Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1119132680957460509/0/3230332e3139312e3134342e302f32312d3231203d3e2034313334.roa
File:                     3230332e3139312e3134342e302f32312d3231203d3e2034313334.roa (raw, json)
Hash identifier:          tGiD6c4OZZSCvdQK4ZpRZIKEL8iXBWQA8ghL+vZtpB4=
Subject key identifier:   24:99:5B:08:03:B5:01:83:C7:75:B4:A0:1C:AF:13:9B:98:C6:B8:6A
Certificate issuer:       /CN=A911DD4C0000/serialNumber=75788E15351A624A2A528D3D451C027A72F6A7A6
Certificate serial:       507C1A0DAD1C1D09A480C213196EEA89545972F1
Authority key identifier: 75:78:8E:15:35:1A:62:4A:2A:52:8D:3D:45:1C:02:7A:72:F6:A7:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXiOFTUaYkoqUo09RRwCenL2p6Y.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/3230332e3139312e3134342e302f32312d3231203d3e2034313334.roa
Signing time:             Tue 30 Jun 2026 03:59:13 +0000
ROA not before:           Tue 30 Jun 2026 03:54:13 +0000
ROA not after:            Tue 29 Jun 2027 03:59:13 +0000
asID:                     4134
IP address blocks:        203.191.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/75788E15351A624A2A528D3D451C027A72F6A7A6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/75788E15351A624A2A528D3D451C027A72F6A7A6.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXiOFTUaYkoqUo09RRwCenL2p6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:7c:1a:0d:ad:1c:1d:09:a4:80:c2:13:19:6e:ea:89:54:59:72:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DD4C0000, serialNumber=75788E15351A624A2A528D3D451C027A72F6A7A6
        Validity
            Not Before: Jun 30 03:54:13 2026 GMT
            Not After : Jun 29 03:59:13 2027 GMT
        Subject: CN=24995B0803B50183C775B4A01CAF139B98C6B86A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fc:23:a8:70:cf:e3:0f:51:ce:de:f6:39:60:
                    1d:0c:57:13:e7:79:b3:09:54:15:2f:b2:c6:9d:3b:
                    9d:61:5a:28:9c:57:f7:f4:7f:ab:63:88:03:cb:d5:
                    2e:86:32:ad:f8:3c:51:e8:7b:09:10:ce:48:8b:75:
                    3a:c4:9c:74:a8:a8:c5:84:82:33:b2:bd:68:3f:30:
                    9d:3e:e5:52:cc:fc:d4:91:9d:7d:a4:3b:d4:e7:53:
                    a1:7c:16:0e:c3:7d:12:9b:5a:06:a4:cc:07:bd:94:
                    30:eb:2c:8c:eb:0e:77:3f:dd:3f:8a:ef:0a:34:af:
                    24:7b:e0:56:91:7a:39:01:1c:50:4c:c1:e9:1a:21:
                    d8:e3:00:fe:85:3d:ab:10:70:11:b1:1f:46:9a:41:
                    60:de:ba:83:0a:6a:e8:70:9a:6c:16:6e:31:d5:76:
                    64:6d:ed:b2:67:bb:93:47:bf:f3:64:8b:a3:2b:2f:
                    13:6d:98:47:ef:f3:3b:5a:a2:ee:43:81:0a:59:ab:
                    66:34:34:ac:d7:36:9d:2f:a8:9c:ad:bb:7a:c3:f9:
                    62:a9:84:38:e3:a4:b3:8f:1e:31:6b:e6:70:75:80:
                    5d:8a:f7:76:f7:bc:c7:d3:84:5f:69:74:c8:59:9c:
                    5e:1e:dc:65:38:d7:58:be:26:ae:12:55:7c:b4:c6:
                    d2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:99:5B:08:03:B5:01:83:C7:75:B4:A0:1C:AF:13:9B:98:C6:B8:6A
            X509v3 Authority Key Identifier:
                keyid:75:78:8E:15:35:1A:62:4A:2A:52:8D:3D:45:1C:02:7A:72:F6:A7:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/75788E15351A624A2A528D3D451C027A72F6A7A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXiOFTUaYkoqUo09RRwCenL2p6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/3230332e3139312e3134342e302f32312d3231203d3e2034313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.191.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         69:2b:08:f4:24:b7:ce:ee:d5:a9:60:a5:1b:c3:a2:14:13:2b:
         3c:45:a0:ad:c3:8c:d1:ac:54:48:82:28:c9:d5:b4:5a:25:3d:
         d9:86:cb:45:4e:fd:f5:0a:7c:ed:be:15:9a:c2:ed:66:43:03:
         28:ed:94:51:af:52:97:68:60:19:cf:77:19:43:bd:68:9b:dc:
         d4:8b:46:81:1e:b2:e2:49:af:80:56:64:55:60:76:3b:a9:bb:
         ae:f1:dc:88:e5:ed:a5:85:1b:fb:a0:eb:d3:d2:65:e1:16:e1:
         5c:3b:8c:5e:fc:43:0a:63:bd:60:49:94:b1:32:d5:7d:3c:e7:
         9f:f8:56:c1:19:1a:09:24:7a:16:a1:8b:9a:77:68:fb:51:59:
         81:ee:aa:90:23:73:6b:8d:be:52:52:fb:81:50:44:8f:33:f9:
         8c:a6:e4:ba:db:cd:2b:9b:4c:04:d0:00:3b:62:77:46:59:83:
         fb:2e:b3:63:94:10:8f:9b:c2:dd:01:8d:2c:c6:a0:e8:da:9d:
         a6:57:e2:dd:c8:4c:02:64:b2:f4:fd:d6:98:e5:71:66:6a:2f:
         6e:2a:a1:c6:54:de:04:ed:c0:0e:59:06:3c:26:bf:2d:38:fe:
         35:74:2f:05:98:b4:18:0f:a6:0e:b1:f2:18:c4:e4:c4:dc:aa:
         7b:67:58:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:39:31 2026 by rpki-client