Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e3139362e302f32322d3232203d3e2034383337.roa
File:                     3130312e3139392e3139362e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier:          bUrcOIonHoHUu7HxJrLOQwcrkMor58OjNdAD9w3IVGw=
Subject key identifier:   F5:43:1A:66:4B:1D:BE:E5:29:9D:08:02:14:F7:D5:F9:CE:85:0C:0F
Certificate issuer:       /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial:       6477C583F1684B309A4B35B671B11CC3869D5E2B
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e3139362e302f32322d3232203d3e2034383337.roa
Signing time:             Wed 17 Jun 2026 16:12:50 +0000
ROA not before:           Wed 17 Jun 2026 16:07:50 +0000
ROA not after:            Wed 16 Jun 2027 16:12:50 +0000
asID:                     4837
IP address blocks:        101.199.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 19:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:77:c5:83:f1:68:4b:30:9a:4b:35:b6:71:b1:1c:c3:86:9d:5e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
        Validity
            Not Before: Jun 17 16:07:50 2026 GMT
            Not After : Jun 16 16:12:50 2027 GMT
        Subject: CN=F5431A664B1DBEE5299D080214F7D5F9CE850C0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4f:6f:27:9e:2f:77:ab:c8:b5:c5:78:f4:6e:
                    e6:70:0b:7a:74:a5:32:df:d7:42:2f:da:35:e3:b3:
                    d2:7b:ad:76:1c:70:98:16:9b:f6:4f:53:50:64:18:
                    fd:79:8e:67:12:6f:cc:6d:c1:00:29:b8:76:b8:56:
                    11:8b:a9:5f:f0:a4:15:77:50:03:5d:6f:c7:fa:98:
                    2f:c2:3c:f3:3a:ef:5f:3d:84:3d:19:6f:ad:5e:70:
                    9e:f6:40:1d:2e:9c:d6:9e:b2:26:bd:cd:1e:70:e7:
                    14:6c:22:90:ed:8a:43:84:78:31:b2:54:d7:34:18:
                    3b:79:9a:ba:5c:39:21:72:a9:e0:59:64:1d:2c:84:
                    dc:0a:3a:f6:5a:04:4e:b0:45:45:89:75:d0:9b:74:
                    f8:96:ac:b0:8c:b2:bc:63:e1:48:44:90:8f:38:7c:
                    de:b8:92:c1:68:ce:c4:c6:29:d5:51:af:ca:0e:9b:
                    f2:79:ab:02:9b:0d:a4:21:2d:20:41:c2:4d:70:22:
                    c9:c7:0d:0f:64:16:a3:3e:5c:8e:e8:f8:ee:55:7e:
                    a1:86:34:08:e5:c0:56:a6:2f:58:d9:0f:a8:7c:52:
                    e4:35:61:69:a5:b6:5a:5c:09:1d:eb:25:d6:69:c3:
                    51:2a:36:73:da:ee:a4:74:a3:fa:28:19:13:cb:47:
                    b6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:43:1A:66:4B:1D:BE:E5:29:9D:08:02:14:F7:D5:F9:CE:85:0C:0F
            X509v3 Authority Key Identifier:
                keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e3139362e302f32322d3232203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.199.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:e0:11:b4:b7:76:84:63:43:88:d6:3b:f7:2c:85:18:3b:97:
         0f:37:93:24:06:13:50:a0:b1:a6:86:89:74:d3:62:88:5a:05:
         04:ab:24:f3:04:2d:d8:fc:09:3e:3b:2a:14:d8:8c:46:92:3b:
         5d:8a:09:b6:64:5f:8d:3c:f0:78:b1:bc:35:85:d3:c7:6f:db:
         49:b6:05:89:75:29:2c:cd:f7:ad:4d:d4:1d:95:c4:99:65:ab:
         5f:e6:b4:fc:75:7a:ea:2b:f4:df:c9:3f:6e:f0:42:8d:31:3a:
         cb:ae:02:04:d1:e7:ee:88:df:99:25:59:da:23:41:78:35:d5:
         fe:ed:83:b9:4c:56:85:81:c2:6e:f4:a1:6a:18:64:82:36:ce:
         04:d7:88:c2:8f:21:f9:b1:24:2f:be:cc:09:ed:d6:dd:f5:4e:
         6f:ec:57:c8:21:f6:cf:03:df:c6:cc:89:6b:5d:93:32:9b:e3:
         96:d1:c4:5c:93:27:a6:8b:56:43:ef:88:e0:c9:7b:2c:d0:09:
         7a:c7:a8:a3:e6:8f:20:84:32:ef:09:d8:b7:76:91:d0:18:14:
         09:13:60:e3:fd:6b:e2:6b:58:8f:9d:96:62:69:64:aa:62:f0:
         0c:d0:09:18:0c:b8:a9:e0:b0:bb:41:c4:1d:e5:57:c9:36:bd:
         8e:9b:07:35
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:52 2026 by rpki-client