Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS9808.roa
File:                     AS9808.roa (raw, json)
Hash identifier:          HDXyF2fIRHbd1sKuB2KiR2jS0LHxe5eAxe8lR3Xit+c=
Subject key identifier:   BA:7C:87:E3:33:1B:A4:02:E6:12:AF:5C:C9:72:74:19:B3:8C:FD:76
Certificate issuer:       /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial:       682B501B6CEA6AE12F42B8B30C5F5921A42EC316
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS9808.roa
Signing time:             Wed 10 Jun 2026 08:02:49 +0000
ROA not before:           Wed 10 Jun 2026 07:57:49 +0000
ROA not after:            Wed 09 Jun 2027 08:02:49 +0000
asID:                     9808
IP address blocks:        106.75.0.0/20 maxlen: 20
                          106.75.16.0/20 maxlen: 20
                          106.75.32.0/20 maxlen: 20
                          106.75.48.0/20 maxlen: 20
                          106.75.64.0/20 maxlen: 20
                          106.75.80.0/20 maxlen: 20
                          106.75.96.0/20 maxlen: 20
                          106.75.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 09:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2b:50:1b:6c:ea:6a:e1:2f:42:b8:b3:0c:5f:59:21:a4:2e:c3:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
        Validity
            Not Before: Jun 10 07:57:49 2026 GMT
            Not After : Jun  9 08:02:49 2027 GMT
        Subject: CN=BA7C87E3331BA402E612AF5CC9727419B38CFD76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8f:2b:3c:0d:57:a9:56:1e:08:f0:d9:05:22:
                    29:7e:1a:2e:d3:a2:93:63:2c:b7:25:dc:f5:a7:4d:
                    4d:02:4e:fb:1e:ab:4b:51:f4:1e:ff:91:5b:68:20:
                    3c:95:8d:50:99:ce:32:8e:05:0f:bc:14:b0:1c:5f:
                    b3:7e:c7:ea:0a:14:e4:ab:6d:f3:ca:a7:31:ee:17:
                    f4:1f:bd:b1:41:23:a0:d3:8a:56:63:34:6b:23:c7:
                    61:e7:a7:6d:dc:78:e3:41:83:a6:e9:78:a9:14:0f:
                    32:6f:a2:7a:a2:07:ef:70:5e:50:de:1b:df:ae:03:
                    c3:40:7f:11:89:ea:3b:29:40:4e:fd:a0:36:b0:46:
                    32:34:3e:35:27:46:74:e4:a5:79:bd:fd:a8:d9:e2:
                    b0:5a:a0:b4:2b:fe:c5:c5:4c:c4:be:e3:c2:0a:a4:
                    49:96:5f:28:fb:ed:99:b5:82:98:37:b6:42:e8:df:
                    2c:bd:b7:2c:66:cb:5f:5b:11:50:25:4c:57:00:87:
                    3f:e8:d0:3f:a1:1d:d7:96:cf:ff:9d:22:51:6d:c2:
                    4e:96:bd:66:01:e7:fc:43:83:f0:5e:10:a4:d6:da:
                    70:aa:be:40:f3:ac:b1:8d:bf:e8:96:7f:b8:60:91:
                    3a:96:1a:19:c3:92:2d:8f:bf:44:d3:0c:88:d3:05:
                    ee:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7C:87:E3:33:1B:A4:02:E6:12:AF:5C:C9:72:74:19:B3:8C:FD:76
            X509v3 Authority Key Identifier:
                keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS9808.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.75.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         19:4a:89:b7:e6:01:3d:02:3c:50:6f:26:cf:6e:89:95:c6:b6:
         44:91:0c:e6:37:6e:0f:1c:90:30:d7:49:f1:b1:21:bf:6f:9e:
         28:c6:60:4b:1f:8a:58:ad:01:07:ef:2b:f0:19:2f:e6:93:88:
         9a:84:a0:3f:36:02:57:66:68:9e:cc:18:fd:03:c6:ae:d0:96:
         6c:10:5a:90:bf:a8:a7:b0:c3:67:97:f9:ff:55:2c:8f:53:ed:
         00:ee:cd:2e:46:7b:c7:54:0d:c5:78:88:a7:ae:34:a7:a2:22:
         58:81:03:d2:43:0d:68:ea:1c:2a:cb:22:72:a4:b8:d1:df:c9:
         6d:27:39:33:da:f7:a8:3d:e5:2f:dd:7e:e8:51:42:62:ac:fa:
         88:be:e2:f7:93:d0:db:05:c6:80:9e:b2:8a:da:81:95:5f:37:
         c9:7c:54:c9:c4:b3:24:98:eb:4c:02:e7:48:20:73:99:90:b8:
         0d:42:6d:63:49:90:d3:7b:b0:41:3e:b0:11:c4:b0:ae:8a:28:
         37:14:5d:46:b8:7b:7f:52:af:10:2c:11:92:cf:af:fd:c5:b6:
         fc:2e:07:75:19:64:17:3c:33:7c:5c:2a:a2:e9:52:c6:66:58:
         77:7d:45:59:93:01:ba:b7:20:a5:56:79:2f:09:cc:f7:a3:9e:
         e3:73:67:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:58:37 2026 by rpki-client