Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3139302e302f32332d3233203d3e203535393932.roa
File:                     3130312e3139382e3139302e302f32332d3233203d3e203535393932.roa (raw, json)
Hash identifier:          B88Di01oCdkuc5uP70qfU7dSEL497q+HTRF5TIj5K/8=
Subject key identifier:   7B:91:8D:2C:A3:63:95:26:1A:7B:E7:D6:48:54:ED:37:CC:C3:AD:15
Certificate issuer:       /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial:       07638D2FAF75DB913BE431E875BC347E2F37DD6C
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3139302e302f32332d3233203d3e203535393932.roa
Signing time:             Wed 17 Jun 2026 16:07:33 +0000
ROA not before:           Wed 17 Jun 2026 16:02:33 +0000
ROA not after:            Wed 16 Jun 2027 16:07:33 +0000
asID:                     55992
IP address blocks:        101.198.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 19:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:63:8d:2f:af:75:db:91:3b:e4:31:e8:75:bc:34:7e:2f:37:dd:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
        Validity
            Not Before: Jun 17 16:02:33 2026 GMT
            Not After : Jun 16 16:07:33 2027 GMT
        Subject: CN=7B918D2CA36395261A7BE7D64854ED37CCC3AD15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7b:47:e8:30:0c:3c:cc:34:bd:bc:09:eb:58:
                    f8:47:c5:11:0f:30:f5:a3:00:b6:df:12:ed:d9:fa:
                    02:aa:a5:3a:ac:0a:ac:f4:45:6e:6d:0c:b7:8d:30:
                    dc:54:1a:0d:59:4f:38:55:65:4c:51:1e:46:56:55:
                    28:83:da:35:d0:b1:0c:7b:fb:e9:ac:36:29:22:f7:
                    2f:a0:9a:e0:ba:fe:6e:cd:27:68:af:a8:c2:0e:db:
                    e9:04:6e:a6:0e:b8:8a:dc:e0:1d:77:eb:88:f6:0e:
                    f2:e3:4f:f1:76:21:cb:22:91:06:69:50:48:a1:8a:
                    e1:16:80:6b:53:76:63:dd:c2:da:91:20:ab:84:68:
                    e1:a4:17:ba:38:a5:6e:04:ed:e4:d3:4e:41:26:e5:
                    ae:8b:eb:f6:85:d0:91:ef:e0:1c:3e:f5:8e:de:88:
                    7b:89:fd:56:b2:26:51:43:02:36:28:54:90:8d:fa:
                    60:4e:fb:56:9c:a8:ae:76:a5:e1:d2:5f:67:6c:d1:
                    6b:de:e8:48:36:33:77:f0:33:24:44:62:da:80:3a:
                    88:91:8a:07:fe:dc:e3:2c:04:8d:56:d1:24:4a:32:
                    e1:75:4c:60:78:2e:79:8f:e4:dc:d3:2d:ad:94:b4:
                    7a:72:0a:68:c3:6a:03:af:b1:87:4e:22:87:68:4b:
                    2d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:91:8D:2C:A3:63:95:26:1A:7B:E7:D6:48:54:ED:37:CC:C3:AD:15
            X509v3 Authority Key Identifier:
                keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3139302e302f32332d3233203d3e203535393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.198.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:37:de:17:04:5f:ac:bb:26:e0:5d:17:29:72:32:94:56:b8:
         b3:f9:a9:f8:47:3d:fc:b5:35:2a:49:fd:bb:44:21:76:20:d1:
         eb:a3:a8:82:b4:5e:47:17:ed:82:0c:25:e1:45:f4:be:c5:a5:
         f7:7d:f6:0a:22:cd:f3:37:5e:09:b0:92:ba:b3:5f:b8:9c:aa:
         3f:d7:3d:b2:b6:c7:50:7f:7b:09:10:7a:b1:30:e7:0d:00:13:
         e9:c6:5b:e5:9f:89:cd:16:f2:c6:91:a7:d8:65:a9:ed:33:51:
         6f:cf:94:46:8d:02:de:09:99:b6:1c:04:d2:cc:84:60:5a:29:
         c2:b9:a0:5d:cd:40:db:7d:60:99:c7:84:b2:2f:ac:a3:2d:88:
         5f:33:f4:5f:60:1b:b6:b3:bd:17:61:07:f1:d9:e1:df:3b:c3:
         da:d7:ee:83:0e:ae:35:e5:2f:09:30:35:0a:6f:e4:97:80:b1:
         d1:ae:21:17:f8:6a:fb:4e:00:c4:14:f0:67:26:c3:4b:bd:bf:
         3b:bf:07:6a:5d:13:15:af:c3:47:69:29:b3:59:44:75:01:70:
         32:92:1c:55:ad:ab:70:6c:2f:fb:b0:ae:e9:02:47:e7:06:e1:
         bf:e0:c9:ae:e3:c0:80:67:9f:cf:9d:7a:9f:b7:f1:52:41:42:
         bb:ee:b1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:55:19 2026 by rpki-client