Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e35362e302f32312d3231203d3e2034383337.roa
File:                     3130312e3139392e35362e302f32312d3231203d3e2034383337.roa (raw, json)
Hash identifier:          VMR7srnpmhF4DhLqolfvF0UZv7L1zTlyAradc9tEWbY=
Subject key identifier:   0E:A9:F5:CB:D9:9D:73:7A:D5:45:FB:7B:00:00:C4:0F:29:41:F1:97
Certificate issuer:       /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial:       36C87225A602B45E8A6F8BAB28777F67101CC3E4
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e35362e302f32312d3231203d3e2034383337.roa
Signing time:             Wed 17 Jun 2026 16:13:27 +0000
ROA not before:           Wed 17 Jun 2026 16:08:27 +0000
ROA not after:            Wed 16 Jun 2027 16:13:27 +0000
asID:                     4837
IP address blocks:        101.199.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 19:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c8:72:25:a6:02:b4:5e:8a:6f:8b:ab:28:77:7f:67:10:1c:c3:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
        Validity
            Not Before: Jun 17 16:08:27 2026 GMT
            Not After : Jun 16 16:13:27 2027 GMT
        Subject: CN=0EA9F5CBD99D737AD545FB7B0000C40F2941F197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:22:e0:69:2f:dc:43:af:4b:77:f3:61:52:54:
                    02:a6:a1:36:e8:7e:b2:fc:f0:40:b6:13:70:28:b3:
                    d3:60:49:b4:6e:93:9c:66:b7:ef:bc:3a:1f:e5:80:
                    ed:8f:14:63:d0:97:79:33:4d:07:85:50:5b:16:5d:
                    92:31:5b:80:12:be:ab:c5:62:24:4a:fb:ae:99:e2:
                    df:73:d4:df:18:d9:c5:b7:a7:29:38:91:5a:9b:b1:
                    a4:cf:e1:67:e9:4b:35:b0:99:f9:d8:05:30:3f:e1:
                    51:c3:dc:d0:78:38:1c:90:c7:9d:94:d6:78:55:20:
                    00:59:45:5b:ba:e0:46:29:b9:b5:0e:b8:83:aa:da:
                    96:95:5a:cf:6a:97:24:8e:3e:ca:19:5d:1f:d0:9d:
                    74:60:7b:e7:0c:29:61:69:6d:ba:85:d7:81:6d:b2:
                    a9:fe:10:60:19:40:57:b2:9b:e3:44:80:5a:53:62:
                    66:40:6b:e7:fc:4e:45:bf:5c:6f:b0:ea:5d:35:64:
                    35:f5:29:44:f1:b6:ba:37:6f:b0:f3:6c:79:7d:01:
                    2c:48:f4:bf:17:54:13:80:36:0e:57:a5:58:59:6d:
                    62:58:ff:db:e7:6b:8c:ab:05:fb:f9:31:05:6f:47:
                    80:ec:dc:5b:db:4b:a9:c6:34:14:f1:85:60:0e:4b:
                    7d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A9:F5:CB:D9:9D:73:7A:D5:45:FB:7B:00:00:C4:0F:29:41:F1:97
            X509v3 Authority Key Identifier:
                keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e35362e302f32312d3231203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.199.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:2b:d9:28:81:fc:58:e2:2a:bb:7b:58:0c:e3:bd:a1:1b:a0:
         21:d6:88:b5:cd:ab:85:ea:32:15:c2:56:19:40:d0:de:b0:74:
         ff:ed:bf:b4:fa:5d:21:ee:9b:6e:d1:04:29:d3:69:62:a0:89:
         75:ba:84:09:c7:c8:2c:2d:f4:48:12:da:25:39:78:db:c8:17:
         bd:0e:8c:fc:1e:01:95:95:ba:9a:87:2c:2c:04:00:76:3c:f5:
         94:68:a7:c2:c8:18:b6:0c:51:e4:e5:82:0f:1a:e3:fd:12:a6:
         09:ed:04:d3:51:22:e0:7d:04:c9:53:9e:ab:a3:c3:c5:c7:aa:
         5a:79:fb:2c:1a:83:5b:b4:2f:05:e1:db:1b:d4:e4:f2:8b:ea:
         e9:9f:96:93:eb:66:22:c5:39:0a:26:11:bf:c2:d9:ac:3b:ad:
         d4:66:67:b7:55:c1:c0:f4:56:b4:3e:21:5a:d5:91:c4:77:82:
         b7:17:a3:c7:f7:ea:9d:22:19:a6:bb:58:3d:7d:45:04:16:bf:
         9e:60:50:3f:b4:d8:32:ac:16:56:d7:1b:71:3a:95:af:2d:8f:
         51:38:dd:08:a8:85:56:75:76:21:83:21:b4:9b:c0:ca:02:59:
         fe:df:91:18:74:c2:12:49:a3:f9:77:49:1a:62:43:50:8f:aa:
         20:b6:37:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:17 2026 by rpki-client