Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3130332e392e3235322e302f32342d3234203d3e203536303436.roa
File:                     3130332e392e3235322e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          U7acqhtamZs5C6t9/OddK1+QmO7PTsOi662343dHk+Q=
Subject key identifier:   5D:6A:6C:52:83:02:EB:AA:3C:20:7D:F0:46:04:B9:CD:3A:7E:EF:9B
Certificate issuer:       /CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
Certificate serial:       346A2790E5FCCA22D7CBE1657D8949211972B6D9
Authority key identifier: EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3130332e392e3235322e302f32342d3234203d3e203536303436.roa
Signing time:             Fri 12 Jun 2026 06:31:19 +0000
ROA not before:           Fri 12 Jun 2026 06:26:19 +0000
ROA not after:            Fri 11 Jun 2027 06:31:19 +0000
asID:                     56046
IP address blocks:        103.9.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6a:27:90:e5:fc:ca:22:d7:cb:e1:65:7d:89:49:21:19:72:b6:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
        Validity
            Not Before: Jun 12 06:26:19 2026 GMT
            Not After : Jun 11 06:31:19 2027 GMT
        Subject: CN=5D6A6C528302EBAA3C207DF04604B9CD3A7EEF9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4b:d6:fd:23:64:95:3c:2a:3d:48:a3:aa:8a:
                    a7:1a:fb:bf:73:6e:63:73:57:8f:93:62:24:a0:9d:
                    7b:d7:08:ac:c9:b6:5b:d6:e3:41:8d:3a:ca:32:f1:
                    f4:26:dc:2e:d6:f5:82:03:a3:5d:ef:21:6c:63:0d:
                    16:ec:d7:9a:b4:10:a5:b9:9c:1d:f2:8e:df:e2:6c:
                    39:a9:6f:f4:cf:a2:ab:1f:d3:97:88:f8:89:ef:da:
                    d8:69:0e:ab:7f:f7:25:9d:d9:f5:94:91:d3:61:72:
                    48:d2:4b:86:23:da:35:f7:9e:64:a5:cf:bc:73:5d:
                    58:dc:4e:f9:4e:dc:72:e8:b1:2e:78:e5:94:fe:b4:
                    b2:84:ac:53:30:0f:83:86:06:16:33:e4:28:28:e7:
                    1d:a7:e3:3f:ce:e5:df:eb:c3:25:b3:36:15:d5:fa:
                    19:06:74:be:fc:6b:03:96:53:ed:85:53:f5:19:ca:
                    f7:94:07:40:75:56:91:70:2d:34:05:22:3b:14:af:
                    e3:3c:78:38:ff:10:74:f7:69:6b:1e:78:77:6f:e4:
                    ee:67:d7:a6:19:76:44:a7:fe:bb:f8:68:85:6b:1b:
                    8b:e2:16:99:79:ba:75:02:81:be:f2:f4:bc:df:c4:
                    fe:7f:e0:b7:34:be:ef:44:8e:bf:af:e6:c0:b4:c7:
                    d4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6A:6C:52:83:02:EB:AA:3C:20:7D:F0:46:04:B9:CD:3A:7E:EF:9B
            X509v3 Authority Key Identifier:
                keyid:EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3130332e392e3235322e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:8d:2b:1a:9a:7e:e0:f9:aa:19:fd:cc:b8:df:eb:b5:72:60:
         46:35:b4:2d:50:a8:5e:ab:b1:d4:ae:c3:91:75:3d:cd:e5:ae:
         a1:06:56:05:3f:a8:d7:97:e5:d1:b6:96:9e:b4:33:04:4e:1d:
         2d:bd:f0:14:86:a3:58:8e:3c:0f:4f:2c:16:06:21:8d:e7:5e:
         a8:c6:fc:a3:f3:b2:2b:13:6f:94:ce:d4:ef:48:94:d5:0d:40:
         ed:7e:ad:02:14:1a:78:3b:f1:0e:27:4b:d7:9c:a8:03:0f:2f:
         b9:06:91:c9:e9:7c:3c:58:40:61:2e:dd:0a:4a:5d:d0:80:ca:
         04:f4:0a:85:d9:17:4f:b3:d9:ee:5d:82:8e:8a:95:e4:ff:07:
         dd:80:98:1a:ce:de:7b:c6:fb:9c:f6:72:e2:7a:1a:9b:ed:19:
         f4:49:ad:57:e2:77:ef:18:ed:89:7a:da:b4:c5:b6:85:2a:2f:
         09:a0:ab:e7:bd:c7:b6:31:fc:8a:b4:02:78:ae:60:a7:50:d1:
         e5:18:42:7e:7d:08:b5:44:c1:00:05:ad:69:30:19:7b:6d:6c:
         47:39:c5:15:6c:b4:1a:6e:65:ea:fb:46:eb:21:fa:87:e8:35:
         e6:7d:95:bc:96:d9:07:ad:e7:39:8b:57:97:63:d0:dc:e6:43:
         d7:cb:ca:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:51:41 2026 by rpki-client