Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e38382e302f32322d3232203d3e203536303438.roa
File:                     3231312e3136372e38382e302f32322d3232203d3e203536303438.roa (raw, json)
Hash identifier:          ssOo4tF9svPfeqdeCxDM9A7gdFtChW1YDpGUbTeDtXA=
Subject key identifier:   0C:95:AF:46:2D:B0:B6:3F:5F:7D:F3:FA:23:0B:ED:10:B6:5B:12:67
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       4D6735A00A2217935E3D5A1C9E99A0DC8DDE38B8
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e38382e302f32322d3232203d3e203536303438.roa
Signing time:             Fri 18 Sep 2026 02:40:52 +0000
ROA not before:           Fri 18 Sep 2026 02:35:52 +0000
ROA not after:            Fri 17 Sep 2027 02:40:52 +0000
asID:                     56048
IP address blocks:        211.167.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:04:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:67:35:a0:0a:22:17:93:5e:3d:5a:1c:9e:99:a0:dc:8d:de:38:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Sep 18 02:35:52 2026 GMT
            Not After : Sep 17 02:40:52 2027 GMT
        Subject: CN=0C95AF462DB0B63F5F7DF3FA230BED10B65B1267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:df:5d:06:26:bf:c2:f3:e7:ef:6a:9c:8a:9e:
                    f2:59:1f:63:f5:e9:63:18:0e:a2:47:13:96:fe:e1:
                    2e:6f:6b:e8:0a:35:c0:cf:1c:d4:58:74:53:35:72:
                    6a:c5:5c:ff:7d:d0:5d:54:68:48:03:c3:5e:8a:9d:
                    72:88:69:67:ef:0d:be:a8:90:1f:c4:89:1a:cc:e8:
                    55:f7:63:09:df:12:1c:0a:c0:4f:2e:07:47:67:e0:
                    e2:1a:83:da:c6:f2:f7:c8:87:0e:72:d7:0c:e8:b0:
                    d3:94:6e:0c:11:56:0b:ca:e2:f9:07:f4:58:74:69:
                    7c:47:b0:2d:02:d5:5e:09:ec:c3:6d:c6:b3:a2:0d:
                    9e:98:ee:4b:b5:0c:5e:3b:6c:5a:a2:89:62:af:78:
                    3b:ba:91:e5:8c:7d:a4:6b:eb:f9:24:a6:73:45:8e:
                    04:86:18:8b:5a:8c:67:0f:13:c4:df:ed:d7:46:d5:
                    c0:6a:30:82:2d:e9:5d:d4:21:0b:0d:22:ab:d4:5d:
                    ca:43:11:94:82:d1:c3:16:70:b3:d5:de:42:0a:69:
                    71:40:f9:02:5c:19:0f:6d:26:39:63:64:7a:a5:4b:
                    9d:06:cb:13:2b:f4:1c:65:3e:b8:ed:55:3f:8e:34:
                    9e:25:c3:5a:81:c9:70:a1:83:81:e2:a8:ee:7b:23:
                    fb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:95:AF:46:2D:B0:B6:3F:5F:7D:F3:FA:23:0B:ED:10:B6:5B:12:67
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e38382e302f32322d3232203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.167.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:58:d3:99:68:00:47:cd:ec:d5:5b:eb:ae:22:c0:e8:e1:a4:
         ef:fa:2b:c4:af:98:4d:9a:d8:bd:d3:fd:9c:55:a4:78:ea:ff:
         d9:03:bd:37:40:09:6e:12:ae:89:0c:85:ba:2a:63:bc:4f:0d:
         1d:24:fd:36:1e:9c:b2:6f:a3:ed:65:23:02:c7:c0:12:0e:f8:
         31:8e:2c:6b:5c:de:b9:eb:03:46:24:83:74:67:a3:74:3f:fe:
         fa:d1:70:69:15:7d:c6:69:2f:dc:e6:da:1f:7c:19:82:96:ae:
         b8:83:49:ae:c2:6a:b1:cf:fb:2c:e9:2a:ed:01:c6:52:66:70:
         b3:6a:bc:bc:51:e5:9c:ee:96:45:c9:a5:38:c2:b8:bf:c4:61:
         a1:e5:35:c5:fb:9b:c4:3f:4b:fc:38:f1:49:c0:36:79:ad:75:
         92:c4:a5:4b:0d:b8:d4:9e:81:13:0b:1c:42:9b:41:d6:17:81:
         9b:05:49:ae:ff:be:6d:45:ec:45:18:41:19:89:55:ca:10:c1:
         29:6b:58:65:48:9e:f2:04:80:6a:80:22:66:82:f1:ed:b2:78:
         d6:be:8d:3f:13:7b:97:f7:52:b5:ae:f5:00:9d:9a:32:49:d6:
         ac:8a:1a:51:73:46:8c:ae:81:8d:d9:6c:6a:95:ce:88:1a:9f:
         3f:21:a6:e6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Sep 28 23:31:39 2026 by rpki-client