Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3130332e3231332e39382e302f32342d3234203d3e203536303436.roa
File:                     3130332e3231332e39382e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          B4xYq71ex0/ByIEst0hK4XBSXsVqcAP4Jgnx9ltbR0M=
Subject key identifier:   BB:7C:67:30:CF:B0:8A:92:9B:5C:A5:27:C2:7C:A6:64:46:54:E0:5C
Certificate issuer:       /CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
Certificate serial:       6166FF930E2C53AABD0A264385E398248606E0AB
Authority key identifier: EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3130332e3231332e39382e302f32342d3234203d3e203536303436.roa
Signing time:             Fri 12 Jun 2026 06:31:21 +0000
ROA not before:           Fri 12 Jun 2026 06:26:21 +0000
ROA not after:            Fri 11 Jun 2027 06:31:21 +0000
asID:                     56046
IP address blocks:        103.213.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:66:ff:93:0e:2c:53:aa:bd:0a:26:43:85:e3:98:24:86:06:e0:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
        Validity
            Not Before: Jun 12 06:26:21 2026 GMT
            Not After : Jun 11 06:31:21 2027 GMT
        Subject: CN=BB7C6730CFB08A929B5CA527C27CA6644654E05C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9b:15:e8:e7:18:00:7a:d3:31:48:3a:7f:df:
                    74:c1:d6:89:10:04:2e:4e:34:a9:aa:70:93:b1:bc:
                    c8:9f:d9:d9:c8:ee:94:90:1d:0e:9c:64:bf:94:b1:
                    24:32:0d:30:3a:12:40:f1:67:c8:de:4b:44:a3:d4:
                    1b:ca:c5:0f:ae:ca:e8:c6:3f:c8:8f:c0:01:d6:d2:
                    6c:e2:72:d8:e4:7d:71:9b:6e:ff:12:43:78:31:93:
                    c4:a0:72:5c:81:af:39:b0:39:8b:bb:61:76:e0:8a:
                    3d:9e:e9:53:b3:94:11:5e:fa:82:68:6b:bf:29:07:
                    5f:2b:89:a0:06:4e:71:9e:ed:51:c2:03:37:db:3a:
                    0a:18:12:2d:09:37:5e:6d:fe:0a:13:35:07:93:af:
                    3d:ba:3a:a5:b6:c2:2b:49:f6:50:69:64:09:f0:cf:
                    14:12:49:d0:1e:5f:c9:5c:3a:a9:5f:07:1b:60:88:
                    64:48:80:af:c4:3f:cb:0f:1a:48:e8:d7:e0:16:68:
                    f1:53:a7:4c:9b:34:4d:7c:ae:1a:26:67:b0:c4:24:
                    ad:10:19:8d:ac:92:81:f8:69:0b:b8:ae:b7:e6:18:
                    71:58:a1:b4:43:96:e3:0d:ec:82:60:39:af:64:bf:
                    2b:1a:5b:08:19:a7:32:13:0c:2b:84:8b:9f:b6:e5:
                    81:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7C:67:30:CF:B0:8A:92:9B:5C:A5:27:C2:7C:A6:64:46:54:E0:5C
            X509v3 Authority Key Identifier:
                keyid:EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3130332e3231332e39382e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:20:80:c7:72:63:83:3e:6a:5d:df:3e:2e:90:ba:ce:9e:08:
         2c:78:b2:5c:fd:e7:30:c8:db:d6:38:fc:21:c2:c2:c0:55:77:
         6d:a7:cb:63:dc:e2:3a:8b:13:f2:75:53:c7:d8:b6:d7:b4:b4:
         99:30:36:fd:8d:6e:12:3a:2f:b6:a8:54:4e:ea:75:d2:76:ca:
         99:0a:d1:e4:e2:c5:40:e5:9e:9f:dc:9b:f9:fe:89:89:41:81:
         2a:3c:ed:f1:26:59:14:49:76:04:5e:07:6d:01:b2:5c:c2:0e:
         4b:9f:78:9d:3f:fa:dc:a8:26:f6:e8:6c:b6:90:ad:d3:17:f8:
         25:04:d5:af:99:2d:b5:c8:35:4b:5f:34:a7:67:79:83:f4:0a:
         39:a4:5e:b1:6c:8b:7f:ab:4c:a7:f8:e2:23:0e:4a:75:91:a9:
         ac:20:e1:3f:68:90:e5:75:2c:70:05:65:61:02:b2:e1:6b:82:
         d3:ad:aa:85:48:9c:86:af:4e:e6:26:61:58:d0:eb:2a:99:ea:
         a8:ff:8b:d5:12:98:6d:a5:70:f9:64:c8:14:63:95:2e:e0:2e:
         dc:8b:13:ff:55:73:6d:2b:4f:76:04:0f:14:3c:fb:33:26:ee:
         1c:a7:9c:17:65:e6:2d:0e:6f:8a:12:0a:98:ce:80:39:75:ed:
         dc:cf:91:8b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:35:29 2026 by rpki-client