Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS10206.roa
File:                     AS10206.roa (raw, json)
Hash identifier:          MwQKlViCcT7jO1Ny0MR34yNXUdcM+8YzcJ82W3X7RTI=
Subject key identifier:   30:1F:74:28:CE:70:72:0A:47:73:CA:4B:7B:32:E4:62:93:1F:BE:4E
Certificate issuer:       /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
Certificate serial:       124E5B92A813CE860886684D634FA124CE03B7
Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS10206.roa
Signing time:             Wed 03 Jun 2026 08:15:43 +0000
ROA not before:           Wed 03 Jun 2026 08:10:43 +0000
ROA not after:            Wed 02 Jun 2027 08:15:43 +0000
asID:                     10206
IP address blocks:        116.129.224.0/24 maxlen: 24
                          116.129.226.0/24 maxlen: 24
                          116.129.242.0/24 maxlen: 24
                          116.129.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 23:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:4e:5b:92:a8:13:ce:86:08:86:68:4d:63:4f:a1:24:ce:03:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
        Validity
            Not Before: Jun  3 08:10:43 2026 GMT
            Not After : Jun  2 08:15:43 2027 GMT
        Subject: CN=301F7428CE70720A4773CA4B7B32E462931FBE4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c4:aa:08:83:ec:16:ae:98:d4:b7:7c:7d:88:
                    40:84:1c:a1:0a:8a:84:89:e1:25:e5:2a:c6:60:d7:
                    54:c0:2f:61:30:65:1d:8c:78:30:d1:2b:39:8d:16:
                    b0:4e:3d:39:33:70:1c:18:bb:bc:13:91:70:40:a6:
                    47:11:e0:24:c1:ff:4a:1a:bc:a7:d7:4d:f6:11:a4:
                    34:83:26:5e:df:fa:e5:0f:cc:1f:35:55:1e:1c:67:
                    67:c6:eb:2b:e7:7b:c7:24:bc:28:d9:04:df:99:0d:
                    b4:ee:7b:60:61:a7:ca:f3:c6:b6:78:0a:39:32:5e:
                    eb:06:5c:80:eb:a5:f8:7b:09:57:81:40:39:7f:87:
                    72:9d:43:40:dd:23:ce:04:b7:5b:64:1c:ca:b3:4e:
                    f1:a2:e6:31:b1:34:18:6f:7f:94:59:cb:32:52:12:
                    ea:9c:1b:cf:30:75:78:31:1d:2b:6e:b9:42:32:f8:
                    8c:c8:a9:49:34:23:fd:02:49:1b:21:dd:0e:e8:11:
                    65:e8:6e:db:0e:ea:02:fd:cc:07:73:6e:3d:dc:29:
                    36:ce:ee:7b:ba:6c:7d:35:a5:ab:bc:2a:0a:e0:e6:
                    4f:c4:76:f1:2f:89:81:d6:7b:20:9f:d7:2a:f4:42:
                    4b:01:29:62:13:fe:39:19:95:3e:12:d4:92:38:02:
                    1b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1F:74:28:CE:70:72:0A:47:73:CA:4B:7B:32:E4:62:93:1F:BE:4E
            X509v3 Authority Key Identifier:
                keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS10206.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.129.224.0/24
                  116.129.226.0/24
                  116.129.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c9:28:b1:b7:97:c1:c4:d3:36:d5:51:aa:aa:62:af:9b:0a:0a:
         a0:28:80:b2:9a:a4:21:70:d0:40:66:c7:a4:49:93:56:22:60:
         5f:f6:46:ec:8a:95:78:e4:82:ee:85:f1:99:3b:2c:8c:83:2c:
         82:e8:d8:bd:bf:6d:44:3c:59:78:d0:52:83:75:ee:eb:f5:ad:
         eb:ec:00:2a:c1:36:1b:d7:1b:ce:ef:10:fe:49:a0:86:00:ec:
         79:c0:1f:1e:d7:e9:8b:03:00:83:c4:8d:88:49:f5:69:c5:01:
         25:fb:81:e5:28:a3:b5:57:f9:07:b4:c3:d3:e7:fe:96:0e:16:
         48:6b:c8:bc:14:34:d9:cf:51:a9:8d:cb:09:89:45:14:b9:7c:
         86:01:0c:8f:53:b1:81:10:0e:3d:ae:54:35:9c:d0:1c:89:14:
         3a:94:84:d3:05:e7:e4:07:c6:15:28:d0:30:3a:07:6a:4f:a5:
         9b:fc:18:e3:b3:e4:d9:61:cf:c9:e5:81:7c:27:ce:ed:4d:32:
         8d:f1:e0:93:d2:8d:0c:60:2f:db:2d:85:7a:5c:fc:23:1e:f9:
         10:0c:ed:bb:47:ec:f5:17:af:3c:40:5c:86:09:3a:f5:8e:5d:
         33:58:a0:91:cf:24:02:89:8c:fb:c2:ff:66:d4:80:88:7f:13:
         93:df:52:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:42:18 2026 by rpki-client