Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3130332e3230352e342e302f32322d3232203d3e203233363530.roa
File:                     3130332e3230352e342e302f32322d3232203d3e203233363530.roa (raw, json)
Hash identifier:          +zV1PKL/ccw06r+fISyW/KD27+iC+cohFfmFttaTrAw=
Subject key identifier:   59:FB:AA:EC:9B:87:FE:45:C4:35:81:DC:76:71:C2:0E:80:6D:FB:0F
Certificate issuer:       /CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
Certificate serial:       54024CF322920590A5DFA1E6AEA9930F41796F37
Authority key identifier: EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3130332e3230352e342e302f32322d3232203d3e203233363530.roa
Signing time:             Fri 12 Jun 2026 06:33:27 +0000
ROA not before:           Fri 12 Jun 2026 06:28:27 +0000
ROA not after:            Fri 11 Jun 2027 06:33:27 +0000
asID:                     23650
IP address blocks:        103.205.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:02:4c:f3:22:92:05:90:a5:df:a1:e6:ae:a9:93:0f:41:79:6f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
        Validity
            Not Before: Jun 12 06:28:27 2026 GMT
            Not After : Jun 11 06:33:27 2027 GMT
        Subject: CN=59FBAAEC9B87FE45C43581DC7671C20E806DFB0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6b:6a:31:2a:4a:97:9e:8d:71:27:94:ae:15:
                    d4:38:f3:b9:ba:4d:78:b2:78:07:04:c7:c7:36:c5:
                    78:5d:3f:85:a9:92:fa:3e:9f:42:60:44:cd:f1:86:
                    92:84:8a:f2:b6:4b:78:aa:90:9a:5d:de:84:40:a2:
                    1c:78:09:4f:85:09:0f:2e:1a:43:07:15:df:01:56:
                    93:55:14:ac:ff:04:16:f6:03:be:1e:b9:c4:70:29:
                    7c:45:44:a6:5a:82:14:17:a4:30:f2:c1:4e:cb:1f:
                    c1:3e:0f:d7:52:bb:d7:3b:2e:ab:70:30:fb:5f:15:
                    e7:dc:90:c8:3d:0b:d6:3a:7c:bf:0b:e1:2b:f4:1c:
                    84:a6:51:54:60:80:2f:4d:3e:fa:da:2e:2d:12:e3:
                    36:fd:7f:64:0e:c6:1b:8e:6d:19:68:35:0d:05:73:
                    2d:24:49:68:89:e3:3d:f8:97:56:45:c6:b1:66:94:
                    4d:84:25:38:e9:06:8a:74:20:53:12:41:68:d5:46:
                    ca:17:4a:c6:bb:8a:ec:b8:45:b1:e6:5f:1c:04:a1:
                    e3:45:1d:61:dd:2a:c7:50:d3:08:bf:82:91:fe:ba:
                    ba:27:13:12:e5:99:a8:52:38:00:ac:20:ea:73:43:
                    dc:5b:10:ea:d2:55:c3:b0:2f:b2:6f:10:ba:0e:ea:
                    10:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FB:AA:EC:9B:87:FE:45:C4:35:81:DC:76:71:C2:0E:80:6D:FB:0F
            X509v3 Authority Key Identifier:
                keyid:EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3130332e3230352e342e302f32322d3232203d3e203233363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:17:d5:bd:3b:b7:14:2d:76:49:83:18:2b:c5:c3:c8:85:0e:
         74:52:cd:10:0a:36:c8:53:2a:f6:41:f2:fb:24:98:38:6f:e7:
         ac:7e:a4:19:73:12:84:dd:13:7e:bc:36:b0:e3:63:0d:d0:7a:
         6e:94:d9:3f:f2:1e:25:61:e7:4f:c8:5e:6c:be:cc:01:e1:36:
         b7:ef:53:76:bc:12:25:4a:53:e8:c3:46:f1:37:8c:9e:14:e7:
         9b:0a:29:70:e5:a9:44:b5:1f:a0:bd:09:22:5c:5a:2c:b7:97:
         cf:40:a1:59:7b:63:de:9e:ba:0b:a8:f6:d9:82:c8:8b:36:1b:
         c9:ed:31:1e:32:69:ca:96:78:df:97:02:40:69:28:e5:36:7a:
         e9:f0:0d:40:d3:9f:8a:1f:16:15:8d:ec:d0:9a:78:76:cf:8b:
         ca:52:e4:d8:3d:e5:fd:ad:61:ad:b6:53:57:e3:29:4b:ab:b1:
         db:4e:39:c8:d9:17:bb:a0:40:3f:3c:03:9a:72:85:ad:11:e6:
         bd:72:9a:3b:7c:0d:3a:a9:68:e2:aa:82:84:7d:e3:2c:14:4e:
         52:97:6e:43:1c:41:62:90:fa:ad:09:23:a9:75:1c:93:2c:31:
         43:39:ad:e7:e4:19:9a:ea:04:ad:03:c5:aa:5c:c0:c2:e0:06:
         0f:b8:19:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:53:32 2026 by rpki-client