Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3130332e3231332e39372e302f32342d3234203d3e203536303436.roa
File:                     3130332e3231332e39372e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          pnolZXkmt73Ktmf7d+S4a243j2WrpCs/NCDAxfrfQGQ=
Subject key identifier:   E5:35:19:54:BF:CB:AD:7C:C5:C1:9C:78:4D:6B:3B:CC:FA:8B:12:7D
Certificate issuer:       /CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
Certificate serial:       7D531D7781BA169CE38FBDA7B46B279C101CFF2C
Authority key identifier: EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3130332e3231332e39372e302f32342d3234203d3e203536303436.roa
Signing time:             Fri 12 Jun 2026 06:31:31 +0000
ROA not before:           Fri 12 Jun 2026 06:26:31 +0000
ROA not after:            Fri 11 Jun 2027 06:31:31 +0000
asID:                     56046
IP address blocks:        103.213.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:53:1d:77:81:ba:16:9c:e3:8f:bd:a7:b4:6b:27:9c:10:1c:ff:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
        Validity
            Not Before: Jun 12 06:26:31 2026 GMT
            Not After : Jun 11 06:31:31 2027 GMT
        Subject: CN=E5351954BFCBAD7CC5C19C784D6B3BCCFA8B127D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:38:17:67:f3:08:6e:66:49:39:05:c7:ca:6e:
                    85:59:ce:7a:07:68:74:2e:b7:30:81:2c:35:46:44:
                    cd:ae:6e:5f:c5:f8:e5:ec:10:a2:0f:bc:30:7c:49:
                    26:7d:c1:5c:26:f0:35:74:77:f4:b4:41:e3:99:e2:
                    d2:f9:4c:45:f7:d5:39:9a:54:2e:6f:c0:b5:1b:64:
                    35:19:f1:e0:10:81:52:cb:fa:75:90:6a:44:1f:60:
                    40:62:0e:59:ae:cc:3d:8b:0a:7b:bb:26:da:93:d2:
                    fc:1f:85:4e:b7:e0:c9:1a:ab:f8:29:84:2f:90:dd:
                    da:de:4b:a9:77:75:a3:f3:63:3f:c2:3e:35:fe:c9:
                    e0:f3:ac:70:6f:d1:2e:12:cd:3b:bd:48:0a:00:e6:
                    04:8a:e5:11:07:9f:e6:3f:24:2a:aa:0c:54:61:fc:
                    3a:5f:97:b0:46:57:ce:c9:30:62:fa:19:92:86:b2:
                    d5:b2:d3:fe:98:f4:50:d3:d7:6b:b5:e5:4f:9c:5e:
                    c5:e6:c2:16:81:a8:c4:43:15:49:20:84:4a:ca:a1:
                    b3:3e:70:01:da:37:34:22:22:d5:80:51:c0:f8:7a:
                    67:71:8c:e6:99:41:b0:78:3a:98:c0:b8:91:9e:1a:
                    f6:df:e6:3e:5f:34:93:7a:cc:9e:34:87:76:99:43:
                    24:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:35:19:54:BF:CB:AD:7C:C5:C1:9C:78:4D:6B:3B:CC:FA:8B:12:7D
            X509v3 Authority Key Identifier:
                keyid:EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3130332e3231332e39372e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:6f:67:5a:f8:90:9b:fd:a1:5d:c3:e7:9a:8e:85:bd:ed:54:
         f8:66:dd:39:24:de:cc:23:2a:f8:65:34:3f:48:d0:04:ba:ca:
         15:dd:75:a7:dd:60:43:76:3f:64:9b:07:97:e4:5d:63:7a:a1:
         d4:6d:45:ba:9e:dc:31:81:be:d1:42:93:69:dc:22:51:f9:a5:
         06:58:7e:d5:e5:7c:fc:3e:2e:a1:d4:c2:05:aa:d0:f1:07:51:
         96:43:3d:f9:c2:3e:2c:63:94:0a:11:3e:29:73:f2:56:39:7e:
         5a:02:bc:32:68:e9:bb:b5:be:f7:cc:98:7c:f0:08:cf:cd:21:
         74:23:16:d2:eb:1a:1b:ca:e8:38:2f:47:f2:50:c6:eb:b5:84:
         09:59:3c:7a:77:0a:67:db:33:3a:72:cf:cf:64:ff:10:33:e5:
         c2:79:b5:c3:f8:f8:5a:e6:85:8f:c5:40:0e:f9:3b:ed:c4:c3:
         6a:7e:78:54:a8:f8:7b:78:8d:cf:b5:19:88:7d:5f:e6:d5:e1:
         56:ac:84:a7:55:06:58:6b:9d:c5:e9:b0:9d:e5:48:b9:76:c0:
         61:57:2d:1a:72:3a:76:84:78:ca:c0:86:e6:ff:06:b6:32:5f:
         61:b0:21:bb:cf:b1:14:fd:5a:9d:8a:eb:16:c4:60:71:30:64:
         e1:de:bf:a5
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUfVMdd4G6Fpzjj72ntGsnnBAc/ywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI4MDY3MkFENDJBMjc5NkFGREI2Qzk5RjdGRkI2MjlF
NkEwQTRFRTAeFw0yNjA2MTIwNjI2MzFaFw0yNzA2MTEwNjMxMzFaMDMxMTAvBgNV
BAMTKEU1MzUxOTU0QkZDQkFEN0NDNUMxOUM3ODRENkIzQkNDRkE4QjEyN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLOBdn8whuZkk5BcfKboVZznoH
aHQutzCBLDVGRM2ubl/F+OXsEKIPvDB8SSZ9wVwm8DV0d/S0QeOZ4tL5TEX31Tma
VC5vwLUbZDUZ8eAQgVLL+nWQakQfYEBiDlmuzD2LCnu7JtqT0vwfhU634Mkaq/gp
hC+Q3dreS6l3daPzYz/CPjX+yeDzrHBv0S4SzTu9SAoA5gSK5REHn+Y/JCqqDFRh
/Dpfl7BGV87JMGL6GZKGstWy0/6Y9FDT12u15U+cXsXmwhaBqMRDFUkghErKobM+
cAHaNzQiItWAUcD4emdxjOaZQbB4OpjAuJGeGvbf5j5fNJN6zJ40h3aZQyRdAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU5TUZVL/LrXzFwZx4TWs7zPqLEn0wHwYDVR0j
BBgwFoAU64BnKtQqJ5av22yZ9/+2KeagpO4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
ODUyNjYwNzY3MDI0NzQyNS8wL0VCODA2NzJBRDQyQTI3OTZBRkRCNkM5OUY3RkZC
NjI5RTZBMEE0RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUI4MDY3MkFENDJBMjc5NkFGREI2Qzk5RjdGRkI2MjlFNkEwQTRFRS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5ODUyNjYwNzY3MDI0NzQyNS8wLzMxMzAzMzJlMzIz
MTMzMmUzOTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGfVYTANBgkqhkiG9w0BAQsFAAOCAQEAa29nWviQm/2hXcPnmo6Fve1U
+GbdOSTezCMq+GU0P0jQBLrKFd11p91gQ3Y/ZJsHl+RdY3qh1G1Fup7cMYG+0UKT
adwiUfmlBlh+1eV8/D4uodTCBarQ8QdRlkM9+cI+LGOUChE+KXPyVjl+WgK8Mmjp
u7W+98yYfPAIz80hdCMW0usaG8roOC9H8lDG67WECVk8encKZ9szOnLPz2T/EDPl
wnm1w/j4WuaFj8VADvk77cTDan54VKj4e3iNz7UZiH1f5tXhVqyEp1UGWGudxemw
neVIuXbAYVctGnI6doR4ysCG5v8GtjJfYbAhu8+xFP1anYrrFsRgcTBk4d6/pQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:23:18 2026 by rpki-client