Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254417411/0/3230322e3132372e3230302e302f32312d3231203d3e2037343937.roa
File:                     3230322e3132372e3230302e302f32312d3231203d3e2037343937.roa (raw, json)
Hash identifier:          f7eb5FGU3q4A0vXa+J8tyN1Ylm+0QsNOZz9WXa3Jd0Y=
Subject key identifier:   99:96:05:E6:B8:8F:45:FA:A1:07:A8:90:56:DE:A1:F7:E7:65:A9:FF
Certificate issuer:       /CN=49ECF12F237C18CFE0DD3E1D3F99E290380A282E
Certificate serial:       55BB2D370224BE9B9717F1F6D9686064694B735D
Authority key identifier: 49:EC:F1:2F:23:7C:18:CF:E0:DD:3E:1D:3F:99:E2:90:38:0A:28:2E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/3230322e3132372e3230302e302f32312d3231203d3e2037343937.roa
Signing time:             Wed 10 Jun 2026 03:33:10 +0000
ROA not before:           Wed 10 Jun 2026 03:28:10 +0000
ROA not after:            Wed 09 Jun 2027 03:33:10 +0000
asID:                     7497
IP address blocks:        202.127.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:bb:2d:37:02:24:be:9b:97:17:f1:f6:d9:68:60:64:69:4b:73:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49ECF12F237C18CFE0DD3E1D3F99E290380A282E
        Validity
            Not Before: Jun 10 03:28:10 2026 GMT
            Not After : Jun  9 03:33:10 2027 GMT
        Subject: CN=999605E6B88F45FAA107A89056DEA1F7E765A9FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ac:ab:92:d8:94:22:c3:0e:eb:71:3f:08:ce:
                    af:c6:0d:01:01:f9:b1:00:da:bc:9d:63:8c:fc:58:
                    2a:60:22:e6:93:62:b7:5c:ae:78:ef:4e:b2:1e:b8:
                    c7:42:df:bd:5c:28:94:c6:4c:1c:e5:84:a7:d7:bc:
                    1f:d6:ed:72:b2:59:58:a7:23:46:53:53:a4:c6:ea:
                    8b:5f:5d:4b:ba:35:45:93:b2:31:13:99:bf:92:05:
                    e5:ae:5a:80:6f:5b:64:0c:3e:45:ef:23:ee:da:1e:
                    58:f0:83:ae:af:8d:02:d2:04:6c:78:a2:1c:b5:fa:
                    6c:a6:1f:20:38:b1:a5:ed:59:2d:9a:aa:16:2c:09:
                    75:b3:fa:be:1d:34:a3:71:7f:47:a4:86:cb:7f:7e:
                    0f:a9:db:05:d8:7d:e0:bb:88:e9:59:42:a0:ea:e8:
                    30:58:53:e9:c5:f3:0f:9d:a0:5a:5f:7a:b2:57:46:
                    4d:0b:8f:e0:20:75:2f:75:d4:52:a9:30:bf:ab:be:
                    d2:d8:e7:32:92:41:2c:6d:c7:ad:31:61:39:ef:3b:
                    25:5e:15:fe:64:5b:29:fd:46:ea:4c:b7:6e:b4:8d:
                    10:19:b3:87:14:77:59:af:1f:9a:e6:7b:a2:00:73:
                    c9:a8:b8:e8:9a:80:b3:35:9f:2f:a3:01:f0:eb:d8:
                    6d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:96:05:E6:B8:8F:45:FA:A1:07:A8:90:56:DE:A1:F7:E7:65:A9:FF
            X509v3 Authority Key Identifier:
                keyid:49:EC:F1:2F:23:7C:18:CF:E0:DD:3E:1D:3F:99:E2:90:38:0A:28:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/3230322e3132372e3230302e302f32312d3231203d3e2037343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.127.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9b:e0:1e:66:37:d7:8d:84:b3:36:f6:7a:c3:24:33:5e:2c:de:
         fa:6a:02:ac:4d:d0:b4:f2:25:60:35:c3:47:db:5b:51:d7:ad:
         43:f5:aa:92:1a:28:6a:3b:51:e5:62:4c:40:f1:4a:9f:2f:33:
         09:ad:40:b8:19:45:5c:b0:f9:17:2f:3e:20:f5:c4:9d:1f:6d:
         8c:4f:57:8d:e0:93:37:02:5e:c4:2a:e4:7b:d6:04:f2:0b:2c:
         25:d8:35:54:e4:75:e8:6c:f2:eb:51:23:7e:2c:e0:0e:b2:32:
         9f:00:2e:5b:17:ea:4e:92:b1:b2:61:f0:50:fe:31:9f:04:0a:
         31:f6:fb:39:88:d5:70:74:98:5c:86:e4:ad:dd:90:52:23:c2:
         7d:8d:dc:b7:36:09:6e:63:79:4a:80:bf:b9:33:ca:ca:6a:3f:
         df:72:e4:a8:f4:ab:dc:55:cf:ad:cb:1b:06:0a:20:ca:df:c6:
         69:bd:bf:27:ba:e2:5e:2a:63:96:ba:67:0e:ae:72:ea:32:27:
         03:c8:af:8b:19:3a:64:f2:27:64:8e:ce:78:f7:1b:8e:38:ef:
         71:32:2c:a4:83:14:5a:3b:b6:96:71:60:29:98:2a:41:df:e0:
         54:89:6f:99:2c:cd:59:02:e4:5e:9f:09:25:54:92:5c:df:a9:
         bf:40:23:94
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:51:45 2026 by rpki-client