Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132352e302f32342d3234203d3e2034383132.roa
File:                     3130332e37342e3132352e302f32342d3234203d3e2034383132.roa (raw, json)
Hash identifier:          QQ5YYDcejvZEHru0w1UtLf1cdTrvc8RgvFn4B+u2OAg=
Subject key identifier:   53:C4:7B:73:43:8D:43:54:D1:69:70:E8:83:FA:E1:FD:E1:DF:A6:C7
Certificate issuer:       /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial:       6B37D9D3B639A4B4BB23B5B61B5115CF9BA7164D
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132352e302f32342d3234203d3e2034383132.roa
Signing time:             Wed 22 Apr 2026 13:42:25 +0000
ROA not before:           Wed 22 Apr 2026 13:37:25 +0000
ROA not after:            Wed 21 Apr 2027 13:42:25 +0000
asID:                     4812
IP address blocks:        103.74.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 07:23:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:37:d9:d3:b6:39:a4:b4:bb:23:b5:b6:1b:51:15:cf:9b:a7:16:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
        Validity
            Not Before: Apr 22 13:37:25 2026 GMT
            Not After : Apr 21 13:42:25 2027 GMT
        Subject: CN=53C47B73438D4354D16970E883FAE1FDE1DFA6C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4c:4b:f8:44:93:96:c4:b9:47:f2:c5:92:5c:
                    68:2f:ae:b9:58:42:ed:b9:47:25:0f:9b:46:d9:29:
                    f3:24:0f:03:c0:55:b6:62:0c:ee:a4:71:73:08:22:
                    00:b4:13:9e:f2:db:40:fa:88:7d:d2:ab:7b:04:19:
                    71:c9:37:90:06:6f:c5:19:6a:af:e1:12:b7:ed:01:
                    5b:e4:1e:92:09:f0:6d:0c:63:5f:4e:5b:28:bc:b0:
                    05:8a:43:10:c9:32:70:e9:c6:90:4e:ca:06:c8:61:
                    d4:6d:ee:5e:fb:69:47:a0:87:55:b3:9d:85:54:d5:
                    12:03:a2:d8:54:4c:4b:29:18:78:17:cd:98:67:4c:
                    9c:26:42:9d:c7:da:7b:2f:69:62:5c:0f:80:55:6c:
                    a2:cf:32:d1:e5:0e:43:88:53:bd:ac:2e:f7:cd:09:
                    40:b1:9f:31:b7:45:5f:77:8a:1f:64:dc:20:b2:cc:
                    7f:dc:72:f5:5e:a1:05:07:04:b8:b7:58:0b:44:6e:
                    64:cc:8d:0e:b5:75:1f:be:eb:44:63:6a:85:d9:2f:
                    e9:93:c9:46:7e:06:5d:d1:20:4c:0f:98:48:9d:e8:
                    d3:4b:ca:74:e2:9d:f4:d4:2c:0d:aa:52:1b:ca:a6:
                    62:15:d4:7d:85:c3:cd:8e:4a:ae:2f:21:8d:2b:35:
                    90:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C4:7B:73:43:8D:43:54:D1:69:70:E8:83:FA:E1:FD:E1:DF:A6:C7
            X509v3 Authority Key Identifier:
                keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132352e302f32342d3234203d3e2034383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:c4:50:aa:ab:f0:2f:4d:bf:72:cd:54:b4:35:d7:ae:31:73:
         45:87:10:25:5f:e6:72:07:09:80:c5:5f:aa:a5:0c:24:09:62:
         ec:03:4b:47:22:52:10:5f:2a:08:f7:10:f5:4d:9a:35:6f:8b:
         67:f8:0a:02:5a:c7:e7:eb:f2:5c:c3:42:fd:82:f9:3c:ab:6b:
         5f:5c:2a:72:54:ed:78:a0:dd:b6:58:92:78:05:19:a7:bb:fb:
         84:26:fe:be:ab:4a:01:a4:6b:bf:24:42:6f:69:fb:d9:df:94:
         98:73:3b:01:19:15:26:89:3a:7c:a9:f4:b0:94:1c:15:f5:b1:
         80:f9:cf:1e:63:38:80:bd:a0:0b:46:8e:32:7a:11:68:71:f4:
         57:bd:ba:5e:73:61:cd:41:e3:5d:15:a8:60:c8:dd:e8:14:83:
         34:39:91:98:ac:54:cb:ec:30:fd:ce:f3:91:cb:91:12:45:e1:
         64:76:4c:63:0c:14:5f:ab:0f:51:05:73:16:89:a4:e2:d5:fb:
         27:f6:99:2e:f5:67:30:d1:e4:88:0b:24:9c:e5:c5:49:8d:8c:
         29:ee:bc:d9:c7:54:cd:92:0e:e8:dc:fa:3b:2e:f0:6c:ac:ce:
         e9:d4:ea:39:a6:8d:e5:49:5d:c0:78:89:a9:c8:01:bb:7d:32:
         4c:31:0d:dd
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUazfZ07Y5pLS7I7W2G1EVz5unFk0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF
OEUxMjgwQTAeFw0yNjA0MjIxMzM3MjVaFw0yNzA0MjExMzQyMjVaMDMxMTAvBgNV
BAMTKDUzQzQ3QjczNDM4RDQzNTREMTY5NzBFODgzRkFFMUZERTFERkE2QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjTEv4RJOWxLlH8sWSXGgvrrlY
Qu25RyUPm0bZKfMkDwPAVbZiDO6kcXMIIgC0E57y20D6iH3Sq3sEGXHJN5AGb8UZ
aq/hErftAVvkHpIJ8G0MY19OWyi8sAWKQxDJMnDpxpBOygbIYdRt7l77aUegh1Wz
nYVU1RIDothUTEspGHgXzZhnTJwmQp3H2nsvaWJcD4BVbKLPMtHlDkOIU72sLvfN
CUCxnzG3RV93ih9k3CCyzH/ccvVeoQUHBLi3WAtEbmTMjQ61dR++60RjaoXZL+mT
yUZ+Bl3RIEwPmEid6NNLynTinfTULA2qUhvKpmIV1H2Fw82OSq4vIY0rNZCHAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUU8R7c0ONQ1TRaXDog/rh/eHfpscwHwYDVR0j
BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE
MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ2Nzk5MTA1LzAvMzEzMDMzMmUzNzM0
MmUzMTMyMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzEzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGdKfTANBgkqhkiG9w0BAQsFAAOCAQEAN8RQqqvwL02/cs1UtDXXrjFzRYcQ
JV/mcgcJgMVfqqUMJAli7ANLRyJSEF8qCPcQ9U2aNW+LZ/gKAlrH5+vyXMNC/YL5
PKtrX1wqclTteKDdtliSeAUZp7v7hCb+vqtKAaRrvyRCb2n72d+UmHM7ARkVJok6
fKn0sJQcFfWxgPnPHmM4gL2gC0aOMnoRaHH0V726XnNhzUHjXRWoYMjd6BSDNDmR
mKxUy+ww/c7zkcuREkXhZHZMYwwUX6sPUQVzFomk4tX7J/aZLvVnMNHkiAsknOXF
SY2MKe682cdUzZIO6Nz6Oy7wbKzO6dTqOaaN5UldwHiJqcgBu30yTDEN3Q==
-----END CERTIFICATE-----
Generated at Mon Apr 27 08:24:35 2026 by rpki-client