Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3130332e392e3235332e302f32342d3234203d3e203536303436.roa
File:                     3130332e392e3235332e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          9xFB1D09r1lJMKo8obIKMKRJXbYthhQRAjReO0S2Jqw=
Subject key identifier:   88:02:E7:79:72:05:16:E1:BE:C0:9E:11:27:36:2A:3C:5F:54:DD:DB
Certificate issuer:       /CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
Certificate serial:       53E58F99DAD573A330E4C3D8E0BB68488B8209E0
Authority key identifier: EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3130332e392e3235332e302f32342d3234203d3e203536303436.roa
Signing time:             Fri 12 Jun 2026 06:31:20 +0000
ROA not before:           Fri 12 Jun 2026 06:26:20 +0000
ROA not after:            Fri 11 Jun 2027 06:31:20 +0000
asID:                     56046
IP address blocks:        103.9.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e5:8f:99:da:d5:73:a3:30:e4:c3:d8:e0:bb:68:48:8b:82:09:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
        Validity
            Not Before: Jun 12 06:26:20 2026 GMT
            Not After : Jun 11 06:31:20 2027 GMT
        Subject: CN=8802E779720516E1BEC09E1127362A3C5F54DDDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6d:f0:e7:b4:ce:9c:5f:17:99:07:1c:f1:fa:
                    51:dc:25:2c:15:25:65:d7:c7:87:88:29:8e:00:15:
                    e1:e7:2a:ae:a0:0a:52:25:c7:27:4a:75:5f:54:a9:
                    fc:85:f4:eb:bb:40:e2:ef:86:b1:a6:c4:3c:04:5d:
                    56:4d:c2:86:b5:4d:24:1f:12:06:3d:91:e0:77:0a:
                    fb:2d:89:dc:f3:81:87:02:0b:d8:8d:22:71:78:ad:
                    95:02:d9:18:00:f2:07:0e:1d:05:7c:d1:82:fd:29:
                    44:d9:5e:65:f7:c0:94:82:38:1b:6d:4e:09:37:42:
                    a2:e2:ec:12:41:fd:40:e4:db:bc:59:a4:e9:92:ac:
                    df:ac:7f:35:23:cb:65:8f:15:cd:09:7e:f5:12:e8:
                    7f:9f:61:84:92:32:7d:82:02:3f:a9:4f:3a:5d:b5:
                    85:fb:f4:46:d0:2f:1b:ac:4b:7f:e2:32:2f:96:c0:
                    8e:3e:64:d3:de:35:18:dc:33:84:34:cb:ca:b4:57:
                    f6:d1:5c:68:3b:e6:38:70:23:a8:18:b4:b6:47:9a:
                    46:91:56:16:b2:a5:51:7b:4d:70:88:a9:3c:82:f7:
                    44:7f:9e:4f:58:b5:0c:e5:0c:1e:16:ac:75:d9:b1:
                    63:ec:c8:44:eb:82:14:53:a0:f0:69:2c:3d:55:0a:
                    7e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:02:E7:79:72:05:16:E1:BE:C0:9E:11:27:36:2A:3C:5F:54:DD:DB
            X509v3 Authority Key Identifier:
                keyid:EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3130332e392e3235332e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:ec:a6:9f:a7:4f:0c:41:56:d6:df:ba:f5:5a:3d:5b:6f:97:
         18:6a:07:c1:05:86:6f:76:01:09:af:38:32:82:01:f1:80:f7:
         e6:86:c8:ed:48:78:82:9d:49:61:0e:a5:16:7c:c0:09:9e:7d:
         97:43:f8:53:29:b8:e5:1a:79:2e:e5:b0:b9:4a:c0:6f:04:b6:
         19:0a:bd:29:61:e2:b5:20:47:32:5b:94:94:f4:ef:1e:c7:8b:
         ac:95:bd:be:7f:6d:71:f7:31:53:05:1a:4d:c5:06:51:75:03:
         2d:22:83:9b:ac:17:05:e4:b8:98:ee:91:bf:d8:c7:89:d9:35:
         78:3c:51:8b:6d:08:8e:20:5f:ce:da:05:f3:47:b7:ce:26:23:
         08:8d:cc:fc:d6:9a:80:67:4d:c9:0c:bb:0b:cf:f8:c2:41:d7:
         a7:26:54:43:6d:5f:9c:ea:31:9d:f6:76:62:52:9e:fa:22:cc:
         a8:42:fd:b4:02:e6:97:cc:34:8f:49:1d:a4:d5:dc:6b:99:f9:
         bb:04:7b:6e:9a:66:70:43:7a:19:0a:e8:33:2f:7e:32:79:1a:
         1e:5c:d3:58:ee:4a:57:9a:37:6f:12:d3:a2:65:38:f0:dd:4a:
         ab:60:6c:10:5c:27:ed:b0:be:c6:54:42:b6:d8:67:04:f6:5a:
         c6:b4:8f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:03:47 2026 by rpki-client