Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106106457318752269/0/3131302e34302e31362e302f32342d3234203d3e2034383437.roa
File:                     3131302e34302e31362e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          QqWtSzdGyUhqGdVvO+IfRlZKSuZ7JKKv1AI9r0W89m0=
Subject key identifier:   85:56:DD:A5:49:57:18:20:7A:5A:04:5D:5A:60:27:52:1F:BC:06:CF
Certificate issuer:       /CN=6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52
Certificate serial:       515E11063A31EB3DD43B0463AB087E5A571F741F
Authority key identifier: 6B:23:1F:5D:F7:53:5B:F8:6C:FF:EB:85:A0:B2:8E:0A:44:7C:BD:52
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/3131302e34302e31362e302f32342d3234203d3e2034383437.roa
Signing time:             Mon 11 May 2026 08:06:31 +0000
ROA not before:           Mon 11 May 2026 08:01:31 +0000
ROA not after:            Mon 10 May 2027 08:06:31 +0000
asID:                     4847
IP address blocks:        110.40.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:52:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5e:11:06:3a:31:eb:3d:d4:3b:04:63:ab:08:7e:5a:57:1f:74:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52
        Validity
            Not Before: May 11 08:01:31 2026 GMT
            Not After : May 10 08:06:31 2027 GMT
        Subject: CN=8556DDA5495718207A5A045D5A6027521FBC06CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:80:8a:aa:d8:6d:b6:e2:6c:3c:8d:1e:8b:18:
                    44:36:39:6c:b9:3a:74:a6:14:e2:05:c6:91:a2:1a:
                    f7:06:47:e4:c4:75:4b:98:6e:23:e8:03:45:b4:0c:
                    12:69:93:9b:32:ec:eb:d6:7c:fe:01:13:99:a3:84:
                    08:ed:8c:39:66:17:a0:90:50:1f:51:42:96:01:c8:
                    d8:4d:b4:69:50:a9:77:c6:7b:fe:2c:ac:65:4a:ce:
                    9c:1d:72:b3:ae:a0:89:43:f3:b5:d3:89:a0:e1:09:
                    bb:be:cd:6a:0c:17:50:7a:eb:56:86:b9:0b:a7:37:
                    8e:8c:fd:9d:3f:06:7f:e0:8b:ac:54:16:ae:cc:56:
                    46:a6:93:37:00:e1:00:40:2f:6e:9f:52:8c:6c:73:
                    d9:61:76:36:08:c8:ff:45:cf:8a:98:a1:83:0d:24:
                    7f:64:52:7d:d4:6e:87:f9:9b:06:f2:01:56:76:59:
                    79:13:04:9e:86:64:fe:89:6e:dc:fb:b1:7c:90:f3:
                    41:78:61:51:10:f9:94:de:ea:f0:1d:15:75:ef:c6:
                    dc:f2:fb:e0:83:c1:bc:33:9b:b5:08:a1:ec:26:f4:
                    da:a0:df:5d:63:55:ec:e2:0e:93:00:ec:3a:e5:fe:
                    3d:90:8e:0c:c4:80:c7:31:ef:b8:1d:6f:f9:1f:54:
                    76:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:56:DD:A5:49:57:18:20:7A:5A:04:5D:5A:60:27:52:1F:BC:06:CF
            X509v3 Authority Key Identifier:
                keyid:6B:23:1F:5D:F7:53:5B:F8:6C:FF:EB:85:A0:B2:8E:0A:44:7C:BD:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/3131302e34302e31362e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.40.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:70:9d:18:ad:39:00:b1:60:8a:25:1b:81:fa:7b:48:8f:a2:
         ff:29:40:a5:26:12:10:ac:8d:85:28:57:91:02:f0:1c:8f:51:
         e4:b5:db:dc:65:7a:86:8d:1f:f7:eb:4c:68:3f:26:16:4a:5d:
         00:ce:af:ce:2e:53:fa:d2:3e:46:b9:79:8c:ef:6b:cb:8a:ca:
         ed:19:01:76:2b:42:c5:6f:2c:a1:22:e3:c8:ec:4b:8a:0b:95:
         5e:b2:45:43:ac:9d:5f:db:ad:8b:e0:5d:d3:34:67:54:f1:8c:
         49:93:1b:36:c2:84:0f:9d:bc:20:35:b5:6e:e2:82:c3:9a:79:
         c9:2f:ef:68:4a:5a:63:3d:4c:66:9b:ef:8b:fa:3b:74:fa:7e:
         02:cc:c1:13:ed:57:4b:9a:9f:85:2c:9c:fc:5f:d4:6e:36:fb:
         a6:a5:4d:f8:82:08:37:02:55:5e:8a:e6:59:ae:dc:4f:cd:a1:
         21:b3:53:b8:61:49:12:e2:1f:4b:17:0b:9b:9d:6b:44:48:c5:
         35:37:ed:b8:d4:dd:ca:d5:39:e0:e9:88:c3:36:6b:e7:48:0a:
         e0:76:91:e9:2b:f1:3f:01:f0:3c:69:10:5a:6c:57:4c:e2:7d:
         f0:bb:b6:18:41:45:ea:03:81:97:eb:00:89:f0:90:fa:a6:03:
         4f:52:1b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:22:01 2026 by rpki-client