Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e33322e302f31392d3139203d3e203536303438.roa
File:                     3231312e3134342e33322e302f31392d3139203d3e203536303438.roa (raw, json)
Hash identifier:          prq+VCaCCoU1pkzHvtysCvj9T9IbNvD2jjfRruxHZXc=
Subject key identifier:   79:0E:9D:05:6C:E5:47:D3:4B:1E:95:D3:18:EA:64:CD:77:D7:50:42
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       168B92F6F35C09B3ED05F8ED32A9BA5BA517F7B0
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e33322e302f31392d3139203d3e203536303438.roa
Signing time:             Fri 18 Sep 2026 02:34:47 +0000
ROA not before:           Fri 18 Sep 2026 02:29:47 +0000
ROA not after:            Fri 17 Sep 2027 02:34:47 +0000
asID:                     56048
IP address blocks:        211.144.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 03:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8b:92:f6:f3:5c:09:b3:ed:05:f8:ed:32:a9:ba:5b:a5:17:f7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Sep 18 02:29:47 2026 GMT
            Not After : Sep 17 02:34:47 2027 GMT
        Subject: CN=790E9D056CE547D34B1E95D318EA64CD77D75042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f9:33:bb:12:a6:53:65:13:28:31:e6:8d:83:
                    d7:c3:20:68:ac:82:a3:f4:75:d0:ad:a2:8a:fc:a2:
                    8d:40:63:47:cb:0e:a5:60:98:f6:7d:6c:ab:79:cc:
                    cd:c8:2a:27:00:1f:a7:a9:2d:56:8d:93:5e:47:55:
                    a0:cb:03:58:2c:88:c9:69:be:e7:9c:c1:b3:aa:25:
                    d9:87:46:7d:ca:8a:4b:7d:ca:ca:95:ac:41:7e:6e:
                    6f:59:77:3a:3e:a1:fc:7d:6f:a3:e6:20:0e:f9:f2:
                    a9:d9:a7:70:38:d7:04:a9:bb:4a:9b:9f:6e:5e:81:
                    43:a0:fd:5e:6e:2c:c7:50:2a:3b:47:89:50:f7:f4:
                    95:fb:18:4a:de:58:60:56:fa:c5:95:d9:32:fb:65:
                    ab:42:8e:9b:ce:a2:55:f2:23:ba:f5:e2:4b:32:c0:
                    64:ff:b2:ee:80:d3:db:37:cc:5f:a7:9b:19:c9:96:
                    43:17:e0:46:1d:51:61:e0:ca:11:e1:de:64:0b:4c:
                    9f:a3:68:7a:5c:79:6e:96:d4:ea:d7:25:c7:91:b3:
                    a4:47:10:35:f7:8e:82:7d:48:c7:ef:41:65:fe:d7:
                    0f:ea:69:25:b5:1f:3e:86:c5:af:7e:a7:81:44:27:
                    4e:13:40:7d:1c:1d:fc:7b:59:48:26:1c:6f:d8:ab:
                    f1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0E:9D:05:6C:E5:47:D3:4B:1E:95:D3:18:EA:64:CD:77:D7:50:42
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e33322e302f31392d3139203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.144.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4a:c1:80:7b:e1:91:ba:c0:3f:49:7f:f0:2f:fc:0e:1b:19:31:
         8f:c5:d5:c6:4b:e8:a1:87:ed:0b:22:1b:8b:7b:43:5a:6a:5a:
         57:40:43:f7:6c:ca:18:0c:a0:9a:5e:49:5c:9f:7d:71:fa:51:
         0c:79:37:6f:6e:21:b7:58:0e:95:af:ec:1c:07:cf:67:34:ff:
         af:6d:72:b8:e0:3a:ea:a9:98:95:9a:83:91:a1:d8:a1:9b:64:
         0c:b1:9c:ca:93:8a:2a:9b:2b:9d:ca:c0:31:f9:79:b7:15:34:
         58:00:32:9d:8a:9c:b9:3d:51:66:47:3e:4b:6f:3c:4f:b5:3a:
         64:76:e5:d8:b9:3b:24:0e:8a:a1:12:ef:f7:f7:b3:65:93:40:
         82:98:c6:9b:4a:b7:b0:2f:3a:dd:69:ab:6e:c0:7c:5e:d7:ca:
         0c:0f:0a:79:4d:71:11:26:c4:d0:ab:7f:f8:f9:de:48:b9:1a:
         0d:34:43:a9:50:e8:18:bf:ab:f9:26:42:e1:8b:a7:67:a6:9a:
         7c:7f:ae:24:50:50:aa:64:ed:f2:5f:52:26:77:6b:68:25:f8:
         c9:da:6a:d7:f0:08:f7:53:73:0d:d2:4b:6c:28:48:3d:1a:32:
         3e:1e:95:06:4a:57:68:3a:a5:a2:95:ee:bf:2d:0a:09:4c:af:
         ae:0f:f9:58
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:53:25 2026 by rpki-client