Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3138362e302f32332d3233203d3e203535393932.roa
File:                     3130312e3139382e3138362e302f32332d3233203d3e203535393932.roa (raw, json)
Hash identifier:          Uvod8dBdbsXZksgUTaLPKnNSQB2Vac2SLIXlL+Cd+qc=
Subject key identifier:   A3:EF:98:15:70:29:18:12:C0:F8:67:C4:E7:5F:21:36:B0:E2:C1:B1
Certificate issuer:       /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial:       7474DD2761CBF9F35AED6DBC8D3F324232139CCB
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3138362e302f32332d3233203d3e203535393932.roa
Signing time:             Wed 13 May 2026 02:30:08 +0000
ROA not before:           Wed 13 May 2026 02:25:08 +0000
ROA not after:            Wed 12 May 2027 02:30:08 +0000
asID:                     55992
IP address blocks:        101.198.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:74:dd:27:61:cb:f9:f3:5a:ed:6d:bc:8d:3f:32:42:32:13:9c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
        Validity
            Not Before: May 13 02:25:08 2026 GMT
            Not After : May 12 02:30:08 2027 GMT
        Subject: CN=A3EF981570291812C0F867C4E75F2136B0E2C1B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:20:f5:2b:41:64:c9:a7:04:45:db:da:74:ee:
                    23:c0:0b:4c:3d:f7:00:90:ab:b4:a6:f5:e5:85:13:
                    b0:52:13:3d:0a:f8:e7:53:4d:ea:8c:ef:54:82:f7:
                    a9:e1:66:63:cc:58:96:58:4d:64:3a:3b:58:84:18:
                    b9:14:89:01:cd:e1:2b:38:7f:6c:4b:c1:48:c6:91:
                    5d:39:4a:87:5b:81:c9:61:a7:ee:ec:7a:b6:77:99:
                    c9:bb:0d:32:f6:ae:9e:20:2b:20:80:ae:2c:45:c3:
                    44:57:22:d7:ff:64:8c:21:fe:2f:83:ff:19:a7:52:
                    da:bb:2a:0b:6d:7e:1f:44:de:d0:18:6b:a8:0e:0a:
                    04:34:0c:f4:23:cd:b4:70:d0:74:e2:24:84:1a:86:
                    17:e1:15:16:28:ae:da:5f:9c:3a:47:74:8c:3d:d2:
                    3f:77:43:1b:a9:22:56:ef:ee:04:b3:ad:cc:ca:01:
                    8a:f3:1d:85:32:48:ec:f2:d3:e3:cc:5a:58:cd:47:
                    2f:2f:75:77:dc:f8:39:5d:8a:82:da:4e:12:2d:0c:
                    e7:0e:d8:35:89:67:1d:15:41:c1:06:dc:be:cc:11:
                    87:d5:39:4e:a3:41:25:4d:aa:cb:5e:ec:cc:88:1d:
                    ca:0a:9c:1a:ce:20:85:6a:99:d4:8c:d9:0a:46:b9:
                    5f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EF:98:15:70:29:18:12:C0:F8:67:C4:E7:5F:21:36:B0:E2:C1:B1
            X509v3 Authority Key Identifier:
                keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3138362e302f32332d3233203d3e203535393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.198.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:75:17:7b:93:6f:e8:38:3f:42:48:b5:ff:40:e9:d9:4b:95:
         b9:5b:24:e0:b1:2e:ac:31:ec:72:7d:b9:25:30:dc:df:8d:09:
         46:5f:98:2e:6a:fe:5b:3d:a2:e7:b1:17:d1:0c:57:d4:3a:be:
         a5:d4:a4:12:55:dd:3f:7d:94:94:2b:a9:2c:6e:28:0a:fc:03:
         bb:36:40:0c:de:e4:10:2b:85:2a:5a:48:2c:88:5c:c5:94:59:
         24:36:39:30:fb:2f:c4:8c:c0:2e:0c:0c:ce:4e:7e:e2:c9:9c:
         bf:07:48:95:b8:63:60:98:9e:d5:28:36:9e:55:d3:46:1b:e2:
         3f:1e:4a:7a:fb:cb:f3:a0:64:78:0d:23:20:a2:41:8d:eb:bd:
         71:dd:17:f0:f2:50:f3:0a:10:77:6b:52:95:8e:f2:4b:55:d3:
         54:0c:5a:ba:44:9f:d4:fa:99:41:f4:20:19:10:90:7e:f5:40:
         2d:e3:a6:b0:cf:73:c3:17:ad:a8:01:f1:b9:a9:cb:68:85:b5:
         f7:cd:2f:c5:7a:a7:f2:00:53:11:da:07:3d:19:f0:52:12:3e:
         50:ec:d8:57:93:d1:b4:97:b9:5f:60:67:cf:80:6e:05:22:2d:
         e1:d0:98:1f:67:7f:b3:83:81:de:64:20:4a:b2:4b:39:e4:91:
         d7:a4:06:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:42:29 2026 by rpki-client