Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139372e302e302f31362d3136203d3e203535393932.roa
File:                     3130312e3139372e302e302f31362d3136203d3e203535393932.roa (raw, json)
Hash identifier:          1WQYGe6bJIPr7QdCQN/m4oApZZCzm9+ST3t3hRZwnuI=
Subject key identifier:   A4:37:42:37:07:C8:01:AA:BD:D3:EE:36:AB:65:7A:43:EC:BB:C3:AC
Certificate issuer:       /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial:       46ABEBBAC2721521EE40026D47A131BE3AA8A056
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139372e302e302f31362d3136203d3e203535393932.roa
Signing time:             Wed 17 Jun 2026 16:15:16 +0000
ROA not before:           Wed 17 Jun 2026 16:10:16 +0000
ROA not after:            Wed 16 Jun 2027 16:15:16 +0000
asID:                     55992
IP address blocks:        101.197.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 19:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ab:eb:ba:c2:72:15:21:ee:40:02:6d:47:a1:31:be:3a:a8:a0:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
        Validity
            Not Before: Jun 17 16:10:16 2026 GMT
            Not After : Jun 16 16:15:16 2027 GMT
        Subject: CN=A437423707C801AABDD3EE36AB657A43ECBBC3AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:29:4e:a4:a1:dd:2c:ee:af:39:aa:20:a3:f3:
                    61:1f:95:0c:6f:6b:42:03:f3:fa:1b:b5:08:7c:96:
                    44:94:b6:43:18:99:67:ce:7a:77:e0:de:f3:21:42:
                    d3:89:18:63:b3:66:af:77:e7:fe:8c:ae:0c:98:85:
                    c8:83:66:75:c2:06:89:18:10:c4:eb:35:9d:cc:f9:
                    8c:3f:20:db:8c:41:b0:b5:28:54:79:32:30:f8:a9:
                    10:38:9a:b9:a9:06:be:3f:e8:20:8c:95:c1:7a:49:
                    c6:41:22:9b:a7:1f:9f:c6:02:0e:c9:21:61:65:2e:
                    88:87:5b:84:33:23:bc:4f:3f:7b:25:f4:f6:c2:31:
                    10:a6:44:7d:20:64:54:d3:ad:cc:67:07:8a:6d:5c:
                    dc:f0:9a:3d:7e:36:d1:49:3f:92:0f:e5:cd:1f:f7:
                    1e:ab:c7:63:bf:51:db:00:7c:fb:00:9a:c8:05:02:
                    fd:ce:6c:3d:6b:9b:98:9b:92:1b:7a:28:85:98:36:
                    65:02:2f:4a:e6:f6:ee:e4:04:f9:2f:15:2e:04:c4:
                    46:ff:19:b3:05:76:a4:21:91:70:28:ec:ac:41:ad:
                    35:12:25:a8:35:0d:09:83:5e:6d:68:21:32:30:6a:
                    48:6b:36:49:35:8c:14:91:6d:04:44:27:5d:81:66:
                    8e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:37:42:37:07:C8:01:AA:BD:D3:EE:36:AB:65:7A:43:EC:BB:C3:AC
            X509v3 Authority Key Identifier:
                keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139372e302e302f31362d3136203d3e203535393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.197.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b3:63:cb:0c:64:5f:e0:01:d3:5e:b1:7a:f0:67:2d:9e:ce:4f:
         89:e3:01:3b:18:5a:08:95:ae:e1:d1:36:0d:18:fc:df:f4:5a:
         dc:44:fb:67:6f:d6:62:b0:56:f7:7c:1e:68:39:49:78:01:24:
         6e:17:f2:8d:bd:aa:89:85:d0:9f:9b:74:b1:e3:91:1a:2f:83:
         75:17:9b:57:bd:8a:77:11:dc:af:fe:21:50:73:f2:07:7c:a7:
         df:b0:b5:64:68:57:24:19:c5:c6:78:42:2e:b1:54:7a:39:92:
         de:2b:ec:03:dc:e3:a5:03:18:08:79:f4:ea:20:40:f8:ae:cb:
         48:c5:22:ee:37:1f:61:7d:7a:87:31:00:ce:a0:29:82:4e:7c:
         f7:b8:fb:72:26:a6:31:c9:05:92:18:84:47:43:d9:07:4e:13:
         eb:ea:13:a7:df:45:d7:2f:3d:14:b9:fa:be:cb:65:5b:4f:77:
         bf:30:46:31:b0:4f:6d:ac:52:27:eb:de:26:6c:17:55:64:bb:
         c8:c7:0a:a0:3f:0c:d6:37:5a:4e:ae:b8:9d:e6:96:25:15:6c:
         f0:5f:98:d8:37:63:eb:36:a1:2f:2b:a0:0b:8d:b2:39:01:c0:
         8f:08:6a:4f:20:47:b7:10:13:a5:fc:18:7f:3b:ed:95:69:c7:
         39:44:b4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:23 2026 by rpki-client