Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e3235322e302f32342d3234203d3e2034383038.roa
File:                     3130312e3139392e3235322e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          qkpXuB3ObAmsS0MDXmhY8WRgGSD85ciV076Rhsykp/k=
Subject key identifier:   7B:C1:15:A3:40:1E:4D:3F:13:9A:91:8F:0F:61:E8:3C:8B:79:02:06
Certificate issuer:       /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial:       12BD096353952F47A54FC7BA2202F7A97E709D4A
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e3235322e302f32342d3234203d3e2034383038.roa
Signing time:             Tue 02 Jun 2026 16:11:39 +0000
ROA not before:           Tue 02 Jun 2026 16:06:39 +0000
ROA not after:            Tue 01 Jun 2027 16:11:39 +0000
asID:                     4808
IP address blocks:        101.199.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:bd:09:63:53:95:2f:47:a5:4f:c7:ba:22:02:f7:a9:7e:70:9d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
        Validity
            Not Before: Jun  2 16:06:39 2026 GMT
            Not After : Jun  1 16:11:39 2027 GMT
        Subject: CN=7BC115A3401E4D3F139A918F0F61E83C8B790206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:80:98:ee:ff:9a:64:1e:ea:bf:83:42:b8:e2:
                    00:db:70:2b:f6:8f:d4:9f:24:b5:f4:40:df:54:54:
                    b9:9a:81:00:7f:ad:ab:e4:79:0d:90:85:d6:d1:11:
                    f6:d6:a1:0d:19:80:d9:54:61:ba:09:bd:66:a6:31:
                    1f:25:4f:6f:c5:6b:18:df:02:67:9c:f6:16:6a:ea:
                    dd:be:10:5f:f1:b9:fb:16:7c:05:d0:df:ed:f6:a1:
                    a0:90:e9:26:ba:8b:bd:ee:31:6c:b3:ba:21:c8:47:
                    99:b0:2b:db:78:d0:90:eb:cf:bf:b4:32:37:bd:22:
                    ce:d6:fe:48:8a:d9:a6:5f:b6:5b:8a:1e:78:3d:e6:
                    4b:56:1d:b2:fa:d9:a9:5e:7b:24:55:7c:23:40:60:
                    a6:55:2b:ed:8b:b2:a9:0d:d9:fd:70:f8:8a:54:02:
                    34:84:cd:50:60:a2:a1:85:65:08:55:c7:3b:20:13:
                    4c:c4:cb:ef:53:d5:1d:8e:fb:cb:4a:5f:47:b4:fa:
                    0c:1d:0d:99:6f:5a:96:c8:73:d4:ef:53:54:dc:dc:
                    16:f4:51:98:cd:81:52:53:67:02:f1:a0:c7:ff:cb:
                    d5:3b:b9:82:e2:71:70:fa:f5:29:b2:18:76:24:73:
                    5d:17:7f:b3:bd:64:5e:06:fd:06:b0:ca:b8:36:62:
                    97:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C1:15:A3:40:1E:4D:3F:13:9A:91:8F:0F:61:E8:3C:8B:79:02:06
            X509v3 Authority Key Identifier:
                keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e3235322e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.199.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:ba:b3:89:c2:b8:42:f1:b2:9f:d9:30:f2:36:6a:54:67:48:
         35:9f:2d:4a:f6:3e:d6:e9:25:20:37:6e:86:49:f3:6a:42:69:
         09:09:de:f5:15:01:c0:05:0d:5d:5a:3b:88:1d:66:10:0b:35:
         b8:cf:c6:c4:a8:b3:61:41:96:91:6b:cd:c5:65:20:5c:71:df:
         60:a4:38:bb:d5:a8:67:17:f7:c6:79:d8:63:f9:6f:10:b3:1a:
         ba:2a:78:4b:d2:0b:1d:37:8c:26:13:86:1f:ba:40:88:44:3c:
         07:dd:57:ec:29:3b:f7:86:05:1e:c2:6c:ae:8a:c0:93:3c:4d:
         df:b9:24:46:c9:c4:6f:fb:71:bb:4b:77:7f:4d:c9:9a:1f:8e:
         f5:91:39:13:3c:36:8e:cf:15:ae:eb:1c:f6:66:8b:df:be:48:
         04:ec:ed:d6:9e:48:46:b9:d2:0e:98:c6:df:fc:a9:04:38:df:
         5a:7f:61:e3:bc:55:89:7a:2f:0c:3d:7e:71:5a:c4:73:0c:1d:
         aa:c9:81:b5:6b:85:8b:8a:d7:a5:28:c0:35:99:7e:70:5a:1e:
         70:5c:fa:e0:05:36:7e:97:e7:c5:71:80:11:64:24:7e:82:75:
         3e:45:f6:0e:50:e0:74:cd:74:41:9e:45:83:f8:c1:32:1e:26:
         10:87:de:66
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:25 2026 by rpki-client