Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3139352e302f32342d3234203d3e203535393932.roa
File:                     3130312e3139382e3139352e302f32342d3234203d3e203535393932.roa (raw, json)
Hash identifier:          1tkRqaYMgKb5G7HOQM0XqUFZSbuezIEXuEANIgQDMxE=
Subject key identifier:   8E:33:C9:72:EA:14:1E:98:07:56:1D:07:5B:2D:9F:75:89:1D:63:FD
Certificate issuer:       /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial:       7FF9C3F0F760FB41E82DA2C7380BA67F26AEB4BE
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3139352e302f32342d3234203d3e203535393932.roa
Signing time:             Wed 17 Jun 2026 16:25:10 +0000
ROA not before:           Wed 17 Jun 2026 16:20:10 +0000
ROA not after:            Wed 16 Jun 2027 16:25:10 +0000
asID:                     55992
IP address blocks:        101.198.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 19:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f9:c3:f0:f7:60:fb:41:e8:2d:a2:c7:38:0b:a6:7f:26:ae:b4:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
        Validity
            Not Before: Jun 17 16:20:10 2026 GMT
            Not After : Jun 16 16:25:10 2027 GMT
        Subject: CN=8E33C972EA141E9807561D075B2D9F75891D63FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:83:ba:fa:73:3f:78:82:9e:52:70:9c:1a:
                    b0:a5:97:bb:13:21:ef:4f:59:9e:6b:0d:d4:4e:db:
                    36:be:73:f7:f2:25:64:01:ce:d3:fe:3e:02:13:a3:
                    7e:02:ae:c6:af:28:5f:7c:e5:d7:68:71:3c:0f:23:
                    d0:e9:f6:bc:66:3f:28:ec:ad:15:6c:11:61:2a:f2:
                    d2:bf:b9:e3:7d:a7:12:a1:d8:5c:30:52:c1:bb:b2:
                    e3:13:fe:b4:68:ff:01:26:dd:89:a5:20:7a:86:25:
                    c0:8a:56:f1:39:29:1c:7f:9b:64:e9:7e:9a:c8:5a:
                    bd:30:b3:80:53:24:8f:c9:a8:5b:53:28:63:4d:11:
                    ef:88:a6:0b:e5:29:1c:8e:7f:fd:2e:fb:bb:7d:73:
                    d9:24:84:16:c3:d6:73:19:06:9b:b0:25:40:f6:fe:
                    1e:6c:f4:97:3f:66:18:0b:90:f6:53:c4:84:64:3d:
                    42:04:e0:a6:5e:5f:cb:07:30:22:e9:5e:a0:0a:0d:
                    72:69:b6:49:ee:4d:2f:1d:e5:18:aa:5e:d9:ea:d7:
                    7b:f0:af:4f:93:2e:95:f9:c2:51:8a:98:07:5d:94:
                    f2:14:59:22:56:fd:86:c9:b2:1d:17:da:b7:96:3e:
                    23:db:79:da:67:b4:62:df:f4:96:d7:68:0b:96:1d:
                    87:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:33:C9:72:EA:14:1E:98:07:56:1D:07:5B:2D:9F:75:89:1D:63:FD
            X509v3 Authority Key Identifier:
                keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3139352e302f32342d3234203d3e203535393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.198.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:a5:05:fb:34:64:33:40:79:54:96:00:87:9c:bd:1f:c7:d2:
         2e:d6:74:80:b4:69:82:75:82:9d:4d:30:89:40:d8:00:68:2f:
         7c:20:46:d1:3e:24:f3:78:6b:c5:84:60:98:b2:92:1e:21:b6:
         86:f9:77:14:44:0a:b7:25:bc:4d:00:42:bf:43:75:ff:40:3f:
         58:8e:47:71:ea:1e:a7:a7:2f:94:24:42:3a:27:6f:52:3a:d3:
         2d:e1:04:49:19:2f:fd:b9:ed:0f:a2:76:34:a4:10:89:4b:82:
         f7:da:50:70:45:26:2f:f3:87:60:25:a8:88:77:8c:c7:f7:8e:
         cb:fe:18:26:d2:77:f8:3f:46:ae:97:a6:bf:d9:d6:4a:aa:2d:
         40:02:9c:0c:bc:d0:72:1e:b9:f0:35:47:a1:4f:23:f4:71:fa:
         bc:f5:34:5a:27:c3:9d:45:07:72:a2:32:0d:bf:93:0b:b5:a5:
         4e:86:d5:d4:11:0b:2e:ef:c3:9f:01:4d:f2:bd:7b:bb:df:df:
         38:ea:78:4f:45:ed:a8:08:9c:23:d0:f6:b4:33:c7:57:0d:eb:
         db:94:30:80:9b:a1:fa:b3:e9:dd:05:5f:3c:f7:ea:2d:a6:e9:
         e8:ce:a3:b2:3e:b4:de:82:c0:83:5f:3c:7a:00:2b:e1:3f:95:
         c7:b7:43:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:56:31 2026 by rpki-client