Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e302e302f32342d3234203d3e203233373234.roa
File:                     3130312e3139382e302e302f32342d3234203d3e203233373234.roa (raw, json)
Hash identifier:          hp6B12FfJ2NWJSRywUfmksUaSjZWVViWC2lR+GLaE7A=
Subject key identifier:   15:5A:34:50:DA:A8:03:72:D1:9E:ED:5A:5B:F0:06:8E:EF:35:8A:1B
Certificate issuer:       /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial:       3C694720882A6688AA78E750644346F9795EA56F
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e302e302f32342d3234203d3e203233373234.roa
Signing time:             Thu 21 May 2026 16:09:56 +0000
ROA not before:           Thu 21 May 2026 16:04:56 +0000
ROA not after:            Thu 20 May 2027 16:09:56 +0000
asID:                     23724
IP address blocks:        101.198.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:69:47:20:88:2a:66:88:aa:78:e7:50:64:43:46:f9:79:5e:a5:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
        Validity
            Not Before: May 21 16:04:56 2026 GMT
            Not After : May 20 16:09:56 2027 GMT
        Subject: CN=155A3450DAA80372D19EED5A5BF0068EEF358A1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1c:ff:cf:dd:3b:aa:cb:64:d7:15:f8:11:66:
                    a2:f2:be:33:0d:0a:d1:7a:bb:b0:83:7c:8d:7e:30:
                    f7:05:90:21:92:41:2c:08:17:f9:67:36:ca:2d:35:
                    54:4b:97:87:21:50:21:bf:d1:87:90:b9:e3:f4:90:
                    6b:16:ca:0f:18:d9:ff:fd:17:49:89:1e:f8:d3:1d:
                    80:05:17:fb:0b:c8:3a:8a:dd:c5:f7:76:1a:d2:c9:
                    06:2a:12:4c:69:a1:9c:74:89:05:5d:a6:1e:1f:70:
                    84:67:ac:d8:24:80:28:d5:fb:a8:66:78:c9:44:18:
                    02:be:d9:b7:b7:e1:2d:d2:74:b6:cd:ad:f5:73:1d:
                    ba:b8:fc:41:8c:ed:ae:04:3d:0f:78:e6:a3:78:9d:
                    e2:db:f7:0d:42:eb:8a:69:dd:36:bb:b3:82:60:92:
                    4c:92:de:fc:1e:af:30:1c:04:34:98:c7:bb:8a:14:
                    58:46:76:56:e7:79:6f:3e:67:64:20:64:1b:d7:e3:
                    be:9b:65:d5:2d:1a:c5:2b:52:12:5b:e0:7a:7b:a2:
                    a3:ef:82:19:8f:4a:77:9b:f5:00:43:5b:93:99:71:
                    58:38:73:c8:e5:0f:87:52:e1:93:ad:5e:f1:04:53:
                    0e:b6:20:b1:cb:79:5c:28:6f:1d:dc:33:e9:ea:e6:
                    77:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5A:34:50:DA:A8:03:72:D1:9E:ED:5A:5B:F0:06:8E:EF:35:8A:1B
            X509v3 Authority Key Identifier:
                keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e302e302f32342d3234203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.198.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:5f:85:11:db:d2:b0:26:1d:e4:01:7a:19:48:85:04:cd:a2:
         fd:8d:1b:c6:81:e1:8e:9d:7b:85:f1:a8:43:43:5d:06:48:bb:
         84:e7:79:a3:d0:b5:ea:7c:05:2b:c1:e9:5d:8a:10:b6:61:21:
         69:4f:9b:3a:ad:43:19:fb:80:0d:7f:58:cd:67:90:8a:9d:07:
         41:e2:41:3e:1c:1a:21:ea:4f:39:0e:93:41:ea:fa:8b:a8:fd:
         eb:c6:7b:3f:0b:e6:60:c4:ee:88:fe:50:4b:1f:2d:fe:6c:fb:
         56:08:3f:3d:73:85:51:90:20:35:30:7d:a4:73:dc:a1:56:ae:
         df:02:f5:c1:cd:25:b9:79:ed:01:07:79:a8:17:11:0e:4a:d1:
         a5:93:c6:a4:47:08:50:64:df:71:29:32:c3:0f:44:2d:2f:7f:
         cd:70:bf:99:16:da:88:c9:b7:e3:5a:66:e8:35:60:5d:b5:06:
         f0:12:c1:8a:5e:c8:ed:b3:d3:5d:5c:a4:34:76:88:2b:60:ed:
         32:df:f7:52:cb:5a:e8:b2:26:61:5a:35:b9:8e:db:15:cb:51:
         5a:5c:2f:af:1b:54:7a:35:11:97:02:f8:be:12:da:66:50:96:
         4a:a2:17:03:46:bc:43:a2:e2:89:c7:05:0c:95:08:62:5d:05:
         ae:68:d0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:06 2026 by rpki-client