Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e3131322e302f32342d3234203d3e20313431363739.roa
File:                     3130312e3139392e3131322e302f32342d3234203d3e20313431363739.roa (raw, json)
Hash identifier:          l9Ayt/9LinBk1RfLtF8snEGtJINvlnYMbJhgRRsrHS0=
Subject key identifier:   17:DD:49:6A:5F:91:52:6F:CB:26:AC:92:78:0C:34:49:03:12:85:CF
Certificate issuer:       /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial:       681DB3E952018A548084AB4EACC8883D4394A244
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e3131322e302f32342d3234203d3e20313431363739.roa
Signing time:             Thu 21 May 2026 16:12:31 +0000
ROA not before:           Thu 21 May 2026 16:07:31 +0000
ROA not after:            Thu 20 May 2027 16:12:31 +0000
asID:                     141679
IP address blocks:        101.199.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1d:b3:e9:52:01:8a:54:80:84:ab:4e:ac:c8:88:3d:43:94:a2:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
        Validity
            Not Before: May 21 16:07:31 2026 GMT
            Not After : May 20 16:12:31 2027 GMT
        Subject: CN=17DD496A5F91526FCB26AC92780C3449031285CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f7:05:73:50:f4:16:dd:1f:93:53:8a:7b:8c:
                    a0:2e:34:18:90:c3:c8:65:09:96:ba:e7:7b:18:32:
                    54:e6:70:08:23:b8:2c:0d:53:0b:4f:f0:4f:d5:5d:
                    e2:39:86:25:87:54:ff:49:26:85:1d:6f:18:b9:eb:
                    40:08:ce:f5:35:45:47:bc:23:30:2e:af:80:0f:48:
                    87:5d:3a:ac:5b:cd:59:8b:fd:76:9a:71:fd:d3:65:
                    20:0e:e8:22:48:f2:2e:20:f5:7f:e5:b2:6c:d7:a4:
                    de:c3:f7:70:0c:5c:f7:da:3d:10:ca:e7:64:96:00:
                    79:79:6f:30:4e:4f:bc:68:67:39:31:23:55:21:3b:
                    83:d6:c7:2e:7d:ce:8b:52:d6:e6:a1:37:b5:56:8c:
                    96:ad:35:87:6a:ef:4a:69:f9:8f:f8:32:b7:e7:9f:
                    ef:7e:a9:39:f6:3f:0d:01:79:3b:c5:23:80:23:cb:
                    a4:f4:28:ae:d2:a9:14:ad:ea:9c:9d:f6:9b:93:ea:
                    4e:d1:d4:fa:6a:30:a3:77:df:0f:4a:14:ad:a8:5d:
                    cd:5b:24:09:56:0b:3b:d4:8b:51:7b:bd:ca:d7:ba:
                    b4:43:c0:f8:71:5e:70:87:cf:4e:d2:6d:a4:72:ff:
                    7f:83:bc:9b:f2:21:a7:1b:33:5f:86:b2:88:b1:e2:
                    d9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DD:49:6A:5F:91:52:6F:CB:26:AC:92:78:0C:34:49:03:12:85:CF
            X509v3 Authority Key Identifier:
                keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e3131322e302f32342d3234203d3e20313431363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.199.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:d0:7a:17:8e:89:4b:49:01:92:bc:7f:6e:5a:44:21:38:03:
         df:b4:8d:94:aa:e9:88:34:7e:b8:b4:50:79:4c:b1:2c:af:25:
         4a:c2:db:de:e6:dc:95:15:0e:fe:5a:ba:5c:be:26:31:5c:17:
         f7:07:66:9a:67:66:c2:87:43:ba:2b:9f:5f:79:d1:44:b0:9b:
         35:5a:1c:37:c8:14:82:c5:11:8e:88:1c:7f:8a:db:37:2b:fb:
         f3:17:d1:71:19:35:c7:71:c8:cf:b8:9c:7d:3a:d5:6e:e7:4d:
         73:07:50:b1:ac:b3:29:2d:c5:83:de:67:cf:88:6d:46:47:f8:
         72:0a:2f:c6:91:e8:56:d5:cc:38:71:46:70:ba:0b:ab:f5:8e:
         9e:9a:df:55:ca:54:87:bb:95:8b:a0:9f:f3:78:91:41:20:47:
         38:15:7d:15:5a:d0:90:10:9a:94:89:ee:9b:24:a0:42:0c:28:
         f5:a2:32:c6:7f:ef:3e:b5:dd:c6:32:15:c2:9a:b2:53:5c:0c:
         e1:09:b9:5d:cf:58:6c:dd:43:04:16:90:21:da:83:b0:1b:2c:
         e1:fe:e3:7d:ad:00:4e:7e:3e:b4:99:ed:c6:bd:b0:d1:c8:b8:
         e8:58:71:63:13:b8:d1:ab:40:f8:4f:49:c9:b4:1e:83:b8:ab:
         3d:6b:a5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:57:03 2026 by rpki-client