Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e302e302f32312d3332203d3e203536303431.roa
File:                     3131302e34322e302e302f32312d3332203d3e203536303431.roa (raw, json)
Hash identifier:          ucI0IpK7B4HmAFtIUsC0OJSWHwVBlJyCTJoRaFByZ9M=
Subject key identifier:   08:AA:DB:FE:73:02:C9:7C:F7:AB:AC:98:F1:37:87:AB:6A:17:DE:FC
Certificate issuer:       /CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
Certificate serial:       64C19AC4D876A20632E2739B5062008FA8D1CB38
Authority key identifier: 0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e302e302f32312d3332203d3e203536303431.roa
Signing time:             Tue 21 Apr 2026 16:54:06 +0000
ROA not before:           Tue 21 Apr 2026 16:49:06 +0000
ROA not after:            Tue 20 Apr 2027 16:54:06 +0000
asID:                     56041
IP address blocks:        110.42.0.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 03:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c1:9a:c4:d8:76:a2:06:32:e2:73:9b:50:62:00:8f:a8:d1:cb:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
        Validity
            Not Before: Apr 21 16:49:06 2026 GMT
            Not After : Apr 20 16:54:06 2027 GMT
        Subject: CN=08AADBFE7302C97CF7ABAC98F13787AB6A17DEFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4c:8f:cc:d1:9e:83:de:bc:8c:bd:3f:c7:cf:
                    af:7c:97:54:e7:dc:ee:fc:d2:2c:7b:6e:76:4e:11:
                    e7:ae:79:39:a6:c6:94:5a:6e:b3:9d:18:5d:cf:36:
                    a0:1c:b5:5b:c8:69:f8:4b:a3:1b:65:2b:eb:8a:3d:
                    70:94:22:4a:ae:c5:d4:5f:4e:61:eb:75:48:16:26:
                    54:d1:8b:c8:2b:54:a0:4b:8e:c5:be:58:2c:5b:3e:
                    f6:70:09:1a:25:30:69:7d:64:61:21:b6:af:5a:be:
                    4e:31:23:1e:7e:26:b8:fb:77:35:06:32:70:a4:73:
                    26:ac:08:25:be:2f:c9:c7:b5:cd:dd:8a:f3:d1:5e:
                    cb:7e:72:75:5b:47:dd:92:4b:72:e5:1e:70:77:af:
                    22:e6:27:f2:36:41:0d:76:7d:14:e4:df:35:76:7c:
                    cd:19:51:44:62:9a:b5:2f:8d:28:fd:c3:f5:c6:9c:
                    18:a1:5d:0f:fd:81:a3:41:0c:54:8b:4a:81:83:a9:
                    02:6a:d7:83:a2:18:46:b6:19:6b:e8:ad:cd:46:d1:
                    c1:35:89:b9:06:59:36:f2:1e:1e:90:ad:36:b0:2e:
                    d8:ee:3c:38:23:31:2c:da:2d:f6:bc:e6:de:92:97:
                    2a:ba:b7:a0:86:30:27:17:58:6d:d7:b1:6e:28:e2:
                    9d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AA:DB:FE:73:02:C9:7C:F7:AB:AC:98:F1:37:87:AB:6A:17:DE:FC
            X509v3 Authority Key Identifier:
                keyid:0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e302e302f32312d3332203d3e203536303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.42.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         86:ad:a2:24:90:15:fe:ef:81:cc:bc:80:00:70:d7:d4:e0:ab:
         eb:1f:e4:8e:d5:1b:a4:6a:31:1d:2e:f7:83:99:a9:83:d4:3b:
         36:fa:e1:25:9f:ad:8a:06:43:9b:5f:a4:7f:62:e8:95:bf:01:
         1b:2b:48:47:cb:ff:13:82:57:60:e3:01:65:0d:ff:90:dd:ad:
         c6:31:e4:fd:9d:f8:88:8a:c4:72:0b:fa:75:e2:56:97:29:2b:
         ae:38:2b:b5:a1:c3:f2:45:c7:c9:c6:b5:00:1f:55:2f:d6:49:
         0c:f4:f8:cd:37:1c:83:6d:cc:a5:49:28:79:b6:c3:df:19:00:
         5a:61:24:7e:38:25:34:16:ff:e6:c2:2c:e7:71:0a:36:c7:d8:
         7b:c5:24:e5:ab:7f:b2:fd:6b:87:78:f9:8b:af:45:f0:b7:d8:
         f0:de:5b:8d:18:04:94:40:17:c8:d8:79:82:83:25:b7:f2:0e:
         b4:00:73:91:89:95:51:1c:9e:9e:3d:fa:66:ad:12:84:77:90:
         98:cc:28:30:29:be:e1:dc:65:e7:7a:d7:e3:0c:87:bd:9c:ff:
         20:ee:b7:64:e4:f4:6f:49:c4:51:18:6f:1e:83:fe:9c:86:6b:
         a5:3e:83:a1:ba:2e:1b:64:77:b1:35:cf:28:01:b9:c8:43:e1:
         4a:f1:dd:fc
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUZMGaxNh2ogYy4nObUGIAj6jRyzgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEzN0FDODhFMzAzRjRCQjgzNEMxODBCMDZGMjUwQURF
Njk3MDBCRjAeFw0yNjA0MjExNjQ5MDZaFw0yNzA0MjAxNjU0MDZaMDMxMTAvBgNV
BAMTKDA4QUFEQkZFNzMwMkM5N0NGN0FCQUM5OEYxMzc4N0FCNkExN0RFRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbTI/M0Z6D3ryMvT/Hz698l1Tn
3O780ix7bnZOEeeueTmmxpRabrOdGF3PNqActVvIafhLoxtlK+uKPXCUIkquxdRf
TmHrdUgWJlTRi8grVKBLjsW+WCxbPvZwCRolMGl9ZGEhtq9avk4xIx5+Jrj7dzUG
MnCkcyasCCW+L8nHtc3divPRXst+cnVbR92SS3LlHnB3ryLmJ/I2QQ12fRTk3zV2
fM0ZUURimrUvjSj9w/XGnBihXQ/9gaNBDFSLSoGDqQJq14OiGEa2GWvorc1G0cE1
ibkGWTbyHh6QrTawLtjuPDgjMSzaLfa85t6Slyq6t6CGMCcXWG3XsW4o4p33AgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUCKrb/nMCyXz3q6yY8TeHq2oX3vwwHwYDVR0j
BBgwFoAUCjesiOMD9LuDTBgLBvJQreaXAL8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4Mjc0MTU3NzI2OTI1MC8wLzBBMzdBQzg4RTMwM0Y0QkI4MzRDMTgwQjA2RjI1
MEFERTY5NzAwQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMEEzN0FDODhFMzAzRjRCQjgzNEMxODBCMDZGMjUwQURFNjk3MDBCRi5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3MjY5MjUwLzAvMzEzMTMwMmUzNDMy
MmUzMDJlMzAyZjMyMzEyZDMzMzIyMDNkM2UyMDM1MzYzMDM0MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BANuKgAwDQYJKoZIhvcNAQELBQADggEBAIatoiSQFf7vgcy8gABw19Tgq+sf5I7V
G6RqMR0u94OZqYPUOzb64SWfrYoGQ5tfpH9i6JW/ARsrSEfL/xOCV2DjAWUN/5Dd
rcYx5P2d+IiKxHIL+nXiVpcpK644K7Whw/JFx8nGtQAfVS/WSQz0+M03HINtzKVJ
KHm2w98ZAFphJH44JTQW/+bCLOdxCjbH2HvFJOWrf7L9a4d4+YuvRfC32PDeW40Y
BJRAF8jYeYKDJbfyDrQAc5GJlVEcnp49+matEoR3kJjMKDApvuHcZed61+MMh72c
/yDut2Tk9G9JxFEYbx6D/pyGa6U+g6G6Lhtkd7E1zygBuchD4Urx3fw=
-----END CERTIFICATE-----
Generated at Mon Apr 27 20:38:20 2026 by rpki-client