Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e382e302f32322d3332203d3e203536303431.roa
File:                     3131302e34322e382e302f32322d3332203d3e203536303431.roa (raw, json)
Hash identifier:          UGXx89SmZoXp3Ldzk4RRnnn48j51DJudYev450Vhx68=
Subject key identifier:   9E:FB:90:8F:BE:79:8A:2E:AB:72:4F:07:A3:55:DB:9E:6F:5E:D5:D5
Certificate issuer:       /CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
Certificate serial:       61ABA67331AB635DF3D49300C44185618D009CEC
Authority key identifier: 0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e382e302f32322d3332203d3e203536303431.roa
Signing time:             Tue 18 Aug 2026 01:39:34 +0000
ROA not before:           Tue 18 Aug 2026 01:34:34 +0000
ROA not after:            Tue 17 Aug 2027 01:39:34 +0000
asID:                     56041
IP address blocks:        110.42.8.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 13 Sep 2026 00:32:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ab:a6:73:31:ab:63:5d:f3:d4:93:00:c4:41:85:61:8d:00:9c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
        Validity
            Not Before: Aug 18 01:34:34 2026 GMT
            Not After : Aug 17 01:39:34 2027 GMT
        Subject: CN=9EFB908FBE798A2EAB724F07A355DB9E6F5ED5D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9f:2d:52:40:a0:df:3b:e2:ae:cc:27:ee:7b:
                    43:dd:64:bc:cd:00:6b:37:de:95:03:3a:9d:4a:2c:
                    96:d4:8b:38:0e:93:7a:bd:a0:eb:2e:cf:e8:33:43:
                    f4:f7:6d:e5:ee:9c:ce:da:51:a0:d1:f1:22:a4:b5:
                    18:78:cc:c2:27:97:bb:d9:1e:96:95:f2:4e:ea:aa:
                    7c:84:6b:9d:77:78:7f:8f:f3:ad:0c:e5:b5:a1:18:
                    6b:dd:b8:9e:76:d0:f5:9e:99:51:65:90:b3:a7:8d:
                    2d:56:49:31:11:90:37:eb:de:fd:26:9a:2e:d4:a8:
                    f1:9f:f7:e1:18:4d:be:fe:93:b2:c6:7a:37:10:8d:
                    cd:a7:57:15:14:f1:64:30:82:82:43:31:80:76:b8:
                    4c:45:de:85:11:80:a6:81:61:d0:dd:44:ce:38:9f:
                    df:74:8d:cf:9c:b2:56:b5:fe:1e:c0:bc:54:ce:7c:
                    d7:64:96:8e:92:50:b6:ff:4e:02:cb:67:ce:ce:d4:
                    a5:41:3a:fa:2c:67:08:7b:2f:eb:1f:50:c9:d1:61:
                    84:08:a9:18:2b:c2:c0:fa:a8:18:8d:f7:a0:88:0e:
                    af:f8:74:05:1f:f9:67:2f:06:90:0a:e2:b7:86:28:
                    a6:49:e7:4e:e0:b4:5e:3a:dc:9c:8a:b2:78:fe:05:
                    0a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:FB:90:8F:BE:79:8A:2E:AB:72:4F:07:A3:55:DB:9E:6F:5E:D5:D5
            X509v3 Authority Key Identifier:
                keyid:0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e382e302f32322d3332203d3e203536303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.42.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:98:de:95:92:71:3c:49:0b:22:7a:24:1e:e0:77:71:7e:75:
         08:c4:52:8e:26:3e:7c:13:12:2f:0c:3e:46:df:4d:31:44:18:
         15:e8:38:36:1c:47:00:b6:9f:8a:e3:39:a3:78:38:fd:05:8b:
         7f:7b:71:83:1a:39:67:17:38:4c:36:1c:f3:10:7d:fd:0c:87:
         5b:95:7f:f9:9e:cd:83:ca:01:43:8e:62:31:34:20:31:4e:2f:
         34:65:27:53:32:77:ee:c6:8e:c6:52:20:9f:53:04:3a:ca:10:
         8b:8a:82:bb:f0:a5:55:0f:ad:a8:f4:92:9c:dd:ad:09:01:25:
         11:8e:7b:1d:19:02:31:ac:af:c0:97:ea:65:38:1d:c2:d4:37:
         ce:eb:d0:b5:45:16:e5:c3:df:2e:b4:40:90:06:5c:a5:81:64:
         85:f3:49:0a:43:f2:37:2d:1d:b8:e0:d9:af:a2:2c:93:9d:c8:
         4c:32:3a:02:9d:7e:31:5d:1a:c0:6f:de:ae:d4:71:f2:15:27:
         c3:a9:f4:58:60:c1:53:74:88:4f:3f:d0:b9:06:dc:e4:23:62:
         3c:58:93:4d:44:b3:56:e7:b0:53:e3:b4:dd:26:3b:1c:9a:f5:
         b8:35:c1:d2:f7:27:9e:73:65:f4:09:a6:1c:9c:b8:7d:1a:40:
         9b:81:dc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:09:00 2026 by rpki-client