Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3137322e302f32322d3232203d3e203535393932.roa
File:                     3130312e3139382e3137322e302f32322d3232203d3e203535393932.roa (raw, json)
Hash identifier:          5Kb1min/2rIHSsm+B1D1d89sBXIwJ4FnSzTWz8KufBE=
Subject key identifier:   24:3F:39:65:A8:60:59:BE:80:27:12:CE:C4:62:59:46:17:F2:BD:8C
Certificate issuer:       /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial:       3E15F92028ABA912E70C19F7771259F0FB3D1E70
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3137322e302f32322d3232203d3e203535393932.roa
Signing time:             Wed 13 May 2026 02:20:25 +0000
ROA not before:           Wed 13 May 2026 02:15:25 +0000
ROA not after:            Wed 12 May 2027 02:20:25 +0000
asID:                     55992
IP address blocks:        101.198.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:15:f9:20:28:ab:a9:12:e7:0c:19:f7:77:12:59:f0:fb:3d:1e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
        Validity
            Not Before: May 13 02:15:25 2026 GMT
            Not After : May 12 02:20:25 2027 GMT
        Subject: CN=243F3965A86059BE802712CEC462594617F2BD8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e3:b1:f1:d7:8c:70:ab:e4:d9:df:5f:00:a0:
                    c4:a9:1d:70:95:ae:a7:b8:50:91:ae:fb:37:36:35:
                    02:4c:cc:b0:f0:b8:a9:20:57:0f:00:69:a1:bc:87:
                    a7:aa:ab:43:46:18:d2:7d:31:7d:dc:a9:d3:63:93:
                    7b:af:c9:ba:4e:aa:cf:df:76:08:4d:cf:ac:25:fe:
                    77:85:b5:28:ea:b4:32:06:93:88:79:cb:a7:46:85:
                    f8:cf:1e:c3:c8:a2:ed:49:3a:e9:cb:7a:de:fe:f6:
                    88:0f:2a:c3:a8:70:26:4d:d1:74:67:dd:11:d8:d4:
                    ed:f2:15:f4:b5:a3:e3:51:12:2e:2b:bf:d3:3a:f2:
                    ed:19:bd:4d:88:34:09:16:d1:06:ca:e5:cd:50:ce:
                    0a:66:fd:62:15:d2:9e:d9:ec:fa:21:fe:55:cc:b9:
                    da:c2:2e:5e:e2:18:45:1d:23:bc:37:84:0f:3a:d6:
                    3c:ae:ba:87:93:c0:0e:9a:87:a7:2b:59:a0:de:7d:
                    4c:65:5f:09:80:9f:04:88:36:70:a8:a8:72:42:45:
                    67:52:9f:78:19:cb:de:e4:54:0e:a4:4a:2a:46:93:
                    a4:55:8e:17:ea:9d:28:51:4a:b5:8a:c3:9f:8d:b7:
                    35:f1:f0:ab:a3:24:49:67:9f:9e:3e:97:0b:e3:46:
                    52:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3F:39:65:A8:60:59:BE:80:27:12:CE:C4:62:59:46:17:F2:BD:8C
            X509v3 Authority Key Identifier:
                keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3137322e302f32322d3232203d3e203535393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.198.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:6e:cc:01:35:60:72:7d:20:53:6c:ca:3c:d3:1e:f8:fc:56:
         a9:66:0b:c7:33:30:cd:de:8d:83:af:75:6e:08:9a:76:98:f6:
         2e:52:2e:18:b7:5e:07:4e:5f:f1:da:d8:78:38:7f:eb:47:70:
         72:ae:7a:bf:fa:a3:eb:87:aa:f6:59:ea:c7:10:c7:8b:52:bc:
         1d:d6:06:15:3f:7f:1e:c1:bf:55:94:08:a8:89:39:a5:5f:d0:
         c1:3c:95:93:1a:56:c6:db:79:24:84:0c:3d:2f:c1:2c:4f:7d:
         fa:85:01:d3:bb:80:c5:b8:27:5e:01:8f:7a:07:e9:16:89:23:
         c2:95:7b:d4:2e:33:e6:0f:33:e9:13:87:fa:3a:6c:d1:1d:a6:
         b4:f6:cc:a5:37:cf:2b:d8:78:9b:fc:fd:0e:05:f7:ae:77:e7:
         1d:3a:05:f5:fd:9d:63:24:43:4f:a7:75:fd:ae:6a:44:21:c0:
         4c:d2:33:d4:44:20:9d:1d:c6:49:d5:bf:b9:84:dc:11:01:aa:
         67:6b:ed:82:ae:30:00:ec:a6:5d:77:10:aa:4c:a7:29:af:c4:
         44:68:ec:4c:72:8f:53:12:67:5d:35:df:5d:07:81:06:da:62:
         ce:e3:32:ea:25:fc:51:5b:ed:f2:d1:1e:53:06:35:1a:1a:5e:
         f5:cc:69:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:11:12 2026 by rpki-client