Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3139332e302f32342d3234203d3e203535393932.roa
File:                     3130312e3139382e3139332e302f32342d3234203d3e203535393932.roa (raw, json)
Hash identifier:          9lGVps8YKbriBPszfGnT164sT9yRIsmA/eXSfNtTVwI=
Subject key identifier:   96:CA:A9:FD:96:9B:A9:51:85:54:43:5D:77:8A:AA:8E:DD:CF:1B:E1
Certificate issuer:       /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial:       2542C8482BB07A0F29894CEEE1A542CC4C1328D7
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3139332e302f32342d3234203d3e203535393932.roa
Signing time:             Wed 17 Jun 2026 16:17:03 +0000
ROA not before:           Wed 17 Jun 2026 16:12:03 +0000
ROA not after:            Wed 16 Jun 2027 16:17:03 +0000
asID:                     55992
IP address blocks:        101.198.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 19:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:42:c8:48:2b:b0:7a:0f:29:89:4c:ee:e1:a5:42:cc:4c:13:28:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
        Validity
            Not Before: Jun 17 16:12:03 2026 GMT
            Not After : Jun 16 16:17:03 2027 GMT
        Subject: CN=96CAA9FD969BA9518554435D778AAA8EDDCF1BE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:fa:e7:23:f7:69:0c:fd:75:60:21:59:7a:96:
                    51:dc:7e:5f:8b:ce:1d:9a:6e:06:f5:80:f8:e3:6a:
                    91:94:17:f5:86:ff:10:7d:aa:2b:4e:83:a2:8a:6f:
                    ac:22:04:97:3f:9c:82:cb:c5:36:b0:d3:99:5e:ba:
                    f9:2c:7a:73:76:32:72:6b:33:ff:dd:0e:4e:03:d3:
                    c2:33:f2:38:72:fd:8e:c6:49:66:01:5e:3e:21:48:
                    ac:03:22:b9:59:d4:46:61:a7:bf:80:9e:27:f2:9b:
                    a1:50:77:da:ac:be:2f:8e:a1:c3:68:11:29:0d:61:
                    c2:d4:d1:b8:93:5e:44:6c:e6:27:16:eb:b2:64:f9:
                    81:5a:03:97:f8:dc:ab:09:ed:37:a2:7e:c1:32:10:
                    bb:2d:b8:a9:f2:ef:21:ad:39:1b:af:57:99:23:50:
                    d8:19:0f:65:60:a3:59:0f:66:e2:0f:91:36:42:fe:
                    4d:99:00:73:7b:40:8f:51:27:d3:16:8a:42:98:da:
                    65:4c:67:58:85:29:f2:03:56:b3:db:1f:e3:4d:17:
                    55:11:1e:22:c7:31:3e:85:7e:10:9b:2c:6d:73:bc:
                    af:f6:37:7c:72:b7:69:b6:7a:29:e2:8b:84:3a:52:
                    5c:70:aa:5e:4f:ad:83:fe:b0:36:83:7a:79:f9:ce:
                    c9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CA:A9:FD:96:9B:A9:51:85:54:43:5D:77:8A:AA:8E:DD:CF:1B:E1
            X509v3 Authority Key Identifier:
                keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3139332e302f32342d3234203d3e203535393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.198.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:07:19:bd:2d:44:be:c8:a8:dc:92:3f:8e:40:50:03:51:fd:
         0a:98:64:59:02:e2:0a:88:8f:46:da:e9:4a:b7:5e:72:7d:7c:
         6a:8a:94:2f:a4:63:54:7c:b2:95:ba:05:7e:29:a3:41:b3:a3:
         cd:02:85:8d:b5:60:83:46:93:ad:91:ea:85:99:bc:da:df:cd:
         f3:0d:d7:6d:f8:27:28:d4:f3:51:02:dd:35:cd:fb:46:cf:1a:
         11:6f:a8:19:a3:dc:5c:36:04:3b:ba:70:f4:3f:ff:ff:da:e5:
         3c:d6:66:22:f8:ba:3d:53:62:17:3a:48:9c:9e:80:33:f9:02:
         d8:d9:47:3e:52:90:da:38:7d:95:24:f7:b8:ba:7c:45:1d:a6:
         b5:d2:ad:b9:7e:75:f5:fa:30:35:4b:de:01:82:99:c2:f9:e1:
         fa:56:62:00:66:fc:b5:48:e2:38:c8:7f:4c:d3:75:7b:86:30:
         ec:dd:d1:49:88:84:e3:b4:ed:ca:91:88:a6:5f:37:f3:d5:de:
         f6:89:b5:d7:02:b2:58:d2:82:82:df:5b:df:f8:2b:af:6c:45:
         12:0c:99:d8:3b:24:f8:48:9e:df:d5:2d:56:ce:42:13:fb:e1:
         f5:38:45:24:4c:72:2d:ee:31:1d:4a:81:3b:e8:33:d8:8e:25:
         66:f4:79:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:56:30 2026 by rpki-client