Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094559728064790531/0/3130332e3138362e3130382e302f32332d3234203d3e203538353433.roa
File:                     3130332e3138362e3130382e302f32332d3234203d3e203538353433.roa (raw, json)
Hash identifier:          OcoevkYBZMWLQg+hvAPBGYan1zQFD9QLG6yATABRCBQ=
Subject key identifier:   05:69:74:A9:38:6E:3A:B2:1F:AD:69:58:08:45:57:9F:41:B2:0A:33
Certificate issuer:       /CN=74280C847DD28C691A500655BD81B3F019C5FCF7
Certificate serial:       5256DD833ABF47CDA67CE1C8C7CB3E24611C7690
Authority key identifier: 74:28:0C:84:7D:D2:8C:69:1A:50:06:55:BD:81:B3:F0:19:C5:FC:F7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/3130332e3138362e3130382e302f32332d3234203d3e203538353433.roa
Signing time:             Thu 09 Apr 2026 10:02:29 +0000
ROA not before:           Thu 09 Apr 2026 09:57:29 +0000
ROA not after:            Thu 08 Apr 2027 10:02:29 +0000
asID:                     58543
IP address blocks:        103.186.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 08:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:56:dd:83:3a:bf:47:cd:a6:7c:e1:c8:c7:cb:3e:24:61:1c:76:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74280C847DD28C691A500655BD81B3F019C5FCF7
        Validity
            Not Before: Apr  9 09:57:29 2026 GMT
            Not After : Apr  8 10:02:29 2027 GMT
        Subject: CN=056974A9386E3AB21FAD69580845579F41B20A33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:06:b0:fe:78:0d:16:57:cb:0e:68:47:14:71:
                    e6:0f:c5:5e:c4:72:62:82:9a:e9:6f:20:ae:2d:cc:
                    35:79:8d:aa:2f:53:bf:4e:7f:9f:a3:f2:d3:bf:c7:
                    da:71:2f:2a:e3:23:dc:78:33:25:0d:4c:5d:c9:60:
                    c1:45:0b:06:a9:c6:a2:45:37:5a:05:1b:54:2d:c6:
                    dc:ae:c7:8a:bd:8f:d6:ad:db:a1:7f:5e:12:f0:b4:
                    97:73:49:5d:41:ad:cd:bb:5d:a6:6f:9f:84:e1:45:
                    cf:e9:fa:9f:8d:fd:d7:7f:76:b9:78:05:f9:13:4c:
                    16:83:66:dd:97:ff:7f:4c:97:f8:db:57:51:ce:4c:
                    08:bd:24:5a:27:48:25:5b:d6:ba:00:c0:66:de:af:
                    4a:dc:40:19:3f:27:ac:5e:7c:79:33:ac:3d:20:f1:
                    2d:ad:06:fa:a0:bb:18:03:f3:86:6c:fb:aa:80:68:
                    84:54:68:2c:bb:e0:72:4e:26:63:f1:7c:56:08:5a:
                    e2:40:09:cd:09:e5:8c:bd:52:20:29:a9:fd:a6:c5:
                    ba:18:7f:14:79:75:e5:10:28:87:3f:78:de:00:12:
                    47:3b:7c:7c:20:e6:02:ee:1d:d4:93:f1:8a:95:71:
                    eb:03:b5:a0:d0:02:36:23:32:52:a5:d7:cb:d8:3c:
                    7f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:69:74:A9:38:6E:3A:B2:1F:AD:69:58:08:45:57:9F:41:B2:0A:33
            X509v3 Authority Key Identifier:
                keyid:74:28:0C:84:7D:D2:8C:69:1A:50:06:55:BD:81:B3:F0:19:C5:FC:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/3130332e3138362e3130382e302f32332d3234203d3e203538353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:f7:8f:62:bc:07:99:17:bd:51:e0:b6:7e:4f:04:1c:e3:80:
         b1:55:91:41:18:ce:0c:7d:d7:7d:5c:2c:27:d3:e0:c4:3b:0f:
         71:e9:d2:20:76:4b:73:2d:1c:89:55:69:af:4b:c6:de:76:89:
         f3:bc:b6:e0:75:3e:ae:29:98:e8:e3:b5:6d:f1:24:b8:36:ee:
         2c:72:a6:af:6e:30:b1:d6:5a:48:39:78:1c:44:c9:bf:5a:bf:
         c0:7c:fc:7e:cd:1b:ea:8a:5f:45:cf:1c:2e:a4:5d:de:22:03:
         29:56:1b:22:13:47:19:e0:74:c1:d9:20:30:b8:bd:51:7e:d3:
         4f:8f:b6:f6:52:d3:83:37:5f:e3:52:4b:77:2d:c4:82:66:ba:
         76:e8:d6:d6:bd:54:fa:90:90:03:34:97:5c:5f:31:df:60:84:
         b2:64:cc:c8:19:89:09:02:e7:82:b9:03:4d:08:c1:42:8c:e1:
         0b:6a:17:86:d4:4c:08:ee:88:26:39:b5:a1:19:60:ee:2d:23:
         1d:a6:64:52:ae:18:b7:7f:8c:65:f3:df:2a:d5:7a:15:20:7f:
         6f:17:92:b1:2e:96:c0:e3:cb:d3:43:9e:bd:f4:8a:72:49:7a:
         79:b1:ec:66:1c:e5:92:8f:7b:ef:09:18:1c:dd:ff:86:7d:2f:
         f8:c6:52:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:54:30 2026 by rpki-client