Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100991880549629955/0/3130312e34392e3132382e302f31382d3138203d3e2030.roa
File:                     3130312e34392e3132382e302f31382d3138203d3e2030.roa (raw, json)
Hash identifier:          EQ/aHDyPfGrqHqi7zcwJ4BpwFk8LfHUqOf3EobqjPg4=
Subject key identifier:   AE:FF:2A:AA:FD:5A:D3:1D:FA:7A:EC:35:7F:B7:B2:71:36:10:FF:53
Certificate issuer:       /CN=060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD
Certificate serial:       1088ADD7F26C6ABC8A1CA149068FEE6C5AC496CF
Authority key identifier: 06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/3130312e34392e3132382e302f31382d3138203d3e2030.roa
Signing time:             Mon 27 Apr 2026 03:50:23 +0000
ROA not before:           Mon 27 Apr 2026 03:45:23 +0000
ROA not after:            Mon 26 Apr 2027 03:50:23 +0000
asID:                     0
IP address blocks:        101.49.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 04:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:88:ad:d7:f2:6c:6a:bc:8a:1c:a1:49:06:8f:ee:6c:5a:c4:96:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD
        Validity
            Not Before: Apr 27 03:45:23 2026 GMT
            Not After : Apr 26 03:50:23 2027 GMT
        Subject: CN=AEFF2AAAFD5AD31DFA7AEC357FB7B2713610FF53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:88:3c:9b:62:fb:9b:70:31:e1:a9:c4:31:01:
                    2c:ff:40:e3:a4:00:e2:21:2d:8f:99:fe:98:48:5e:
                    d9:b7:67:a9:b3:58:65:0c:28:fa:9a:0b:01:b4:dd:
                    6c:ed:f3:ea:00:ef:6d:87:0d:06:41:6f:79:23:89:
                    a7:83:95:87:24:d8:c4:52:00:3a:96:7f:12:02:c5:
                    64:ba:03:0e:18:8c:9c:d4:8f:81:70:6b:a2:77:50:
                    65:1b:e6:54:a3:a7:c6:8b:95:17:b2:b4:98:33:fa:
                    e4:7f:e5:ed:43:aa:07:5e:9b:79:5c:34:13:36:55:
                    dd:2f:23:c7:67:cc:26:c2:45:44:d4:10:e0:11:04:
                    a9:9c:d1:f3:b6:1e:de:68:0a:ac:fd:34:5d:fe:d9:
                    8c:a9:fe:ac:41:b7:44:05:b7:d2:fe:a9:b7:15:b7:
                    64:56:57:cc:9c:f2:a2:4e:25:d6:51:d4:a9:0d:22:
                    d8:7b:4a:c2:88:7c:01:56:f3:75:25:f2:4c:b2:40:
                    01:55:ae:8f:7a:1f:cf:d7:a8:17:d8:28:f3:2c:e0:
                    31:59:c7:a4:2d:6e:ce:96:4d:ab:8a:ec:0c:e1:78:
                    b6:38:be:9a:da:5a:77:d8:85:66:61:40:19:53:f2:
                    6f:21:89:2c:59:5e:c1:dc:b7:e1:bf:ef:36:01:9f:
                    48:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FF:2A:AA:FD:5A:D3:1D:FA:7A:EC:35:7F:B7:B2:71:36:10:FF:53
            X509v3 Authority Key Identifier:
                keyid:06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/3130312e34392e3132382e302f31382d3138203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.49.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a0:da:00:2d:1b:da:2d:dc:dc:81:f7:b8:39:74:57:1f:c7:55:
         53:fc:86:ad:b2:0b:8b:d2:c3:5e:8b:f4:72:77:95:e2:de:b2:
         92:32:bc:fc:d6:53:f4:70:a8:0f:49:9f:3d:95:f1:9a:a8:af:
         c4:db:5e:46:53:e7:9a:5d:71:91:0f:70:7d:fe:b1:60:64:91:
         40:27:4e:d5:a1:03:e4:64:2d:1b:40:34:cd:14:ca:c9:2e:b6:
         b0:a1:d5:43:7c:f9:eb:0e:0e:e3:8b:41:6a:ac:12:b5:95:a4:
         32:a7:66:37:34:45:b1:b4:73:45:9a:e1:c1:6f:48:41:d6:fc:
         4e:70:8a:91:b5:a0:fb:29:4c:d9:1d:cb:ec:d1:4d:e4:a7:af:
         35:ac:fc:58:e2:6e:b7:9c:b1:f9:3c:57:75:3b:2d:d4:91:d9:
         69:d9:00:b2:d2:59:1d:0d:72:4a:91:39:72:21:51:d6:22:f9:
         fa:f8:9d:90:15:cb:59:78:a1:f9:c5:5b:05:ea:84:1c:4d:1e:
         bf:97:f3:7c:59:59:ee:46:35:0a:48:00:69:fa:c3:1f:4b:fb:
         34:0b:57:a0:dc:ec:36:e6:4c:2a:50:31:d0:4f:60:6d:af:ce:
         92:b6:af:8c:3f:b3:0c:4a:b3:2b:65:00:a4:45:d1:3c:13:c4:
         33:19:19:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:10:47 2026 by rpki-client