Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132362e302f32342d3234203d3e203633363431.roa
File:                     3130332e37342e3132362e302f32342d3234203d3e203633363431.roa (raw, json)
Hash identifier:          KL7bRmG8O/icy7cgHjYLW4wImUvq9kc+mgA/2lQll2M=
Subject key identifier:   3F:E6:10:87:5D:FB:09:43:02:9D:08:70:C6:BA:82:CF:2D:D2:A3:90
Certificate issuer:       /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial:       6447C59004BC898FC7680417A80FD2360635AA9D
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132362e302f32342d3234203d3e203633363431.roa
Signing time:             Wed 22 Apr 2026 13:45:09 +0000
ROA not before:           Wed 22 Apr 2026 13:40:09 +0000
ROA not after:            Wed 21 Apr 2027 13:45:09 +0000
asID:                     63641
IP address blocks:        103.74.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 10:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:47:c5:90:04:bc:89:8f:c7:68:04:17:a8:0f:d2:36:06:35:aa:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
        Validity
            Not Before: Apr 22 13:40:09 2026 GMT
            Not After : Apr 21 13:45:09 2027 GMT
        Subject: CN=3FE610875DFB0943029D0870C6BA82CF2DD2A390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:10:08:ad:24:93:29:bc:20:15:1d:6f:18:5b:
                    84:53:4e:31:43:cb:b4:bd:ce:a7:1d:2f:62:83:1e:
                    aa:a0:2a:0a:05:9d:2b:ba:45:ab:7a:cb:db:fc:62:
                    4f:61:d0:33:a7:ab:69:66:5c:08:44:3c:6a:3b:bd:
                    97:e6:89:44:cc:44:5c:7e:7f:5a:88:9b:45:77:4a:
                    0d:03:a9:86:b8:d9:d3:11:b2:27:89:24:92:9e:f7:
                    59:9c:89:f7:30:54:ad:96:35:4e:dd:34:8c:25:aa:
                    a0:a3:a2:2f:ce:af:33:0b:57:cf:5c:84:3b:b2:e5:
                    51:c6:1e:dd:1c:5d:d2:f7:4b:55:ce:fb:2a:e7:26:
                    59:f2:b0:bf:a4:5a:89:4e:e0:71:4a:45:30:1b:1a:
                    d4:a1:aa:e2:df:d8:4e:3f:1e:2f:ea:94:6f:76:08:
                    d1:7b:ff:95:42:e1:6b:e1:0c:24:e1:00:d1:bf:c5:
                    7f:c3:c0:c9:0c:07:b4:c4:91:a2:1e:14:5e:60:f3:
                    41:9c:bb:91:65:dc:1c:38:b7:6e:35:80:7c:de:b8:
                    ee:5f:51:b4:ae:2b:b3:16:25:c6:db:8a:df:ac:d5:
                    3f:6a:29:d0:13:02:47:16:e6:49:ed:e5:dc:54:74:
                    ce:b4:f0:32:64:ed:6c:fc:fa:e4:5c:36:c9:05:0c:
                    b4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E6:10:87:5D:FB:09:43:02:9D:08:70:C6:BA:82:CF:2D:D2:A3:90
            X509v3 Authority Key Identifier:
                keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132362e302f32342d3234203d3e203633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:85:bb:77:91:9f:9f:af:96:04:9c:78:57:78:d1:9c:06:e1:
         53:e3:1a:68:ce:c0:0b:a1:0e:56:f3:1b:27:ed:75:1b:9c:15:
         02:1c:58:84:98:26:74:dc:81:1a:4b:13:ad:bb:1e:22:21:28:
         7a:43:0a:fb:9c:77:ee:4d:93:4b:87:c9:83:51:af:eb:c0:32:
         ea:f9:9c:10:52:30:0c:0b:07:fd:85:88:72:ad:94:23:cd:a8:
         12:a9:02:56:b2:1a:9f:8c:2c:0d:a8:48:96:96:7b:be:b6:d6:
         83:bf:8a:f2:3b:aa:a6:bb:29:08:8b:76:0e:25:08:28:0e:39:
         f2:77:56:90:01:a7:37:99:76:6e:97:6d:2b:79:14:a3:32:2f:
         9d:0b:d3:90:b0:49:3b:b8:d2:f5:0a:0e:5a:3c:ae:55:fa:a1:
         51:c6:dc:aa:7d:56:f1:a5:53:d6:a9:ab:c4:18:67:85:c1:41:
         bc:48:30:73:23:cf:b2:be:87:a8:9d:d1:6b:b9:c5:0c:31:46:
         d1:26:92:c1:7f:34:26:d4:f9:58:9a:ed:53:93:8d:a1:2b:eb:
         9f:d1:70:cb:6c:a2:5c:30:94:b7:02:a5:0a:91:4a:72:f5:82:
         14:77:e6:d6:9e:9d:43:d7:35:8b:cc:c6:26:17:7b:45:0d:07:
         bd:09:9b:db
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:06:07 2026 by rpki-client