Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132372e302f32342d3234203d3e2034353135.roa
File:                     3130332e37342e3132372e302f32342d3234203d3e2034353135.roa (raw, json)
Hash identifier:          RrIzhxg7jmHyE+la/O0JCm7rROlyHRtouMH9Z8mPlIY=
Subject key identifier:   E8:72:0C:FC:74:FB:50:5D:31:96:42:6D:14:C6:17:57:7C:07:D7:E9
Certificate issuer:       /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial:       4755C867DBF1D53E65E6CD3C05D9E77A3076FB5E
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132372e302f32342d3234203d3e2034353135.roa
Signing time:             Wed 22 Apr 2026 13:45:39 +0000
ROA not before:           Wed 22 Apr 2026 13:40:39 +0000
ROA not after:            Wed 21 Apr 2027 13:45:39 +0000
asID:                     4515
IP address blocks:        103.74.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 10:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:55:c8:67:db:f1:d5:3e:65:e6:cd:3c:05:d9:e7:7a:30:76:fb:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
        Validity
            Not Before: Apr 22 13:40:39 2026 GMT
            Not After : Apr 21 13:45:39 2027 GMT
        Subject: CN=E8720CFC74FB505D3196426D14C617577C07D7E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a5:b5:87:d8:2f:70:04:7b:a3:27:5d:25:22:
                    a5:17:39:ad:a1:a3:9b:0c:63:b0:a7:20:dd:f6:b7:
                    01:97:4f:dd:d4:e1:fd:95:c5:0b:ab:c1:9b:fb:16:
                    18:74:6e:94:2b:60:fe:e4:9c:e5:31:66:28:ee:20:
                    2a:32:3d:4e:21:ce:99:bf:6b:0b:3e:ee:0a:86:c8:
                    ff:94:af:6a:4c:b2:e4:f9:be:4f:a0:92:6f:b0:cb:
                    74:1c:81:00:70:76:74:b2:ca:25:73:d2:88:90:48:
                    b5:71:8a:61:5a:26:b1:05:cc:f9:aa:43:23:4c:1b:
                    9c:fe:3b:20:6e:b4:28:0d:78:03:ea:1c:08:b2:47:
                    6a:48:3e:05:71:b3:fb:cb:22:19:7c:7c:ed:54:7d:
                    f5:02:41:23:bd:06:63:26:df:8b:39:ab:20:6d:63:
                    52:6a:ca:7c:ae:3c:cc:1e:55:f9:32:0f:1f:0e:ee:
                    1e:5e:1f:7e:a4:10:b0:32:f9:ad:1b:0a:4a:8c:fc:
                    83:84:11:0a:78:c1:30:bb:b6:06:5d:af:8c:c1:f2:
                    5f:34:e8:23:6f:29:f0:ca:3b:a2:17:f7:7a:c8:8e:
                    ea:ff:39:eb:1a:7f:f5:32:2a:38:0c:f4:0f:31:84:
                    b3:fc:3e:08:4b:35:41:cd:f6:4e:3e:c9:20:7c:82:
                    c9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:72:0C:FC:74:FB:50:5D:31:96:42:6D:14:C6:17:57:7C:07:D7:E9
            X509v3 Authority Key Identifier:
                keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132372e302f32342d3234203d3e2034353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:e9:ae:6c:0a:ab:8e:73:9f:5e:0a:06:a1:2d:f4:af:b1:75:
         0e:58:97:36:1f:2f:ea:c4:23:56:0e:97:95:61:6e:44:44:a8:
         5f:24:18:cb:9a:80:89:af:db:63:da:79:17:86:c7:f4:4c:90:
         b6:4e:54:ae:ad:4a:b1:74:56:a6:ad:d9:f3:2e:86:eb:46:58:
         29:d6:60:fc:9b:4e:7b:46:5a:9c:76:60:63:77:76:4f:8c:00:
         e4:e0:ce:43:6d:ce:be:ba:6a:9f:45:75:8e:91:93:d7:ea:66:
         af:88:4c:d9:8d:f9:91:ab:8a:06:db:1f:d8:b4:7d:8a:5a:70:
         4b:0e:2e:57:c4:58:c6:11:2e:27:05:3e:75:ae:52:fe:67:cf:
         35:4e:b4:ad:bf:1b:34:d5:08:d0:39:f8:d1:db:25:93:fa:fb:
         37:86:6e:e1:16:1a:0b:1c:d7:fa:0c:fd:dc:f3:38:b3:ea:39:
         76:d6:f8:4f:41:2d:5f:00:c2:31:c7:e4:b9:d9:a9:62:1f:23:
         f0:a2:29:bc:37:01:42:4e:d1:f7:0c:9f:64:ab:dc:ff:0d:0c:
         31:11:cc:29:65:83:09:fd:b1:38:c9:d8:ec:f7:ee:74:47:5a:
         d9:b0:7c:02:52:22:e5:8d:0a:0c:b7:28:26:6a:0f:ff:5f:b8:
         eb:06:b0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:06:07 2026 by rpki-client