Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3135322e302f32312d3231203d3e203536303438.roa
File:                     3231312e3134342e3135322e302f32312d3231203d3e203536303438.roa (raw, json)
Hash identifier:          I6IMm0euSacDz9O6KtBRSZxmckAVZFqXzpgFymD0iTU=
Subject key identifier:   9A:4B:B8:1C:45:0F:65:FE:A1:9A:8A:55:41:68:39:F2:3C:E3:CD:58
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       03D00CB5ADA337693C6B75F70F1C9F05B001CB1A
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3135322e302f32312d3231203d3e203536303438.roa
Signing time:             Fri 18 Sep 2026 02:58:28 +0000
ROA not before:           Fri 18 Sep 2026 02:53:28 +0000
ROA not after:            Fri 17 Sep 2027 02:58:28 +0000
asID:                     56048
IP address blocks:        211.144.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 09:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d0:0c:b5:ad:a3:37:69:3c:6b:75:f7:0f:1c:9f:05:b0:01:cb:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Sep 18 02:53:28 2026 GMT
            Not After : Sep 17 02:58:28 2027 GMT
        Subject: CN=9A4BB81C450F65FEA19A8A55416839F23CE3CD58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b7:3b:fa:19:50:c8:a9:67:50:c8:b8:e6:9b:
                    34:b2:98:98:11:54:51:0c:54:e2:2b:83:de:1f:7d:
                    3c:e3:4d:d3:99:f7:d4:f6:25:58:f0:3f:fc:a7:f8:
                    ea:dd:25:af:e5:a4:ba:85:30:bf:58:3e:6b:93:8b:
                    11:b5:24:e7:3a:ca:26:fe:46:3f:25:95:1b:17:dc:
                    31:ce:ae:5d:51:0f:8c:b6:2e:8c:47:b2:00:58:a2:
                    93:b1:f4:12:ec:40:ed:af:f8:5a:53:cb:8f:38:f0:
                    22:db:3c:62:d3:c7:9e:d6:6a:ea:df:e1:37:43:2d:
                    76:07:db:55:a9:50:b2:55:59:f7:95:a2:f7:af:bb:
                    14:7b:8d:49:e6:2a:bd:66:9f:3d:63:19:c0:0c:01:
                    e2:c2:8d:7b:b4:2e:91:b2:58:91:5c:75:51:9d:86:
                    1a:dc:54:0d:ed:0f:04:af:df:09:85:d9:19:41:f3:
                    af:d7:9c:ac:87:6a:44:3c:52:ea:10:57:2e:9e:ed:
                    59:5b:51:a0:83:04:ef:54:02:e3:8e:dc:d8:e6:5f:
                    82:61:6c:45:4d:34:cc:05:93:83:e4:56:50:c5:82:
                    09:ee:6d:16:c6:74:96:c6:24:05:b9:9b:af:11:e3:
                    db:55:10:8a:45:9e:68:52:14:09:21:e5:9f:c5:6f:
                    61:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4B:B8:1C:45:0F:65:FE:A1:9A:8A:55:41:68:39:F2:3C:E3:CD:58
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3135322e302f32312d3231203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.144.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         26:c2:5c:42:6b:23:fd:31:c3:20:69:7b:9d:8f:32:07:73:de:
         f4:13:cf:30:97:20:e2:9c:74:6a:53:3e:cd:c4:d2:a1:3d:c7:
         87:bc:d7:10:34:80:8e:d4:d7:dd:92:c5:1b:17:9f:83:60:59:
         3a:3c:e5:16:7b:6d:3f:64:5c:f0:84:66:7a:28:c4:27:24:d7:
         e8:18:f6:fa:08:16:5d:52:0e:3b:d9:69:83:23:d5:e3:3c:a8:
         f0:6e:29:66:ec:ee:e5:30:87:29:c9:53:6b:a3:55:a1:d3:e0:
         06:53:b8:c0:0d:c1:67:62:1d:8e:e0:e3:27:90:52:8e:61:6b:
         b8:c2:f3:71:5d:9f:4e:8f:0b:5e:0c:b6:ee:de:13:ed:81:cc:
         c9:6e:01:f4:9b:d9:6d:24:26:1f:9e:3a:17:25:77:fd:07:f9:
         42:94:55:22:71:fa:b6:87:59:5b:06:d3:61:2b:6c:2a:67:85:
         a7:00:40:c6:7a:ad:6f:27:3f:07:7a:91:44:1d:59:21:99:7b:
         66:12:49:f0:0a:99:d7:44:36:c4:b0:d5:ee:7d:d1:0b:4a:c3:
         c8:e0:27:91:09:06:f8:16:f7:20:99:68:f7:55:e6:cb:49:53:
         4b:e2:94:f4:f0:8f:a6:13:f9:37:20:cf:84:78:37:31:4b:4d:
         66:db:9d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:19:22 2026 by rpki-client