Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3230332e37362e3234312e302f32342d3234203d3e203536303436.roa
File:                     3230332e37362e3234312e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          aEYPXJsj5X3zjcewQ7CK5UHagZnYhGdirmsec70kPN4=
Subject key identifier:   59:87:69:31:11:02:83:59:BA:4A:6D:1F:8F:FD:DC:2F:12:A9:CF:F6
Certificate issuer:       /CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
Certificate serial:       61B160FB569C4385D288D31CAE3D4FD393DC064A
Authority key identifier: EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3230332e37362e3234312e302f32342d3234203d3e203536303436.roa
Signing time:             Fri 12 Jun 2026 06:31:20 +0000
ROA not before:           Fri 12 Jun 2026 06:26:20 +0000
ROA not after:            Fri 11 Jun 2027 06:31:20 +0000
asID:                     56046
IP address blocks:        203.76.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b1:60:fb:56:9c:43:85:d2:88:d3:1c:ae:3d:4f:d3:93:dc:06:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
        Validity
            Not Before: Jun 12 06:26:20 2026 GMT
            Not After : Jun 11 06:31:20 2027 GMT
        Subject: CN=5987693111028359BA4A6D1F8FFDDC2F12A9CFF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:80:24:c6:98:d4:89:6f:67:19:06:f3:e3:a5:
                    54:d0:fc:10:b7:fe:db:b5:c4:b3:1c:c7:df:10:2a:
                    05:39:7f:10:95:77:27:3b:3a:a6:71:c5:13:c9:12:
                    d3:51:15:b9:1d:df:d1:02:82:72:d0:77:7f:22:dc:
                    d4:97:23:40:d7:00:6c:b6:7f:68:8e:3f:cd:e8:c0:
                    fa:5f:42:42:b3:5d:e5:55:5c:d8:f8:21:e7:cc:e9:
                    17:67:fe:fc:d8:5b:5b:20:53:9b:1e:11:d6:56:ba:
                    8e:2f:7a:00:a3:6b:9b:68:94:7a:c5:51:d3:cf:96:
                    19:4a:69:18:33:09:72:16:bc:b3:41:b2:00:4a:cc:
                    8f:88:a8:2f:90:33:81:c0:f9:27:10:eb:35:04:b3:
                    31:ae:1e:ab:b0:83:92:8c:88:b1:5c:22:2e:7d:d3:
                    27:e5:fd:7e:52:bd:dd:9b:8e:b1:fa:57:92:56:5c:
                    ae:ff:71:d7:e0:93:15:75:5b:d4:b8:3c:e2:18:bf:
                    9d:5c:fc:f8:dd:9d:aa:f2:03:30:d7:83:a4:9e:77:
                    89:2e:a4:81:52:ae:2a:83:48:44:cd:4b:c3:6b:d6:
                    b1:bf:ed:2c:fd:c3:9e:70:e1:ca:a4:56:39:74:f3:
                    a1:6b:49:90:6c:73:df:aa:4c:7f:ca:84:c4:9c:78:
                    1c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:87:69:31:11:02:83:59:BA:4A:6D:1F:8F:FD:DC:2F:12:A9:CF:F6
            X509v3 Authority Key Identifier:
                keyid:EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3230332e37362e3234312e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.76.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:9a:18:91:e2:bc:be:ca:e4:13:5c:bc:69:3c:30:da:af:85:
         88:52:c0:01:8d:61:5c:33:89:bb:44:93:c0:9e:0b:22:e3:f5:
         4b:b3:c5:1f:e7:8b:0f:b4:08:43:b6:85:10:22:5a:43:3f:59:
         c7:ea:32:7e:77:bc:d0:86:85:81:b7:12:2d:20:ad:25:9f:48:
         86:96:3a:f5:a8:ad:88:5f:cb:e5:91:99:b0:42:de:80:36:81:
         82:63:f1:72:84:e6:78:50:a8:88:94:bc:34:29:38:1f:db:81:
         0e:d1:26:d1:d4:ab:9e:94:f9:92:53:7e:b4:39:ef:9f:27:d0:
         f1:dd:c0:b7:65:24:cb:e7:5c:53:3c:36:4a:f7:10:2a:c0:8c:
         2b:5c:22:af:d4:f3:29:38:dc:fd:7b:a6:1b:36:3b:43:c0:3b:
         70:6e:b2:7c:db:49:a0:1f:ce:19:82:0f:13:e6:af:94:ef:74:
         33:da:c5:f4:20:cf:59:6f:8e:5b:14:76:05:72:d4:53:e4:29:
         26:94:57:eb:f1:af:f9:40:78:7d:50:e6:d4:f4:20:3c:61:d1:
         9d:8d:f5:e7:a9:52:9f:cd:ec:32:89:98:e7:e8:c8:f8:e4:11:
         d4:7d:0e:e3:56:bb:60:f4:aa:18:3c:f3:52:dc:a1:bf:13:80:
         c0:0c:9d:33
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:32:29 2026 by rpki-client