Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3232302e3130312e3230382e302f32332d3233203d3e203536303438.roa
File:                     3232302e3130312e3230382e302f32332d3233203d3e203536303438.roa (raw, json)
Hash identifier:          2X5fQ93GwnxfYgXYUOJR3gq9YMyqB01ru1TGY8eL0AU=
Subject key identifier:   9A:FF:CE:CC:21:3A:95:4C:50:FF:67:4B:C9:8C:BA:D4:79:B5:E0:C9
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       77EE62E4BA10DA85011EDA264E1E28BEBF642F81
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3232302e3130312e3230382e302f32332d3233203d3e203536303438.roa
Signing time:             Fri 18 Sep 2026 02:43:07 +0000
ROA not before:           Fri 18 Sep 2026 02:38:07 +0000
ROA not after:            Fri 17 Sep 2027 02:43:07 +0000
asID:                     56048
IP address blocks:        220.101.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 12:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ee:62:e4:ba:10:da:85:01:1e:da:26:4e:1e:28:be:bf:64:2f:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Sep 18 02:38:07 2026 GMT
            Not After : Sep 17 02:43:07 2027 GMT
        Subject: CN=9AFFCECC213A954C50FF674BC98CBAD479B5E0C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:7e:2b:63:ea:d1:2d:15:5e:6b:80:f3:19:
                    22:0b:e4:76:b0:3a:f2:6e:70:e1:d3:33:a6:47:4a:
                    45:aa:5f:15:c9:53:87:82:48:95:6d:0d:a3:37:05:
                    a8:ff:1d:37:8e:bb:eb:bc:e4:23:ea:7a:73:85:d1:
                    8c:1a:c3:2f:ee:a6:75:e7:21:bb:e3:23:ec:bb:56:
                    5f:09:eb:f6:bf:6d:75:b1:ca:05:96:fa:d2:71:24:
                    e9:61:e0:fe:99:7b:41:5d:b8:3f:0f:9c:54:70:96:
                    9c:d7:30:83:ae:37:cf:ed:c2:c1:e9:9a:b1:0b:95:
                    6e:c6:3e:0f:66:81:41:9f:4c:3e:dd:d5:f7:37:2b:
                    82:a8:87:ec:0e:e1:ff:bf:7d:f6:6b:39:e1:af:c2:
                    14:9c:92:02:dc:2d:e5:0d:46:f4:a7:1b:06:5f:b3:
                    fe:9c:5d:99:31:7f:69:26:85:a5:9f:33:73:16:78:
                    db:86:eb:71:64:20:04:67:c3:6e:38:da:81:4b:99:
                    a1:e7:64:c4:1e:44:fa:c0:8e:8f:4c:00:86:88:40:
                    20:42:2f:29:c7:68:d1:fb:e0:15:20:e5:c8:93:7c:
                    9f:f4:ec:ce:f6:4a:8f:c4:d1:da:b2:02:0c:8e:de:
                    04:79:27:47:51:ad:08:59:64:98:4e:b9:7f:32:7e:
                    68:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FF:CE:CC:21:3A:95:4C:50:FF:67:4B:C9:8C:BA:D4:79:B5:E0:C9
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3232302e3130312e3230382e302f32332d3233203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.101.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:5e:a2:4c:c8:28:c9:b2:48:c4:d6:72:a9:2e:01:a2:f6:1c:
         17:4c:48:29:55:4f:5f:c5:55:fd:33:1f:a0:03:37:2f:e1:26:
         69:5e:e3:fc:63:23:f7:80:a8:39:70:d8:09:45:67:12:90:65:
         7b:dc:53:ba:e1:bf:42:91:7f:1c:cb:a0:68:50:30:3d:d4:32:
         2c:a2:28:2f:dd:de:86:9f:2f:12:49:82:ea:89:48:2d:b9:92:
         dc:49:16:ea:a4:01:1d:cb:ed:b2:da:1f:c2:e7:88:57:f1:ca:
         b0:2e:04:ea:e5:99:65:0a:10:90:c0:33:36:f7:3d:07:1a:64:
         cb:20:b6:3a:2e:a0:09:bd:1c:90:a1:da:4f:98:6f:fa:58:06:
         37:09:1c:54:5d:d2:78:1e:32:73:1c:66:2c:08:66:fc:77:8f:
         96:d6:5f:50:fd:e2:a3:a6:f7:6c:7a:03:73:a3:e5:42:ae:6e:
         4c:ed:3b:3e:30:f2:ab:cb:b4:7e:5e:b9:be:86:e7:b6:c0:70:
         44:90:10:b2:d9:ef:a7:91:c3:68:12:26:c1:d4:37:de:4a:0f:
         dd:0c:0b:db:73:f7:ff:f3:01:b5:aa:9c:82:02:e0:73:79:50:
         10:c4:f6:40:02:b3:d3:f5:9e:31:ca:d2:d6:ce:db:50:fd:ee:
         0f:cd:f2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:47:01 2026 by rpki-client