Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e34302e302f32312d3231203d3e203539303235.roa
File:                     3130312e3233362e34302e302f32312d3231203d3e203539303235.roa (raw, json)
Hash identifier:          5/vJjoKhyTaUNDkqvXUFbsDnteGhnjbV66LozEdfSBY=
Subject key identifier:   0C:FC:40:63:6F:94:8B:32:05:A8:A6:1B:37:2D:4D:52:84:1C:E3:C7
Certificate issuer:       /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
Certificate serial:       6AD4551605BB704855317A22FC28915203EE76C2
Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e34302e302f32312d3231203d3e203539303235.roa
Signing time:             Thu 11 Jun 2026 15:43:16 +0000
ROA not before:           Thu 11 Jun 2026 15:38:16 +0000
ROA not after:            Thu 10 Jun 2027 15:43:16 +0000
asID:                     59025
IP address blocks:        101.236.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 18:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d4:55:16:05:bb:70:48:55:31:7a:22:fc:28:91:52:03:ee:76:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
        Validity
            Not Before: Jun 11 15:38:16 2026 GMT
            Not After : Jun 10 15:43:16 2027 GMT
        Subject: CN=0CFC40636F948B3205A8A61B372D4D52841CE3C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:01:9b:ee:ff:15:cf:99:fc:f8:b5:7e:12:ec:
                    16:0a:d9:f4:f2:9f:6e:cc:9c:08:81:e8:d6:07:35:
                    83:b6:d4:32:2b:dd:55:16:7a:f7:09:bf:c1:b6:b6:
                    dd:0d:93:41:ed:d5:40:26:99:80:e2:44:60:17:2b:
                    1b:e0:36:5e:4d:d9:ce:76:de:02:d5:f4:cd:0f:9f:
                    cf:0f:dd:9d:46:1c:6a:ac:19:3f:de:7b:9c:4d:6e:
                    e9:3d:58:1a:75:fa:a4:ed:71:71:c4:fc:c0:00:93:
                    b1:2c:fb:e2:21:0d:ac:cb:b1:a2:79:35:1e:e8:83:
                    25:eb:77:cc:8c:31:43:b9:b0:e2:26:f6:71:fc:0a:
                    08:28:f5:23:db:32:f0:10:81:49:68:73:8e:12:1b:
                    57:12:27:51:10:9d:ca:9d:2c:54:3e:d2:93:07:8a:
                    48:ad:bb:71:c4:67:1f:27:03:a3:76:97:6a:44:df:
                    89:f8:06:c7:21:f7:a6:8e:43:62:ff:84:e0:14:97:
                    e5:6e:e4:07:7b:12:60:aa:b1:4a:18:34:c8:ac:6d:
                    5d:82:64:fb:65:c9:a3:59:4e:d1:60:5f:e7:25:64:
                    d9:90:7c:9d:2a:e8:d6:2a:4d:2a:eb:88:52:d1:bf:
                    bd:01:f3:a3:5a:55:b1:35:3c:cc:89:97:54:c8:6f:
                    1f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FC:40:63:6F:94:8B:32:05:A8:A6:1B:37:2D:4D:52:84:1C:E3:C7
            X509v3 Authority Key Identifier:
                keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e34302e302f32312d3231203d3e203539303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.236.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:33:fc:b6:a7:bb:11:45:34:cd:5d:f1:80:58:33:b5:b3:20:
         64:61:7b:cf:f5:63:06:26:48:40:ea:54:1d:69:2e:38:db:92:
         22:4e:a3:c8:8c:9e:86:08:a6:51:ac:fa:dd:cf:0e:74:4f:1e:
         a6:23:5c:94:44:51:4f:9e:5e:c3:b4:17:9a:da:25:68:f8:37:
         9b:76:45:bc:d9:52:c3:11:2e:03:66:b6:6d:34:b1:c1:8f:c1:
         49:86:18:ff:f2:cf:78:56:4d:a1:76:ab:3e:83:42:03:5a:b8:
         e2:a8:7b:8c:33:ce:8f:2a:9c:8c:89:68:bb:0b:14:20:48:b8:
         65:de:0d:e8:a5:ed:80:8b:fa:d3:4b:2d:2c:4c:b1:63:af:59:
         66:80:73:cb:a0:a5:07:22:44:ed:e6:a8:dc:8d:5c:50:4d:8c:
         a7:1d:e0:e6:cb:5c:56:d5:05:68:03:07:cc:63:38:4d:e7:46:
         03:c3:85:25:41:e6:08:cc:2d:19:d7:3d:2f:6f:22:70:94:af:
         53:64:b8:56:59:03:1d:74:72:b1:81:06:6d:10:d9:3d:41:74:
         29:bc:ab:4c:67:9d:9b:2c:cc:61:ed:48:63:fa:49:0c:f1:af:
         8b:5f:3a:cc:ef:f3:20:46:e4:80:ec:5d:f0:df:c5:36:98:18:
         ca:ff:ba:27
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:57 2026 by rpki-client