Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3139322e3134302e3231322e302f32322d3232203d3e203233363530.roa
File:                     3139322e3134302e3231322e302f32322d3232203d3e203233363530.roa (raw, json)
Hash identifier:          yCEqukrHa5r+n/HUWBJdDExiMCfo3iTa+RAuv2bKf7k=
Subject key identifier:   3F:3A:7D:BA:3A:DB:D6:45:F7:B4:9A:FB:54:86:C5:42:D0:0B:FC:7E
Certificate issuer:       /CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
Certificate serial:       7D0C842565C7F182A523BABE6C3C436B005F8AB6
Authority key identifier: EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3139322e3134302e3231322e302f32322d3232203d3e203233363530.roa
Signing time:             Fri 12 Jun 2026 06:33:27 +0000
ROA not before:           Fri 12 Jun 2026 06:28:27 +0000
ROA not after:            Fri 11 Jun 2027 06:33:27 +0000
asID:                     23650
IP address blocks:        192.140.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:0c:84:25:65:c7:f1:82:a5:23:ba:be:6c:3c:43:6b:00:5f:8a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
        Validity
            Not Before: Jun 12 06:28:27 2026 GMT
            Not After : Jun 11 06:33:27 2027 GMT
        Subject: CN=3F3A7DBA3ADBD645F7B49AFB5486C542D00BFC7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:be:41:27:05:85:cd:44:c2:37:0f:3a:a0:83:
                    ee:f0:dd:7e:e5:06:37:c6:68:ce:80:ee:9b:6f:d1:
                    98:21:96:98:1a:20:b4:d1:11:20:22:8f:d5:37:b3:
                    6b:f2:3c:7e:5f:19:a2:c8:90:50:25:dc:74:24:ea:
                    2b:bd:95:31:30:26:66:3b:5d:a8:54:b1:bb:be:77:
                    1a:52:c6:fc:13:a0:04:46:cb:7e:42:9d:20:80:ab:
                    af:9c:06:8e:dc:e9:5b:90:a6:c5:12:ce:58:2f:b4:
                    bf:4d:0b:72:d1:25:ab:90:d2:fc:20:66:93:35:d6:
                    74:84:2e:d9:90:d0:eb:36:eb:d9:20:01:fa:b8:a3:
                    d3:da:61:a5:06:85:48:29:dc:23:8e:17:c8:91:70:
                    e9:4c:df:65:8b:76:cc:ec:cc:cf:4a:bf:0c:73:61:
                    d4:48:fc:0f:d0:89:de:f8:47:1d:ab:c3:25:ef:56:
                    b6:ce:f4:dc:a8:4c:d6:63:06:91:00:ba:31:96:ee:
                    e0:a5:38:46:7a:2e:a1:72:ce:e7:1f:04:e1:81:7c:
                    4f:bf:6e:05:ee:bc:f5:8a:4f:c5:ac:8a:dc:11:49:
                    3e:c8:0d:b0:56:08:c2:16:d2:51:93:79:0a:b2:47:
                    e5:88:43:f1:fa:f9:de:30:4d:60:72:be:11:b5:83:
                    bf:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3A:7D:BA:3A:DB:D6:45:F7:B4:9A:FB:54:86:C5:42:D0:0B:FC:7E
            X509v3 Authority Key Identifier:
                keyid:EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3139322e3134302e3231322e302f32322d3232203d3e203233363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:3a:69:cf:28:ed:a6:59:76:6f:ac:5b:35:44:e4:fc:16:59:
         91:a5:86:6d:33:54:17:45:0b:82:d1:35:64:c7:7a:4d:2e:96:
         3e:28:a7:0a:62:28:e2:d4:3f:01:3f:86:af:6f:b7:95:d7:87:
         a2:fa:9c:8a:16:d5:f2:59:bf:7c:25:9d:76:92:8f:9a:ac:f4:
         2a:c8:d1:cf:7d:c5:dd:9c:ec:b9:63:f6:a3:fe:aa:16:0e:13:
         d6:d9:28:7e:c6:70:7e:7e:ae:b3:85:4b:3b:0c:27:4d:86:e1:
         e3:87:59:d8:99:10:24:91:5a:70:58:81:f3:bd:65:70:24:05:
         29:a5:b7:f5:38:15:41:42:94:85:ab:5e:bb:52:59:a8:6c:c9:
         72:41:59:db:dc:e2:9a:8c:f9:34:cd:16:6b:c3:e8:dd:5d:b4:
         15:93:67:fa:ec:5a:0a:57:d2:55:96:75:12:d9:b3:dd:86:ab:
         e9:ae:8d:b4:4e:78:75:e8:b7:86:6e:24:3e:bf:3b:61:f2:d8:
         57:62:27:12:ac:b8:f4:35:fe:41:b9:07:67:f6:4b:a3:3d:a8:
         93:87:69:b5:57:0c:1a:63:b1:74:85:cd:20:e1:3c:00:0c:bd:
         d0:a5:46:2e:79:bd:3c:1a:aa:10:cd:08:4e:55:b1:31:99:7f:
         32:c2:38:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:49:03 2026 by rpki-client