Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e312e302f32342d3234203d3e203233373234.roa
File:                     3130312e3139382e312e302f32342d3234203d3e203233373234.roa (raw, json)
Hash identifier:          p7G0oVepOshAGFAxB7LrNRLHf5pTYmCVPk6M7gRAuiE=
Subject key identifier:   F7:A3:48:F1:DD:D6:CA:57:6A:2C:AF:43:3B:2E:A9:86:48:52:68:C1
Certificate issuer:       /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial:       473E812A848A69F6FF094713F20999151205B30F
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e312e302f32342d3234203d3e203233373234.roa
Signing time:             Thu 21 May 2026 16:09:56 +0000
ROA not before:           Thu 21 May 2026 16:04:56 +0000
ROA not after:            Thu 20 May 2027 16:09:56 +0000
asID:                     23724
IP address blocks:        101.198.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:3e:81:2a:84:8a:69:f6:ff:09:47:13:f2:09:99:15:12:05:b3:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
        Validity
            Not Before: May 21 16:04:56 2026 GMT
            Not After : May 20 16:09:56 2027 GMT
        Subject: CN=F7A348F1DDD6CA576A2CAF433B2EA986485268C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:91:fb:28:ce:6c:88:73:8f:8e:d4:98:26:31:
                    e5:dd:c8:c9:58:fa:95:3d:e6:d7:ba:de:9a:cf:b1:
                    d4:80:64:52:bf:34:ef:aa:58:95:bf:34:94:78:b6:
                    79:2e:29:8f:bb:97:83:f8:cb:48:e8:f9:10:f5:93:
                    b6:48:5c:77:dd:23:ef:b4:cf:3a:75:8d:e4:f1:40:
                    36:2e:c6:fc:ae:ce:8e:c7:34:35:ff:d7:8d:98:71:
                    56:d4:87:0a:5e:b2:82:97:d9:dd:54:5d:ad:e9:3c:
                    22:c3:33:f6:09:f6:90:2b:4c:47:c2:b9:cd:3d:a0:
                    24:85:82:ff:2d:87:fb:6a:8a:0e:79:4c:46:cf:94:
                    7c:7c:e0:e4:69:6a:4b:5d:ab:51:90:56:74:f0:4d:
                    90:e6:08:b8:b9:2b:38:9c:66:fe:bf:a9:d1:87:22:
                    84:b9:28:ca:40:bb:35:01:f9:5b:8e:34:a9:e9:c5:
                    5a:e3:30:a4:da:fa:d1:75:9d:09:8a:de:08:5a:a6:
                    e9:97:fb:be:dd:95:f1:af:47:ad:ac:6e:ac:6e:25:
                    f1:cd:55:31:cd:ec:54:24:17:85:fa:d0:b5:73:21:
                    49:80:49:16:1b:d1:f0:61:b1:b3:50:ad:f2:10:60:
                    84:5e:e5:17:67:a4:4c:f2:d7:69:65:18:f5:bb:ea:
                    e2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A3:48:F1:DD:D6:CA:57:6A:2C:AF:43:3B:2E:A9:86:48:52:68:C1
            X509v3 Authority Key Identifier:
                keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e312e302f32342d3234203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.198.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:5e:9a:9d:27:76:d8:c7:4b:00:36:3c:5e:33:0c:7c:87:ff:
         10:e3:25:63:d0:54:d5:cd:b0:ef:f2:d4:bc:d3:3a:d5:7c:70:
         4d:dc:c8:e0:ee:80:3c:67:28:7e:4a:dd:c4:6f:3b:f1:20:31:
         1a:f2:9c:f5:a8:e3:ca:54:0a:00:09:b1:7e:a8:bc:14:fa:77:
         c6:88:76:23:ed:38:cb:f0:ef:49:ed:16:3b:c0:a3:d8:66:42:
         66:a9:c5:c4:f8:71:8b:a0:dd:a3:c8:fb:08:57:52:9a:e9:37:
         b8:b5:e4:1e:b7:3d:b1:f5:00:50:28:6a:58:8c:4f:05:97:3a:
         7d:5f:b4:63:9c:18:09:28:85:7d:13:e7:11:18:14:71:b5:48:
         38:4b:3a:f9:75:05:06:11:9b:c1:2d:27:ee:6e:13:f1:42:09:
         0d:10:b2:32:36:83:66:36:f8:b1:02:1a:76:8f:95:24:44:f2:
         44:7a:c1:9c:05:7a:5d:a7:30:bf:43:04:69:e5:3c:40:e9:8d:
         67:65:95:2f:b0:d0:81:08:90:c9:98:20:f0:40:27:9b:12:68:
         e2:d8:b9:6d:f3:3b:f3:99:16:76:3d:ee:e1:0e:61:6c:5e:18:
         4e:25:78:5e:52:19:53:2d:b9:c8:12:c2:cf:0b:bb:69:d5:c7:
         f1:6d:6c:71
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIURz6BKoSKafb/CUcT8gmZFRIFsw8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUyN0VFRjIyRUQ0QjkwMzQ5NDlDOTFFM0QzOUIyNEE2
OUZERjk4NDAeFw0yNjA1MjExNjA0NTZaFw0yNzA1MjAxNjA5NTZaMDMxMTAvBgNV
BAMTKEY3QTM0OEYxRERENkNBNTc2QTJDQUY0MzNCMkVBOTg2NDg1MjY4QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCukfsozmyIc4+O1JgmMeXdyMlY
+pU95te63prPsdSAZFK/NO+qWJW/NJR4tnkuKY+7l4P4y0jo+RD1k7ZIXHfdI++0
zzp1jeTxQDYuxvyuzo7HNDX/142YcVbUhwpesoKX2d1UXa3pPCLDM/YJ9pArTEfC
uc09oCSFgv8th/tqig55TEbPlHx84ORpaktdq1GQVnTwTZDmCLi5KzicZv6/qdGH
IoS5KMpAuzUB+VuONKnpxVrjMKTa+tF1nQmK3ghapumX+77dlfGvR62sbqxuJfHN
VTHN7FQkF4X60LVzIUmASRYb0fBhsbNQrfIQYIRe5RdnpEzy12llGPW76uIjAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU96NI8d3WyldqLK9DOy6phkhSaMEwHwYDVR0j
BBgwFoAUxSfu8i7UuQNJSckePTmySmn9+YQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njc2NzA4NDkyNDE3NDM1NS8wL0M1MjdFRUYyMkVENEI5MDM0OTQ5QzkxRTNEMzlC
MjRBNjlGREY5ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzUyN0VFRjIyRUQ0QjkwMzQ5NDlDOTFFM0QzOUIyNEE2OUZERjk4NC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA2NzY3MDg0OTI0MTc0MzU1LzAvMzEzMDMxMmUzMTM5
MzgyZTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM3MzIzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGXGATANBgkqhkiG9w0BAQsFAAOCAQEAMF6anSd22MdLADY8XjMMfIf/EOMl
Y9BU1c2w7/LUvNM61XxwTdzI4O6APGcofkrdxG878SAxGvKc9ajjylQKAAmxfqi8
FPp3xoh2I+04y/DvSe0WO8Cj2GZCZqnFxPhxi6Ddo8j7CFdSmuk3uLXkHrc9sfUA
UChqWIxPBZc6fV+0Y5wYCSiFfRPnERgUcbVIOEs6+XUFBhGbwS0n7m4T8UIJDRCy
MjaDZjb4sQIado+VJETyRHrBnAV6Xacwv0MEaeU8QOmNZ2WVL7DQgQiQyZgg8EAn
mxJo4ti5bfM785kWdj3u4Q5hbF4YTiV4XlIZUy25yBLCzwu7adXH8W1scQ==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:04 2026 by rpki-client