Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e34382e302f32302d3230203d3e2034383337.roa
File:                     3130312e3139392e34382e302f32302d3230203d3e2034383337.roa (raw, json)
Hash identifier:          et9GtONlpBFQsXguDJe5GnXbV7W5I4DL6A4XhE657og=
Subject key identifier:   C5:3A:C6:1E:6F:4A:58:62:89:E5:5A:77:12:0C:81:3F:06:8A:16:08
Certificate issuer:       /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial:       1626566B3A44C0666779F34721A86443CB68BF35
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e34382e302f32302d3230203d3e2034383337.roa
Signing time:             Wed 17 Jun 2026 16:13:53 +0000
ROA not before:           Wed 17 Jun 2026 16:08:53 +0000
ROA not after:            Wed 16 Jun 2027 16:13:53 +0000
asID:                     4837
IP address blocks:        101.199.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 19:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:26:56:6b:3a:44:c0:66:67:79:f3:47:21:a8:64:43:cb:68:bf:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
        Validity
            Not Before: Jun 17 16:08:53 2026 GMT
            Not After : Jun 16 16:13:53 2027 GMT
        Subject: CN=C53AC61E6F4A586289E55A77120C813F068A1608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:06:c9:c3:76:7c:79:c9:f1:f8:c6:d4:39:37:
                    9e:b5:0f:61:f9:62:f3:4b:28:30:e7:38:80:19:52:
                    8e:95:11:df:44:4b:01:5e:d3:53:66:08:9e:dd:7a:
                    4e:5a:d1:74:fd:27:e4:d4:f8:a2:46:51:bc:07:6d:
                    8e:fc:52:c3:6d:38:7c:5e:58:a7:bb:ba:c8:eb:2d:
                    ce:53:5f:21:22:c8:4e:de:b7:21:35:d3:cc:b1:67:
                    25:cd:3f:c0:b7:e7:b7:d0:5f:20:d3:e7:81:a2:e8:
                    31:01:e0:cb:19:32:f0:6a:13:29:30:0e:07:21:2a:
                    97:ac:5c:59:23:f0:e9:64:d9:a6:ab:9f:f5:6d:7e:
                    5a:f5:95:fe:41:a2:6b:ad:e7:9e:1c:cc:95:1f:a5:
                    eb:88:4f:23:5d:93:0c:71:57:35:4e:5d:91:e1:df:
                    fb:e3:4c:24:7b:bc:0d:9a:2e:9b:ef:28:28:32:41:
                    16:21:70:c1:66:de:f0:75:e7:ba:84:cc:30:65:55:
                    45:ea:19:e1:87:da:95:12:67:e0:48:18:28:ed:fe:
                    12:19:11:5a:59:0f:26:08:0c:38:27:9f:51:8a:9e:
                    fd:9f:83:15:dc:f0:81:c4:3b:18:e1:cc:4f:19:44:
                    d0:ab:f9:c6:37:80:46:40:32:0c:37:89:3e:39:20:
                    97:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3A:C6:1E:6F:4A:58:62:89:E5:5A:77:12:0C:81:3F:06:8A:16:08
            X509v3 Authority Key Identifier:
                keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e34382e302f32302d3230203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.199.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:a4:45:70:03:5f:7e:16:9c:25:b4:45:fa:88:c1:84:65:44:
         82:50:0e:9e:1a:fa:27:6d:f0:39:54:83:bf:42:e7:e3:84:27:
         81:9a:c9:ae:4b:4b:ae:67:1a:ea:77:a7:3c:07:12:dd:87:8d:
         09:35:f8:a2:62:b8:21:98:68:c1:1c:f2:d7:36:01:cc:70:b2:
         fd:a3:69:d3:52:fc:99:2d:68:1b:9b:c9:05:2c:43:8c:d9:58:
         05:c2:90:f7:b7:37:02:2b:3b:37:df:81:b2:1f:86:c9:de:f6:
         5a:81:6f:ba:0a:a8:cc:82:7f:99:4d:31:d5:eb:ce:60:6c:2e:
         ca:96:85:d4:df:65:41:aa:31:6e:be:0f:32:13:53:82:05:5a:
         ad:85:53:92:da:4a:a0:0d:b9:50:56:a3:fc:01:19:ca:04:92:
         f0:34:dc:50:e6:18:1e:6e:44:1d:3e:bb:a3:65:31:79:6e:4f:
         a9:8f:cb:f6:30:ee:1e:15:84:f1:9f:29:00:c7:8f:49:50:d1:
         4f:f4:9d:03:4e:e6:26:44:f9:0f:aa:de:b8:83:8f:a0:2c:25:
         e2:83:c9:68:c0:a3:b4:2f:ea:b0:b7:17:c1:bf:b4:e8:49:b3:
         49:58:ab:fb:4b:5e:f3:0b:16:66:d4:cd:5a:fc:da:89:a4:25:
         7e:9d:9c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:28 2026 by rpki-client