Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132352e302f32342d3234203d3e2034353135.roa
File:                     3130332e37342e3132352e302f32342d3234203d3e2034353135.roa (raw, json)
Hash identifier:          kPEgeNjY+bToq3jPW/vM+1V++oV+UMLzRjIS0wuM3QI=
Subject key identifier:   2B:22:6C:13:30:79:F2:AE:F2:7C:12:74:DB:18:03:0D:12:C3:BB:D0
Certificate issuer:       /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial:       77876B2C904C249863AED8FDF9DB4EB106E4CEE5
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132352e302f32342d3234203d3e2034353135.roa
Signing time:             Wed 22 Apr 2026 13:42:25 +0000
ROA not before:           Wed 22 Apr 2026 13:37:25 +0000
ROA not after:            Wed 21 Apr 2027 13:42:25 +0000
asID:                     4515
IP address blocks:        103.74.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 10:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:87:6b:2c:90:4c:24:98:63:ae:d8:fd:f9:db:4e:b1:06:e4:ce:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
        Validity
            Not Before: Apr 22 13:37:25 2026 GMT
            Not After : Apr 21 13:42:25 2027 GMT
        Subject: CN=2B226C133079F2AEF27C1274DB18030D12C3BBD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d0:b7:0a:08:ae:43:eb:8d:6e:c7:6e:91:1b:
                    c7:48:5f:99:29:ad:64:d2:26:1c:9e:de:03:22:61:
                    2d:39:14:c6:c9:f5:ed:9d:76:f9:4c:c4:89:bc:96:
                    86:a1:61:33:c6:f2:37:3f:83:a3:98:50:56:ce:59:
                    f9:4d:bb:5e:56:3e:22:9c:b2:5f:98:f4:e5:d8:9f:
                    00:0e:34:fa:fa:93:bc:b0:3e:14:67:8f:7b:59:b3:
                    d4:17:8a:af:bb:4f:a6:93:09:d5:41:3c:6e:08:4e:
                    c6:cf:9b:c2:fe:d0:36:13:0c:a0:c2:6e:d5:48:d7:
                    09:bb:c3:ca:f5:fe:5d:6b:71:bb:70:e9:34:e2:72:
                    85:81:9c:87:8a:19:16:d5:c2:eb:db:f8:9c:cc:1b:
                    dd:4b:9e:9b:2d:6a:0e:9b:e1:cf:cc:da:e4:df:2e:
                    96:e7:0f:f4:4b:f6:11:2c:1e:fc:d9:96:3a:0e:89:
                    65:26:6d:36:a2:d6:05:5f:e1:05:12:a3:ca:e7:81:
                    12:0d:5f:7c:1d:1d:0e:24:c5:4a:04:37:93:e4:57:
                    cf:a5:f0:25:80:8a:0b:e5:6e:1c:e1:82:a8:03:54:
                    99:8a:9d:e0:43:50:19:5d:35:7b:3c:75:0a:33:55:
                    f2:8b:f4:ef:de:66:20:91:9a:38:ef:3d:55:5e:b8:
                    dc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:22:6C:13:30:79:F2:AE:F2:7C:12:74:DB:18:03:0D:12:C3:BB:D0
            X509v3 Authority Key Identifier:
                keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132352e302f32342d3234203d3e2034353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:fe:7a:bf:1a:e3:1a:38:76:25:57:16:50:89:91:62:19:1b:
         1e:d1:97:97:71:80:6c:6a:c8:74:18:80:fc:69:50:e4:77:09:
         28:a3:2b:c4:a3:72:91:22:08:d5:7f:5d:2e:cb:fc:2d:c0:1a:
         10:c9:f7:eb:6a:ac:41:8d:c3:42:79:b3:76:43:55:46:fe:f6:
         eb:91:a3:b8:58:fa:ad:cc:03:01:e1:21:23:92:27:6d:91:3c:
         3d:af:15:bb:2f:05:be:42:e3:8d:58:e0:6e:fe:97:65:b9:15:
         03:90:30:fe:79:ea:aa:65:1e:c0:b8:92:d7:2d:d0:b6:c3:60:
         02:b1:26:05:37:ea:7f:8c:a8:aa:6a:74:03:52:4e:f2:1c:e2:
         ef:16:64:03:2a:35:84:97:53:ef:45:cd:04:e2:da:25:11:b7:
         76:01:72:03:86:b0:8f:2e:8a:fc:9b:4c:1d:42:4a:00:3d:68:
         5b:13:b6:94:2f:0a:6d:82:23:77:99:a0:31:e2:e4:db:45:24:
         23:3d:91:42:36:af:42:15:56:7a:79:83:c2:60:4a:38:c0:de:
         83:4c:53:7d:1d:66:9a:fa:d3:3a:f7:46:10:11:70:56:56:50:
         22:5b:0e:e2:64:d4:8d:db:87:73:6d:60:3d:c6:00:fa:a2:be:
         0b:e8:ac:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:06:07 2026 by rpki-client