Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e33322e302f32312d3231203d3e203536303438.roa
File:                     3231312e3134342e33322e302f32312d3231203d3e203536303438.roa (raw, json)
Hash identifier:          X44rJcH5LHmL7MhDML5SRolNl+RFOlgqWFik/uYhZkU=
Subject key identifier:   01:C6:E8:3C:84:B0:00:E2:25:33:61:20:21:B3:EA:19:A9:2C:2B:92
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       3C4ABEAF7924D48FA100CBC60160C3F044EDA997
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e33322e302f32312d3231203d3e203536303438.roa
Signing time:             Fri 18 Sep 2026 02:34:36 +0000
ROA not before:           Fri 18 Sep 2026 02:29:36 +0000
ROA not after:            Fri 17 Sep 2027 02:34:36 +0000
asID:                     56048
IP address blocks:        211.144.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:04:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:4a:be:af:79:24:d4:8f:a1:00:cb:c6:01:60:c3:f0:44:ed:a9:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Sep 18 02:29:36 2026 GMT
            Not After : Sep 17 02:34:36 2027 GMT
        Subject: CN=01C6E83C84B000E22533612021B3EA19A92C2B92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:00:36:56:4b:89:2b:eb:66:58:c2:5d:69:e9:
                    ce:de:40:37:9f:c2:5c:0b:b2:54:10:e4:80:4e:a1:
                    ff:3d:ef:f3:84:cd:1b:ce:3f:4c:22:1e:65:25:0b:
                    0e:fb:e8:69:27:97:fb:11:a0:ef:f7:ca:dc:6d:ed:
                    b0:1d:07:9c:9d:15:6d:b9:94:62:fb:89:d6:63:c0:
                    3c:38:6b:f6:35:6c:c9:53:34:4d:b8:21:02:82:68:
                    f7:a2:8b:87:6a:d0:e2:55:c5:35:8f:4f:d0:51:3e:
                    c1:e7:f6:a3:4a:04:49:1a:85:20:fb:99:52:8d:ec:
                    fe:8c:f4:3a:66:b4:e4:8d:17:07:9a:be:1a:d7:ec:
                    fb:fb:23:91:c4:ac:5e:59:87:cf:ed:dc:c8:60:64:
                    6c:0c:d5:1f:bf:1f:8b:fc:a3:51:55:f1:6e:29:51:
                    3d:49:95:c0:59:6c:c1:cf:71:2b:bf:45:f5:8a:9e:
                    c0:33:80:ef:95:96:38:7e:89:36:06:ff:b9:9d:80:
                    ba:65:b8:c4:88:ca:30:42:d3:5e:b6:ac:0c:f6:d4:
                    fb:d1:66:d0:2e:7d:66:45:cc:ac:e1:30:49:71:c5:
                    4e:0b:d2:47:9b:6d:65:2d:be:60:7c:16:d3:a5:a5:
                    ea:fa:80:ec:0f:30:8a:f6:31:96:96:03:c7:d8:26:
                    08:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C6:E8:3C:84:B0:00:E2:25:33:61:20:21:B3:EA:19:A9:2C:2B:92
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e33322e302f32312d3231203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.144.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1b:95:ed:db:24:4c:b7:89:f5:03:db:00:8c:aa:20:8f:99:50:
         e9:89:ac:39:26:01:e6:72:ee:39:56:ad:ed:47:63:11:56:f2:
         e1:c3:f7:cd:ae:ca:99:f7:64:f7:9f:81:03:f7:bb:92:89:08:
         8a:f0:12:b8:7d:70:f0:9b:a2:68:b1:a0:91:31:e2:8d:a7:b9:
         30:fc:93:f1:f4:a4:02:5c:6f:fe:fd:ee:e1:b9:10:c8:4c:93:
         80:82:30:4e:0a:cb:75:03:fa:08:84:56:f4:d8:00:0c:fe:bd:
         8c:d2:b4:58:12:06:41:87:e0:f3:82:a5:eb:b7:4d:ec:05:18:
         8f:b6:b7:fc:37:49:3e:c4:ff:86:75:35:a9:fa:de:c1:23:5f:
         bb:92:91:0d:33:b3:67:63:0b:77:de:bf:0e:6a:ae:eb:8c:15:
         1d:10:21:81:a3:e5:e2:bc:d0:0b:e6:ae:1e:40:4e:bd:cb:85:
         3c:03:4c:5d:63:d9:f0:5c:21:2a:df:de:f5:2a:52:45:6b:91:
         9d:50:b9:42:38:2a:fa:62:ab:81:e5:3f:78:db:31:81:76:a8:
         17:07:05:97:84:74:af:5c:6f:3b:4e:91:0a:d7:fa:ff:b6:76:
         64:fd:27:a5:6c:29:c7:f9:c5:e6:05:66:d4:61:8e:62:fa:d6:
         6e:7c:2c:2d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Sep 28 22:06:05 2026 by rpki-client