Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3134332e302f32342d3234203d3e203536303438.roa
File:                     3231312e3134342e3134332e302f32342d3234203d3e203536303438.roa (raw, json)
Hash identifier:          p+oAMrStexg/k/lOzKmQOXlNuDF8WvmNbcwepsiLKy0=
Subject key identifier:   BF:9A:5F:2C:F1:30:22:83:74:1C:EA:D8:18:02:F8:D4:F2:99:C0:3D
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       30B9B80F92C4BBA19D9C57296CFF17CBCE84987A
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3134332e302f32342d3234203d3e203536303438.roa
Signing time:             Fri 18 Sep 2026 02:55:38 +0000
ROA not before:           Fri 18 Sep 2026 02:50:38 +0000
ROA not after:            Fri 17 Sep 2027 02:55:38 +0000
asID:                     56048
IP address blocks:        211.144.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 17:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b9:b8:0f:92:c4:bb:a1:9d:9c:57:29:6c:ff:17:cb:ce:84:98:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Sep 18 02:50:38 2026 GMT
            Not After : Sep 17 02:55:38 2027 GMT
        Subject: CN=BF9A5F2CF1302283741CEAD81802F8D4F299C03D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b2:b9:7c:74:65:38:7d:a0:2b:a6:c4:e3:38:
                    74:8c:9a:6f:ca:0f:4b:bc:a7:fe:6f:42:4b:bc:67:
                    53:37:b1:0b:69:78:36:ac:f2:16:a2:41:2f:04:1b:
                    95:3f:94:15:9a:81:35:eb:20:ff:61:9b:ab:66:3d:
                    89:80:a1:d8:05:7a:c1:f4:00:b8:91:8d:1e:6c:82:
                    14:25:b3:53:7b:05:27:96:56:3d:04:af:b2:05:82:
                    23:14:30:18:73:f8:da:00:03:87:4a:e7:4a:f8:34:
                    ac:2c:85:65:4e:56:bb:ed:ec:cd:48:c7:3a:19:65:
                    e5:f7:57:f1:84:b2:2a:80:ef:4b:2a:81:c9:ed:05:
                    98:69:8a:47:e1:e9:91:cd:1c:86:f0:fa:20:87:e6:
                    ac:00:86:d9:89:54:44:5c:80:54:f8:f5:d7:9a:90:
                    49:1b:11:59:5b:84:41:31:ce:04:69:b7:0f:b3:ed:
                    56:2f:22:e5:88:a6:6e:38:84:45:e6:dd:0b:aa:b5:
                    ad:59:92:6e:3c:37:54:cc:53:f0:5e:ca:0c:7b:a2:
                    bf:4c:04:72:56:12:23:cf:71:d8:99:5e:2c:0f:a8:
                    a7:4c:23:fb:f4:8b:32:84:d0:57:fb:36:97:37:63:
                    49:47:8e:d2:ed:6c:e8:20:e6:e5:f7:ab:5c:96:3e:
                    a5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9A:5F:2C:F1:30:22:83:74:1C:EA:D8:18:02:F8:D4:F2:99:C0:3D
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3134332e302f32342d3234203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.144.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:94:bb:74:47:e8:9d:1b:38:54:e3:24:ea:dc:e6:b5:17:e3:
         27:de:1f:c9:24:77:bd:8c:37:5e:f4:70:b3:df:e6:08:2e:46:
         22:fd:56:0e:59:93:4c:80:1e:89:c7:f7:f8:98:93:f9:15:1f:
         7f:6a:63:aa:b9:76:a9:27:3e:81:59:83:bf:6c:d9:1e:58:e7:
         69:fc:59:fa:59:57:f9:c6:3b:cf:b7:84:47:44:d7:90:2d:f4:
         5c:cf:93:76:e0:7f:ac:f1:82:92:3d:73:70:8f:7d:35:c7:5a:
         f5:c2:6e:65:fd:b9:2e:d3:2c:39:86:b9:a3:51:fe:63:e2:74:
         b7:6d:8d:f0:5a:04:d4:5f:04:3b:db:c4:79:2c:0f:c2:fc:bc:
         c0:ec:08:89:91:8e:25:74:47:69:20:e1:d4:e6:ad:11:08:16:
         db:bc:ff:58:95:b5:06:60:e1:8d:d4:bd:55:67:75:8f:26:0e:
         f9:b8:ae:77:79:40:51:ec:57:2c:b3:82:ce:76:68:d2:00:c7:
         00:04:8b:66:cc:5b:45:cf:76:e6:e7:38:c1:7e:5b:ce:1f:3f:
         18:08:47:53:84:69:bc:28:46:10:20:1d:c7:39:ff:26:a6:7d:
         31:50:f4:ce:ec:c7:5b:14:73:30:6a:f9:65:02:4f:55:c0:eb:
         43:5b:66:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:21:11 2026 by rpki-client