B80DDCD9C143B9C2A7BB5C219BEFAC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3c:98:09:cb:b3:e2:56:21:9d:0e:15:38:6c:
                    b8:77:9b:d3:e1:05:79:fe:57:72:bd:d2:15:c9:bf:
                    7c:84:f5:57:56:36:b2:ba:a8:93:9f:32:d8:c6:a6:
                    12:ca:62:2f:e2:55:69:7a:26:19:03:ca:13:a9:7c:
                    38:82:f8:ac:19:29:a0:2a:cb:8e:46:b3:43:93:92:
                    ed:be:de:d1:6a:54:5b:b8:7b:6f:dd:01:51:1f:3a:
                    e3:4b:ea:b7:18:09:5b:8b:bf:14:6c:35:45:30:95:
                    7a:e0:ff:05:5a:87:78:3c:bc:9f:39:f0:2c:ae:93:
                    24:0c:82:2d:a2:c4:11:ff:f4:f9:59:88:8f:89:a2:
                    2f:35:60:35:4b:e4:ed:57:bd:a2:8c:1b:a1:d1:2a:
                    93:0a:9e:77:db:7d:cc:42:f2:06:1e:bc:b3:0f:7b:
                    2d:97:e4:8a:f2:89:bf:6b:f9:4a:11:85:1f:af:95:
                    40:11:b7:91:42:75:4a:ee:63:fc:2a:7f:af:52:d9:
                    f2:f4:bf:d2:0a:56:00:fc:e8:3a:5a:b6:90:13:5b:
                    84:96:a8:f0:36:57:d0:cd:f5:c6:8f:da:7a:5e:86:
                    06:5e:94:cb:52:27:bb:e0:81:33:29:8e:48:83:31:
                    aa:cf:69:e1:0e:ba:76:e2:50:cd:73:e1:97:96:42:
                    03:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3E:9F:71:1B:80:DD:CD:9C:14:3B:9C:2A:7B:B5:C2:19:BE:FA:C3
            X509v3 Authority Key Identifier:
                keyid:6B:23:1F:5D:F7:53:5B:F8:6C:FF:EB:85:A0:B2:8E:0A:44:7C:BD:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/3131302e34302e31342e302f32332d3233203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.40.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:ba:94:2c:d2:36:1c:ef:0f:6c:d3:c3:be:f9:6e:2f:39:a8:
         12:bb:29:06:1e:9f:94:51:7d:0c:ba:aa:a4:41:d8:45:e8:8b:
         23:07:7a:b7:57:4e:0c:a3:38:85:d2:6a:e5:63:8b:52:c3:9d:
         06:57:89:bd:c4:f5:2e:ca:c0:f3:ce:56:a9:b7:91:62:72:d5:
         81:fe:38:49:94:bc:a2:f7:6f:62:8a:59:b3:1e:aa:bd:65:c1:
         fc:bf:d8:47:ff:ee:c6:eb:83:8b:b7:c8:de:73:f3:ee:e7:62:
         8a:da:fe:61:f3:22:ec:f3:c3:c1:4e:7e:80:ff:fd:85:ea:b4:
         30:72:12:0b:a4:f7:13:c5:a4:d0:9f:ae:38:76:4e:e2:98:5c:
         1b:0f:ea:f3:ea:ae:97:0a:05:79:84:99:95:11:ba:6d:67:92:
         c7:5f:e2:e5:db:12:b7:2d:71:71:c8:2e:f1:65:34:df:6f:81:
         27:f4:ad:8e:01:a4:fe:b0:78:36:fa:ff:0c:5c:af:7b:88:d2:
         4c:98:92:82:a6:49:97:9d:4c:17:92:a2:cc:f9:41:e3:53:fb:
         d3:91:82:2a:25:74:2c:d7:da:de:b3:10:a3:59:a3:24:e4:f2:
         a0:c7:34:e7:a1:5b:98:dc:fc:fd:43:92:50:5e:62:e4:a4:39:
         f8:28:fb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:35 2026 by rpki-client