Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132352e302f32342d3234203d3e203633363431.roa
File:                     3130332e37342e3132352e302f32342d3234203d3e203633363431.roa (raw, json)
Hash identifier:          nxOQzRYwXMmquS1rIej99tzxTkizSPYgZdRZHVl5wZA=
Subject key identifier:   58:F3:30:85:EA:38:A9:35:7A:1A:81:8A:2E:FC:D6:6B:D6:CA:CD:93
Certificate issuer:       /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial:       3B6A7D9D749E0AAADF0AC53DC1C365930A657944
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132352e302f32342d3234203d3e203633363431.roa
Signing time:             Wed 22 Apr 2026 13:42:25 +0000
ROA not before:           Wed 22 Apr 2026 13:37:25 +0000
ROA not after:            Wed 21 Apr 2027 13:42:25 +0000
asID:                     63641
IP address blocks:        103.74.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 10:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:6a:7d:9d:74:9e:0a:aa:df:0a:c5:3d:c1:c3:65:93:0a:65:79:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
        Validity
            Not Before: Apr 22 13:37:25 2026 GMT
            Not After : Apr 21 13:42:25 2027 GMT
        Subject: CN=58F33085EA38A9357A1A818A2EFCD66BD6CACD93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:12:3d:ba:9f:c2:fc:27:21:f4:ab:37:cc:11:
                    f6:c0:9e:7c:71:fd:c0:ff:4e:b8:f0:ba:36:07:0b:
                    b8:cf:b5:cf:ec:96:97:8f:64:c4:de:1f:9f:97:c0:
                    1b:ed:81:1d:5a:4d:58:c0:32:f2:2f:49:04:a2:8b:
                    d9:c0:35:c1:a8:a8:7f:87:78:9d:44:df:6e:18:c5:
                    2f:15:07:bd:6f:08:dc:14:c1:af:26:aa:58:73:4d:
                    d1:9b:4e:ca:cb:59:81:f8:3f:db:f3:ca:16:bf:b3:
                    4d:61:2c:60:32:ed:e2:48:f7:aa:7b:c1:0c:fb:4d:
                    73:f6:89:f9:40:a5:b4:f0:c8:d1:db:71:9b:00:f9:
                    12:06:f5:94:6f:ad:3d:f1:7d:9f:50:bc:01:2c:d9:
                    fc:be:7b:8b:c2:b5:cf:cf:01:b5:f1:52:79:02:7c:
                    6d:3e:76:12:25:a4:ad:c9:1a:f2:a2:85:32:87:ce:
                    ea:8a:43:3a:ba:d9:f6:c7:a4:2f:82:fe:9d:82:14:
                    c9:fb:84:91:79:97:22:35:01:57:1f:e2:d0:7b:d2:
                    9d:19:ac:af:4c:6b:c5:1e:05:1b:a3:30:04:d4:88:
                    a4:30:08:01:1d:7e:a6:29:af:26:ff:16:f8:3f:a4:
                    fc:45:d6:12:24:81:88:9a:9b:2a:e5:fd:95:a8:12:
                    ba:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F3:30:85:EA:38:A9:35:7A:1A:81:8A:2E:FC:D6:6B:D6:CA:CD:93
            X509v3 Authority Key Identifier:
                keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132352e302f32342d3234203d3e203633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:07:4d:b1:6e:9e:fc:ae:2b:1f:f9:76:5e:90:82:4c:09:3e:
         d5:16:9f:71:23:79:4e:32:fe:df:be:b8:49:3b:07:60:d1:1d:
         30:1e:3d:ce:e4:78:ba:85:2d:e4:be:c4:95:ec:21:37:0b:d2:
         81:19:21:31:7b:96:bd:a8:36:69:26:18:bb:dd:f7:20:d1:e9:
         84:20:96:6d:d6:27:0b:f2:5f:ca:6e:da:c4:4b:b0:4c:ba:10:
         3d:18:1a:12:d2:85:1a:79:ce:77:a5:45:a9:2c:e3:68:af:b9:
         77:63:6a:52:7b:05:e0:a0:3a:c2:6a:e2:0d:e8:2d:38:d8:0f:
         9b:87:a6:b7:7e:62:d1:75:1c:e2:6c:a5:a5:8e:fe:59:a8:c0:
         d4:7f:f3:0b:e0:2a:76:95:ed:86:47:21:eb:5c:74:e7:ac:cf:
         1c:23:5d:fa:80:5b:4b:fe:31:c4:46:06:22:4b:3b:be:02:15:
         28:e6:54:0e:77:d5:a2:09:0e:a0:b5:85:22:54:d2:67:63:70:
         00:36:b8:6e:e3:cf:55:12:36:cb:43:47:f1:01:f3:41:1d:b3:
         37:cd:68:bc:a0:86:7a:c4:20:04:ef:e8:54:81:5c:83:ef:81:
         70:5d:04:5e:5e:e2:ee:3b:2b:23:63:89:7e:cf:88:c9:f1:2a:
         ae:5b:87:d9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:06:07 2026 by rpki-client