Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3130332e3231332e39362e302f32322d3232203d3e203233363530.roa
File:                     3130332e3231332e39362e302f32322d3232203d3e203233363530.roa (raw, json)
Hash identifier:          ZDh83EFg+qiRKCnKlqAw1QUz8nKrwzow9uRU077Y+W4=
Subject key identifier:   69:EF:8D:98:91:F4:2A:D4:B2:F8:8F:77:3E:A7:32:9F:97:C1:27:4A
Certificate issuer:       /CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
Certificate serial:       1C65CD067A0622249DA278095FA636B61A722AA0
Authority key identifier: EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3130332e3231332e39362e302f32322d3232203d3e203233363530.roa
Signing time:             Fri 12 Jun 2026 06:33:27 +0000
ROA not before:           Fri 12 Jun 2026 06:28:27 +0000
ROA not after:            Fri 11 Jun 2027 06:33:27 +0000
asID:                     23650
IP address blocks:        103.213.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:65:cd:06:7a:06:22:24:9d:a2:78:09:5f:a6:36:b6:1a:72:2a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
        Validity
            Not Before: Jun 12 06:28:27 2026 GMT
            Not After : Jun 11 06:33:27 2027 GMT
        Subject: CN=69EF8D9891F42AD4B2F88F773EA7329F97C1274A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:68:ad:77:95:74:59:11:ce:ae:79:ba:f7:4c:
                    88:4d:2f:cd:ce:2d:da:c6:c7:b7:18:b5:0b:74:2b:
                    8c:25:15:cd:9f:d9:65:32:08:27:1c:9a:2a:c7:19:
                    52:1c:d1:10:c5:10:f7:a2:e8:27:6e:0a:82:a2:b5:
                    e5:3d:3e:81:3b:b9:a6:aa:52:89:b0:7a:5d:17:e4:
                    6b:97:b8:5a:55:af:99:98:5c:f0:92:fc:e6:d1:e5:
                    31:02:7b:07:50:eb:40:e3:61:da:d9:f8:12:93:a2:
                    94:a9:0f:cc:25:4d:96:0d:ba:43:1e:78:6d:d1:89:
                    a8:60:5c:c0:82:a4:80:06:73:e3:a1:ce:07:2f:5a:
                    6f:da:12:2c:72:6e:5e:f8:98:75:3e:b3:e2:05:5b:
                    da:e3:c5:a5:da:50:77:b8:a2:57:cd:1f:2c:16:55:
                    e9:fe:f7:ec:9e:ff:74:9f:72:f0:22:fc:b9:65:7e:
                    20:a9:03:9c:4d:87:2d:f8:9f:07:e2:a2:76:b6:5a:
                    7e:7e:a1:f7:38:03:06:b2:56:35:29:7a:d6:4e:09:
                    de:93:c5:a6:e0:c7:19:58:6f:97:0b:22:b3:3f:f1:
                    2f:be:d8:2c:8f:55:29:ab:bd:ac:5c:0e:42:6a:4f:
                    77:f7:af:a5:7c:9b:21:e8:3c:27:3e:50:98:10:23:
                    7d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:EF:8D:98:91:F4:2A:D4:B2:F8:8F:77:3E:A7:32:9F:97:C1:27:4A
            X509v3 Authority Key Identifier:
                keyid:EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3130332e3231332e39362e302f32322d3232203d3e203233363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:bb:6d:fe:94:6c:3e:21:06:0b:e8:64:2f:cf:27:ec:1e:5a:
         f2:d1:79:ec:35:6a:22:64:a1:87:d7:51:a0:25:f6:94:39:5e:
         ef:67:06:e6:77:24:4d:02:5f:dc:13:67:78:4e:fc:34:b1:3d:
         32:3d:3e:29:d2:19:47:d6:85:ec:b6:89:a8:36:75:47:08:b7:
         9d:45:b7:e6:e2:c7:a0:ba:43:a3:58:07:75:f1:4f:26:7f:0e:
         47:1c:94:45:6d:db:0e:33:1e:72:b3:6d:32:c7:99:9d:fd:82:
         d7:ba:07:38:20:85:8a:cb:b2:3c:3a:b5:18:4a:6f:88:1d:0d:
         ab:fc:04:5e:a8:45:81:ad:aa:69:3c:c6:a3:92:25:60:96:bc:
         de:5c:b5:6f:34:bf:98:de:6e:c9:9b:0c:f9:9e:49:ae:72:07:
         36:49:62:24:b5:44:60:1e:92:81:66:cf:2c:8d:b4:e0:96:03:
         d6:8a:4a:90:c3:91:7b:3f:88:c1:72:7b:4e:3c:6b:62:b1:f8:
         13:7a:ee:70:e6:0c:c4:31:13:93:59:75:f0:b1:b5:4f:3c:5a:
         21:51:24:64:51:20:79:f3:39:b3:c9:e8:88:54:de:70:ea:a1:
         22:4a:93:2e:93:6b:c0:c5:ac:4b:18:7c:48:51:bc:86:e6:05:
         73:67:76:27
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:47:02 2026 by rpki-client