Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132362e302f32342d3234203d3e2034353135.roa
File:                     3130332e37342e3132362e302f32342d3234203d3e2034353135.roa (raw, json)
Hash identifier:          apqvAyReCIo3rJKCN23EOh+aJ+PtN966DwXNcpjemDM=
Subject key identifier:   9C:AC:52:D2:FF:F5:81:B8:40:D9:CD:5E:5A:89:54:8B:19:DF:E6:D5
Certificate issuer:       /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial:       4B47064A3103944F494B5922100112366ED5A16F
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132362e302f32342d3234203d3e2034353135.roa
Signing time:             Wed 22 Apr 2026 13:45:09 +0000
ROA not before:           Wed 22 Apr 2026 13:40:09 +0000
ROA not after:            Wed 21 Apr 2027 13:45:09 +0000
asID:                     4515
IP address blocks:        103.74.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 10:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:47:06:4a:31:03:94:4f:49:4b:59:22:10:01:12:36:6e:d5:a1:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
        Validity
            Not Before: Apr 22 13:40:09 2026 GMT
            Not After : Apr 21 13:45:09 2027 GMT
        Subject: CN=9CAC52D2FFF581B840D9CD5E5A89548B19DFE6D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:03:81:f5:e4:89:92:e4:b9:91:84:35:b2:2e:
                    13:09:a9:c2:ff:3a:39:6a:21:09:72:ed:d2:d9:b8:
                    16:25:3d:cb:e3:bb:2d:70:74:38:5d:81:4f:d8:56:
                    b0:ed:9b:93:3a:a7:13:31:85:60:7b:20:c1:17:da:
                    2c:27:9f:dc:2c:98:f9:7f:51:58:fa:d3:ba:0b:73:
                    1e:89:95:2c:4d:9a:d9:ae:e3:d1:f6:6c:c4:d7:b4:
                    fd:76:71:cc:08:83:93:37:68:f1:b0:86:a1:e5:af:
                    2e:f7:92:b3:8f:50:a7:cd:49:87:20:00:a9:41:7c:
                    41:eb:b2:77:cd:7b:73:d1:1a:a9:fb:20:d7:3e:a1:
                    bf:ae:50:f3:81:a1:77:37:97:4a:58:a8:9f:49:81:
                    0a:37:16:df:e2:cd:ce:75:da:23:83:79:8f:4a:d2:
                    c6:4e:5b:0a:db:0a:70:1a:6d:e7:7a:a5:5c:37:47:
                    ce:98:e1:3e:76:1c:e6:2f:55:28:a2:75:b4:51:46:
                    e7:f8:85:c3:a5:d9:ef:25:43:a9:64:49:91:95:06:
                    39:ba:65:6b:dc:58:d6:7b:8c:30:08:9f:b1:6a:5a:
                    06:4c:6e:8a:ef:ae:8e:01:8a:a3:8f:5d:c7:83:4b:
                    cf:a5:e1:5c:06:33:73:97:0b:96:fe:0f:7e:a2:86:
                    cc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AC:52:D2:FF:F5:81:B8:40:D9:CD:5E:5A:89:54:8B:19:DF:E6:D5
            X509v3 Authority Key Identifier:
                keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132362e302f32342d3234203d3e2034353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:9c:6f:59:02:75:94:75:5f:b2:a0:db:c1:86:7a:03:04:b8:
         da:f2:c8:8c:07:3b:1f:83:7a:7c:61:0b:91:7b:2a:71:ea:51:
         55:85:d5:52:78:94:e5:50:e2:39:ad:97:ca:6a:63:fc:6a:52:
         59:f4:84:0f:c1:c9:d0:91:18:52:38:e8:0c:c0:d5:ca:66:da:
         6b:3c:f6:d5:d1:27:d0:ca:0c:93:d3:39:12:0f:21:33:36:bc:
         ee:d3:cd:21:3b:0f:5f:35:22:ef:e7:d7:60:a0:51:b9:d1:44:
         05:5d:87:92:87:5f:21:14:d8:d4:ed:4c:3e:9a:b4:a0:74:af:
         51:54:93:05:5b:94:a8:4d:72:14:f3:7e:97:47:9f:b8:f1:98:
         65:fb:f4:1c:13:47:28:d4:f5:a7:7b:17:7c:6b:9a:0b:15:ad:
         e3:48:33:1a:07:f4:52:c7:db:03:79:49:33:9b:9d:f8:f7:2e:
         e2:45:7e:8f:59:13:50:83:e7:c7:5f:d6:af:b3:1a:77:5a:c3:
         07:2a:2a:9b:8b:2b:a5:83:01:0b:83:e8:7a:49:3f:76:5a:ff:
         25:d2:be:a4:ed:65:15:97:44:a7:61:fc:6d:79:10:1a:3a:d3:
         3a:99:01:17:8f:a3:80:bb:fe:75:e7:cf:b7:3c:0a:00:80:68:
         7e:55:22:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:06:07 2026 by rpki-client