Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3138342e302f32332d3233203d3e203535393932.roa
File:                     3130312e3139382e3138342e302f32332d3233203d3e203535393932.roa (raw, json)
Hash identifier:          scGhEFxgH/ByJtrtN2ud+ajw7/RRYqrFOrOwg0+UZ/Y=
Subject key identifier:   27:D1:27:4A:29:77:8A:4E:29:10:8F:87:68:B2:F9:48:54:0B:72:1D
Certificate issuer:       /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial:       22EBB66A0CBAF2301F009F932522CC2E7EB94680
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3138342e302f32332d3233203d3e203535393932.roa
Signing time:             Wed 13 May 2026 02:24:17 +0000
ROA not before:           Wed 13 May 2026 02:19:17 +0000
ROA not after:            Wed 12 May 2027 02:24:17 +0000
asID:                     55992
IP address blocks:        101.198.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:eb:b6:6a:0c:ba:f2:30:1f:00:9f:93:25:22:cc:2e:7e:b9:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
        Validity
            Not Before: May 13 02:19:17 2026 GMT
            Not After : May 12 02:24:17 2027 GMT
        Subject: CN=27D1274A29778A4E29108F8768B2F948540B721D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f9:b2:83:94:d0:40:4c:d4:d6:27:d5:1d:9d:
                    77:7d:eb:71:c8:03:a1:90:2e:16:bc:f4:e7:80:a6:
                    7d:97:0a:83:ef:1b:55:a1:29:bc:62:24:5e:63:17:
                    74:10:d2:38:1a:90:b4:da:ea:8d:86:b9:fb:d2:0a:
                    10:2c:6d:e5:6d:d8:5e:c5:d4:41:82:bb:2a:61:72:
                    10:22:46:75:0a:e2:e7:43:c3:c4:90:99:d8:8a:68:
                    29:69:72:d1:57:f3:9a:e8:e4:61:a1:92:fd:f6:24:
                    b6:e2:28:23:8d:30:2f:f3:c4:5f:53:3a:50:7e:cc:
                    57:2d:41:87:a3:2f:ec:cf:c0:85:8f:3d:9d:1e:c6:
                    9c:ec:01:75:72:59:66:f0:c3:41:f5:d1:48:e3:c8:
                    af:fc:e0:15:d4:be:26:fd:2a:bb:ca:ad:71:a5:28:
                    c2:b5:cc:2a:35:7f:88:0e:2b:fb:88:6b:81:4d:fc:
                    9d:d0:6c:fa:1e:16:23:f8:d4:65:06:94:07:bc:ec:
                    fb:38:c3:99:60:e2:49:8b:2b:9b:82:59:79:3d:48:
                    4f:72:77:70:66:42:e6:38:4e:c2:dc:60:0f:79:bd:
                    2b:74:69:c5:f0:21:0b:c0:c8:97:2d:5a:1f:a7:90:
                    6e:36:7c:9e:bf:17:ac:4f:cc:3b:ba:d5:e9:27:5e:
                    7d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D1:27:4A:29:77:8A:4E:29:10:8F:87:68:B2:F9:48:54:0B:72:1D
            X509v3 Authority Key Identifier:
                keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3138342e302f32332d3233203d3e203535393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.198.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:fa:2d:aa:d0:53:de:e8:51:50:14:d5:7e:3b:1f:81:5b:75:
         23:f6:1c:83:c7:5f:3b:8e:e6:b9:21:f9:a0:b3:1a:fe:f6:94:
         92:9b:54:1d:9c:1d:28:f4:df:f1:f0:14:8c:ce:e4:5e:64:7f:
         71:9a:aa:fa:92:13:56:3c:66:15:e4:27:2c:8e:ca:3c:8d:63:
         61:75:18:bb:96:1b:2d:7f:84:a2:ec:dc:4f:5b:68:0b:7b:7f:
         77:47:43:5e:92:14:bd:7f:3f:1c:56:ca:66:12:a9:05:0b:f4:
         62:ca:e4:72:63:2b:c9:3b:28:78:1e:95:97:f4:b6:8e:d3:f3:
         fa:df:bd:63:f5:e2:24:2c:92:df:08:cf:55:a6:21:72:8f:1f:
         64:39:21:92:b0:a4:f5:c7:96:aa:30:b3:51:4f:7b:fa:12:0d:
         ed:24:29:ab:f9:92:91:72:4f:7b:c3:3e:74:54:92:a9:ed:36:
         3e:73:02:94:7d:09:df:91:51:82:9d:57:55:f3:a4:2e:84:80:
         c4:c4:32:b0:b8:8b:fe:62:a6:b7:f3:2b:91:ee:b9:1e:32:db:
         60:6e:70:33:99:f2:27:28:6f:4d:62:d1:49:8f:a9:eb:99:7b:
         96:e6:fa:4e:df:38:2b:c1:27:67:bb:5a:10:12:95:80:c7:46:
         ab:ab:d3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:25:18 2026 by rpki-client