Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1134692662507470893/0/3130312e34392e3230362e302f32342d3234203d3e203539303638.roa
File:                     3130312e34392e3230362e302f32342d3234203d3e203539303638.roa (raw, json)
Hash identifier:          CKMl/00h/msypGP4zF+uCyfg/cUiErV8Q9I2C6W5rc8=
Subject key identifier:   16:52:29:D9:11:20:B8:91:C3:EB:38:98:F6:2C:53:BB:06:56:30:A2
Certificate issuer:       /CN=B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559
Certificate serial:       43D69103DEEB73AF12BCA33FC8E8D3D7393B345F
Authority key identifier: B8:AF:B6:96:C1:5A:BC:4F:FE:FB:3E:B1:EA:10:EF:D4:93:19:E5:59
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/3130312e34392e3230362e302f32342d3234203d3e203539303638.roa
Signing time:             Wed 29 Jul 2026 04:16:47 +0000
ROA not before:           Wed 29 Jul 2026 04:11:47 +0000
ROA not after:            Wed 28 Jul 2027 04:16:47 +0000
asID:                     59068
IP address blocks:        101.49.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 22:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d6:91:03:de:eb:73:af:12:bc:a3:3f:c8:e8:d3:d7:39:3b:34:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559
        Validity
            Not Before: Jul 29 04:11:47 2026 GMT
            Not After : Jul 28 04:16:47 2027 GMT
        Subject: CN=165229D91120B891C3EB3898F62C53BB065630A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a1:e4:9b:56:4e:3f:2f:12:b9:46:1b:5a:52:
                    15:6e:0e:16:f7:4e:a8:3e:32:57:16:fa:3a:12:f2:
                    ef:ac:0e:48:82:a3:9e:a7:c8:cf:41:66:d6:93:ce:
                    38:ec:0e:b9:16:3f:5a:b7:fa:fc:3c:5d:f4:91:3a:
                    bd:d2:85:46:bd:78:57:0d:c4:c1:e5:9b:c4:15:0e:
                    aa:8e:79:fd:50:f1:2b:fc:ab:4c:82:18:86:84:a9:
                    ce:db:03:88:32:3f:85:73:f1:e8:0f:e1:8d:8d:8a:
                    bf:cb:46:eb:93:57:f2:4d:27:44:2a:e5:d6:c6:c1:
                    f9:3d:02:06:5f:7d:6f:34:e7:b5:a1:47:be:45:28:
                    a5:e7:52:e0:d3:71:be:c7:c9:7a:82:d7:12:d9:b5:
                    3a:60:23:e9:fe:4e:36:b6:cc:ef:80:3d:19:6a:a2:
                    dc:ff:60:6e:b2:d7:48:d5:07:31:74:43:6b:7c:a8:
                    9c:04:62:8e:3d:3e:97:5b:16:cf:e0:ef:74:96:67:
                    03:5d:52:d9:fe:f1:4b:34:c7:c1:32:11:4b:a7:8d:
                    44:d9:ec:7b:eb:e9:74:9b:86:72:4e:38:0d:bc:d0:
                    17:25:53:45:6b:f8:41:da:eb:96:03:84:37:c6:74:
                    bd:67:fa:62:3b:39:a1:9f:40:93:11:4f:dd:0e:32:
                    d9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:52:29:D9:11:20:B8:91:C3:EB:38:98:F6:2C:53:BB:06:56:30:A2
            X509v3 Authority Key Identifier:
                keyid:B8:AF:B6:96:C1:5A:BC:4F:FE:FB:3E:B1:EA:10:EF:D4:93:19:E5:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/3130312e34392e3230362e302f32342d3234203d3e203539303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.49.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:2b:f5:b1:52:68:56:7a:49:3e:b2:c9:b7:ec:85:e1:5f:57:
         a5:96:71:7c:c0:49:24:ac:a4:06:d3:69:d5:d1:0b:c1:f3:29:
         90:a2:74:c4:aa:1b:71:34:34:ec:f9:9e:b5:26:94:89:13:a4:
         5d:9f:21:49:42:e7:f9:30:ff:ca:c9:ce:9f:55:eb:ab:f1:8c:
         32:4e:0e:6c:6c:bb:3a:35:d9:8c:43:ff:97:fa:00:f0:79:c6:
         20:98:c8:84:c8:aa:aa:bd:31:dc:95:50:d0:10:4a:e7:1f:55:
         92:a1:87:1f:d3:5a:52:02:81:d7:78:84:f0:94:7b:81:ad:b8:
         e8:b6:1d:b2:f7:de:6f:8c:93:16:00:fa:5b:bc:d6:0e:ec:bc:
         92:91:9c:17:a3:13:bd:da:06:90:9f:97:87:a2:d3:85:4a:fa:
         1f:49:23:d5:82:a4:49:16:fe:97:ac:68:8d:29:de:6a:18:77:
         4a:3b:57:d4:bb:38:b4:7a:5a:5b:52:06:59:8f:55:ca:b1:02:
         37:fa:92:31:2d:c0:74:d3:00:b3:d6:b0:e7:7b:c9:3f:7d:6d:
         30:cb:92:24:37:6b:3a:16:53:94:d8:54:66:63:df:82:b4:ee:
         2f:9f:19:d9:54:08:df:8c:85:fe:f5:b5:18:49:9e:7e:cd:ce:
         36:3a:c5:2e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 29 23:51:56 2026 by rpki-client