Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e302e302f32312d3231203d3e203539303235.roa
File:                     3130312e3233362e302e302f32312d3231203d3e203539303235.roa (raw, json)
Hash identifier:          v5GC2LDG175o7vkFp/G4D9lS1VFwRcGEg2XmmnzmefA=
Subject key identifier:   F8:E4:7C:69:58:48:2C:39:17:AC:86:B3:A1:19:1B:9E:FD:94:12:E7
Certificate issuer:       /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
Certificate serial:       3BA86A8DF053C57323D35406D0B6F417D3FC069B
Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e302e302f32312d3231203d3e203539303235.roa
Signing time:             Thu 11 Jun 2026 15:20:59 +0000
ROA not before:           Thu 11 Jun 2026 15:15:59 +0000
ROA not after:            Thu 10 Jun 2027 15:20:59 +0000
asID:                     59025
IP address blocks:        101.236.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 18:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a8:6a:8d:f0:53:c5:73:23:d3:54:06:d0:b6:f4:17:d3:fc:06:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
        Validity
            Not Before: Jun 11 15:15:59 2026 GMT
            Not After : Jun 10 15:20:59 2027 GMT
        Subject: CN=F8E47C6958482C3917AC86B3A1191B9EFD9412E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:80:9d:21:98:06:5d:e7:5e:8a:18:6c:87:ea:
                    6c:02:2e:f8:4c:6a:40:e7:67:20:ca:c3:cc:97:f6:
                    d4:e9:de:63:d3:65:20:4e:ea:25:c5:10:ee:24:43:
                    d2:2b:1d:27:d3:2d:eb:3e:62:47:37:05:49:14:82:
                    33:3b:4b:92:c3:59:cb:af:58:0b:aa:7a:1c:cb:b8:
                    9f:70:cd:08:ed:26:26:c5:ba:61:a0:93:5b:c8:bf:
                    6a:3a:0c:20:5a:cf:af:d1:8a:bd:16:72:40:38:8d:
                    ab:2d:15:ee:73:cc:34:6b:24:e4:99:1d:fb:19:a1:
                    34:a6:cb:73:7f:e4:16:1e:62:eb:22:bb:f7:b9:4a:
                    23:4d:30:48:19:15:12:c4:e0:4e:b0:19:b8:4b:38:
                    09:c7:ef:a5:c6:9f:46:4c:a4:10:ac:ca:ca:ec:bb:
                    1c:57:48:ee:79:ee:d9:82:4f:ab:7f:a6:31:64:32:
                    c4:1c:b1:63:fb:d3:d6:41:df:cf:11:c7:9c:ff:3d:
                    7a:a3:be:02:11:18:7f:91:73:3e:94:35:92:11:46:
                    a4:1d:d5:d0:92:b3:be:e6:e8:f7:6a:19:1a:8f:0f:
                    20:b7:48:06:6e:dd:b7:64:1e:54:f0:ed:65:45:5d:
                    69:04:9b:83:16:0e:d1:ef:32:a6:84:d9:93:99:31:
                    eb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E4:7C:69:58:48:2C:39:17:AC:86:B3:A1:19:1B:9E:FD:94:12:E7
            X509v3 Authority Key Identifier:
                keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e302e302f32312d3231203d3e203539303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.236.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         35:55:6e:bb:29:ac:35:c2:05:04:db:21:b2:e3:dd:a1:e4:87:
         44:6d:4e:96:d1:13:b5:03:5a:e4:1e:ed:dc:7d:fd:e0:ae:75:
         c1:59:ae:b1:40:98:35:f0:56:1f:9f:5f:16:81:52:ff:cb:c5:
         c8:c1:7e:d9:eb:e4:6a:a0:0d:d1:b5:f4:7e:eb:f3:32:16:12:
         6b:b7:9d:80:a0:58:3d:ba:4c:dd:de:a1:e7:f9:17:17:ff:d2:
         95:16:1c:e1:b6:9f:1e:92:fb:b6:6d:34:2c:61:ca:00:f2:6e:
         71:0b:29:88:03:46:a5:50:13:d8:9e:bf:05:b1:49:9a:88:c5:
         ba:ad:a0:40:81:df:e0:77:08:9d:06:44:f3:90:2a:8f:29:94:
         e0:d4:33:7e:2a:c6:1a:12:d2:2a:e3:0c:9d:05:96:dd:5e:ac:
         78:f7:20:20:16:ce:b1:71:02:a5:b7:6a:44:c4:48:e0:c4:7b:
         04:43:aa:7e:f5:32:3b:7d:e9:ca:3e:f1:80:e2:33:65:60:97:
         9a:0b:74:ce:a4:32:e0:da:ba:40:bf:b9:da:cb:9f:84:85:45:
         24:7e:49:57:a3:40:4a:cb:db:3c:69:4e:82:c0:1c:da:d4:fb:
         bf:e2:94:4d:e8:34:66:6e:9d:8c:2d:95:1c:41:0c:67:ac:e9:
         53:17:31:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:58 2026 by rpki-client