Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2841/ezOO06_iD-bkUiK6a-jQQGyReTA.roa
File:                     ezOO06_iD-bkUiK6a-jQQGyReTA.roa (raw, json)
Hash identifier:          ffFfC37zZTiTuY/DyHhesVn6JkVaEASjK4B14hmOzoM=
Subject key identifier:   7B:33:8E:D3:AF:E2:0F:E6:E4:52:22:BA:6B:E8:D0:40:6C:91:79:30
Certificate issuer:       /CN=51A5666D323BF842F6044CE71059773E2271B013
Certificate serial:       22FC
Authority key identifier: 51:A5:66:6D:32:3B:F8:42:F6:04:4C:E7:10:59:77:3E:22:71:B0:13
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UaVmbTI7-EL2BEznEFl3PiJxsBM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/ezOO06_iD-bkUiK6a-jQQGyReTA.roa
Signing time:             Mon 26 Jan 2026 06:53:53 +0000
ROA not before:           Mon 26 Jan 2026 06:53:53 +0000
ROA not after:            Sat 09 Jan 2027 08:23:18 +0000
asID:                     137571
IP address blocks:        103.126.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/UaVmbTI7-EL2BEznEFl3PiJxsBM.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/UaVmbTI7-EL2BEznEFl3PiJxsBM.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UaVmbTI7-EL2BEznEFl3PiJxsBM.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Feb 2026 07:29:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8956 (0x22fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A5666D323BF842F6044CE71059773E2271B013
        Validity
            Not Before: Jan 26 06:53:53 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=7B338ED3AFE20FE6E45222BA6BE8D0406C917930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:50:4c:dd:90:91:e5:52:80:46:c3:a3:b3:13:
                    bb:95:22:96:6b:69:e0:76:0e:ed:c9:82:87:74:10:
                    e4:b0:76:4c:00:90:d8:c9:a3:67:ca:c7:3f:e7:c3:
                    3f:f1:ee:ce:37:76:fb:81:f2:d1:23:13:89:e0:dc:
                    20:f9:1b:92:6a:93:e0:9e:72:6c:47:93:6d:a0:c4:
                    40:a1:74:5a:21:6a:e9:10:b3:40:e2:fb:2e:55:b9:
                    3c:b3:d4:21:bd:35:e7:ba:a3:10:6f:f2:53:cd:05:
                    3b:cf:df:7d:93:cb:87:24:2b:d6:22:05:43:5d:cd:
                    c0:2f:f7:05:7d:65:6a:15:8a:d0:a1:f0:7c:19:f6:
                    78:07:92:2a:46:d2:ec:27:84:13:21:90:40:28:f4:
                    67:fc:76:48:e8:00:8f:50:39:d8:e6:57:d1:e0:42:
                    88:05:16:d8:fd:fe:61:38:f9:eb:29:5f:67:de:e9:
                    b6:93:3f:c1:e0:d3:83:64:e1:ea:43:c6:04:ba:e5:
                    06:57:16:5e:32:1c:1b:7f:b9:cf:27:45:91:17:bf:
                    67:7f:27:4a:a5:5f:4e:a7:d7:b6:21:8b:bd:98:1c:
                    59:0c:3d:ad:11:c5:a6:eb:08:d8:2e:80:c2:db:0e:
                    96:d7:13:fa:3f:65:12:25:60:6e:9d:cd:d8:2b:d3:
                    be:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:33:8E:D3:AF:E2:0F:E6:E4:52:22:BA:6B:E8:D0:40:6C:91:79:30
            X509v3 Authority Key Identifier:
                keyid:51:A5:66:6D:32:3B:F8:42:F6:04:4C:E7:10:59:77:3E:22:71:B0:13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/UaVmbTI7-EL2BEznEFl3PiJxsBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UaVmbTI7-EL2BEznEFl3PiJxsBM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/ezOO06_iD-bkUiK6a-jQQGyReTA.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:ed:5b:a6:4b:6a:22:d1:d8:19:f1:f5:5c:0a:11:c1:74:ec:
         36:c0:59:e8:29:d7:4f:78:17:6b:a9:6d:3f:9c:a3:38:6d:d1:
         08:46:98:c8:59:57:fc:4c:5e:e5:ed:fc:24:f1:a3:9b:8f:b3:
         82:4b:29:bf:fd:5d:a9:98:62:71:c5:1b:53:fa:97:46:1b:fd:
         31:74:15:23:69:91:75:aa:dc:74:55:63:71:e1:63:fe:16:d8:
         86:3f:19:2e:48:a1:72:b9:df:3d:1b:1d:3b:e4:00:03:76:9d:
         c1:41:13:4b:b1:d9:16:4a:be:f5:30:3c:4a:d2:3b:c1:67:96:
         f4:cb:d2:bc:02:fa:e9:a4:7e:ba:e6:20:3b:13:5b:80:84:7c:
         b5:62:b5:5a:4b:6b:fc:6f:a0:df:a5:90:1c:94:08:f0:04:e7:
         10:30:05:50:22:7a:0e:72:87:48:8f:6a:65:9c:d0:38:c2:f9:
         db:f0:5f:5c:3e:20:f6:f1:8f:83:08:f8:66:86:61:ec:fc:0f:
         f3:a1:03:7a:55:c1:ec:1e:87:35:de:63:4e:a1:38:2a:1e:9a:
         84:99:e7:9b:9f:99:2e:ea:58:12:b0:07:2e:92:9a:5a:d4:53:
         e9:a3:2b:18:26:ba:f1:2c:33:a5:81:b1:2c:74:a8:e1:de:dc:
         52:62:6a:21
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICIvwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTFB
NTY2NkQzMjNCRjg0MkY2MDQ0Q0U3MTA1OTc3M0UyMjcxQjAxMzAeFw0yNjAxMjYw
NjUzNTNaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDdCMzM4RUQzQUZFMjBG
RTZFNDUyMjJCQTZCRThEMDQwNkM5MTc5MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxUEzdkJHlUoBGw6OzE7uVIpZraeB2Du3Jgod0EOSwdkwAkNjJ
o2fKxz/nwz/x7s43dvuB8tEjE4ng3CD5G5Jqk+CecmxHk22gxEChdFohaukQs0Di
+y5VuTyz1CG9Nee6oxBv8lPNBTvP332Ty4ckK9YiBUNdzcAv9wV9ZWoVitCh8HwZ
9ngHkipG0uwnhBMhkEAo9Gf8dkjoAI9QOdjmV9HgQogFFtj9/mE4+espX2fe6baT
P8Hg04Nk4epDxgS65QZXFl4yHBt/uc8nRZEXv2d/J0qlX06n17Yhi72YHFkMPa0R
xabrCNgugMLbDpbXE/o/ZRIlYG6dzdgr074LAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUezOO06/iD+bkUiK6a+jQQGyReTAwHwYDVR0jBBgwFoAUUaVmbTI7+EL2BEzn
EFl3PiJxsBMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg0
MS9VYVZtYlRJNy1FTDJCRXpuRUZsM1BpSnhzQk0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1VhVm1iVEk3LUVMMkJFem5FRmwzUGlKeHNCTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4NDEvZXpPTzA2X2lELWJr
VWlLNmEtalFRR3lSZVRBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGd+ZjANBgkqhkiG9w0BAQsFAAOCAQEAeO1bpktqItHYGfH1XAoRwXTsNsBZ
6CnXT3gXa6ltP5yjOG3RCEaYyFlX/Exe5e38JPGjm4+zgkspv/1dqZhiccUbU/qX
Rhv9MXQVI2mRdarcdFVjceFj/hbYhj8ZLkihcrnfPRsdO+QAA3adwUETS7HZFkq+
9TA8StI7wWeW9MvSvAL66aR+uuYgOxNbgIR8tWK1Wktr/G+g36WQHJQI8ATnEDAF
UCJ6DnKHSI9qZZzQOML52/BfXD4g9vGPgwj4ZoZh7PwP86EDelXB7B6HNd5jTqE4
Kh6ahJnnm5+ZLupYErAHLpKaWtRT6aMrGCa68SwzpYGxLHSo4d7cUmJqIQ==
-----END CERTIFICATE-----
Generated at Mon Feb 23 06:07:07 2026 by rpki-client