Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e302e302f32312d3231203d3e203233373234.roa
File:                     3130312e3233362e302e302f32312d3231203d3e203233373234.roa (raw, json)
Hash identifier:          uDDn72EtUZKrP/TKvn8JYbCnpWxrkSCPpR3P9Oskx9w=
Subject key identifier:   1F:4A:CA:16:F2:52:EB:61:B2:23:30:8F:9F:8E:C0:49:23:E3:2E:E7
Certificate issuer:       /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
Certificate serial:       4FE0E2E7345807F9B9931CE1D20E7E719F17B5AA
Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e302e302f32312d3231203d3e203233373234.roa
Signing time:             Thu 11 Jun 2026 15:20:59 +0000
ROA not before:           Thu 11 Jun 2026 15:15:59 +0000
ROA not after:            Thu 10 Jun 2027 15:20:59 +0000
asID:                     23724
IP address blocks:        101.236.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 18:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e0:e2:e7:34:58:07:f9:b9:93:1c:e1:d2:0e:7e:71:9f:17:b5:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
        Validity
            Not Before: Jun 11 15:15:59 2026 GMT
            Not After : Jun 10 15:20:59 2027 GMT
        Subject: CN=1F4ACA16F252EB61B223308F9F8EC04923E32EE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4f:33:d3:72:67:df:67:d5:42:29:b3:ef:4f:
                    e6:bf:76:73:90:3f:5b:de:47:73:97:40:35:5e:e8:
                    21:d7:a2:67:60:de:9f:a4:13:bb:2e:fe:61:6f:b6:
                    47:59:bc:d3:15:d8:8f:56:78:85:58:77:89:17:ea:
                    5b:a6:c2:e1:9a:88:6d:91:04:30:4a:47:9f:b6:a9:
                    d2:4e:a5:26:e3:d3:a9:77:4c:63:79:3d:5f:c8:0e:
                    6c:86:02:29:09:70:0a:b7:de:89:ba:69:35:d8:be:
                    e3:fb:5a:07:52:07:8a:94:6d:39:5b:0a:b6:a7:2c:
                    77:b5:3d:43:34:da:39:a7:c9:88:a5:1c:b7:5f:93:
                    73:3c:aa:58:38:6b:8d:a6:a0:70:44:73:fa:b9:f0:
                    1a:3b:0a:01:3c:c5:11:22:74:f2:06:b1:03:1c:e4:
                    93:07:d3:6e:74:c1:8a:5e:09:3b:98:62:e7:85:d8:
                    1f:e1:8b:cb:b9:2a:c5:b1:77:14:58:56:a6:e8:0f:
                    7c:17:c0:a6:ae:4d:94:5f:87:87:a8:c3:b8:66:a0:
                    31:b5:3a:ee:7d:2b:d1:08:ba:be:97:21:cb:b3:05:
                    6c:34:11:9a:b3:5b:86:4e:7d:12:3c:52:43:e3:99:
                    e9:04:3a:bf:aa:a8:cd:2a:1b:f3:5f:c1:5f:2e:a8:
                    f9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4A:CA:16:F2:52:EB:61:B2:23:30:8F:9F:8E:C0:49:23:E3:2E:E7
            X509v3 Authority Key Identifier:
                keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e302e302f32312d3231203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.236.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b8:e0:40:10:ac:20:51:bd:ab:69:9c:56:63:2a:6e:43:a5:79:
         41:16:d9:1e:f1:76:0e:31:be:5c:1b:15:ef:2c:fa:fe:74:6f:
         a6:dc:aa:57:a7:e9:4f:8b:e0:75:bc:d0:58:0e:06:7f:35:fe:
         04:4a:eb:37:87:dd:42:c6:3e:49:6f:1f:4a:04:b2:30:13:8b:
         c8:cf:92:81:79:3e:d0:9a:e8:e2:c4:3d:af:2a:75:aa:78:80:
         a4:90:ee:e2:52:a3:ad:12:4d:a8:a5:26:19:a9:23:c3:f4:f5:
         dc:a6:25:4a:f8:5b:6a:47:8b:e8:67:e4:69:4a:03:ad:ce:db:
         8f:34:83:18:22:f2:23:41:45:3f:f1:fa:af:30:20:e8:04:0d:
         4e:65:53:32:c8:18:8b:e9:56:f7:37:35:f5:0f:2f:64:30:01:
         be:dd:3e:32:d8:f7:67:e8:05:0b:a9:a7:6e:07:a6:fc:b2:da:
         c2:5f:92:c9:67:22:e9:2e:96:b2:b4:4d:f0:83:74:62:96:32:
         56:ab:17:67:ff:5c:e5:02:f1:ad:33:40:f3:ba:1f:fe:54:6a:
         a5:27:0c:da:79:3a:64:b0:0f:e0:9a:72:1e:37:ad:4f:23:64:
         af:bc:da:b2:fa:88:d4:18:04:f0:90:97:ec:1d:00:d5:12:7c:
         0a:ce:e6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:50 2026 by rpki-client