Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447923715/0/3135322e3130342e3132382e302f31382d3138203d3e2039393339.roa
File:                     3135322e3130342e3132382e302f31382d3138203d3e2039393339.roa (raw, json)
Hash identifier:          sdZvJ7o0BFJo276y+gFX9ZXk1y7uY7SFpEO9aDshA+w=
Subject key identifier:   62:9A:88:ED:1C:EF:46:CB:D2:6C:53:86:D0:B1:E0:9E:8C:04:FD:55
Certificate issuer:       /CN=A26A131411EAF25D645F4C22903078A445B073F7
Certificate serial:       1D00758147B15145F92A532C866D84DD7F8CA5AD
Authority key identifier: A2:6A:13:14:11:EA:F2:5D:64:5F:4C:22:90:30:78:A4:45:B0:73:F7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/3135322e3130342e3132382e302f31382d3138203d3e2039393339.roa
Signing time:             Fri 10 Apr 2026 07:48:44 +0000
ROA not before:           Fri 10 Apr 2026 07:43:44 +0000
ROA not after:            Fri 09 Apr 2027 07:48:44 +0000
asID:                     9939
IP address blocks:        152.104.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 08:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:00:75:81:47:b1:51:45:f9:2a:53:2c:86:6d:84:dd:7f:8c:a5:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A26A131411EAF25D645F4C22903078A445B073F7
        Validity
            Not Before: Apr 10 07:43:44 2026 GMT
            Not After : Apr  9 07:48:44 2027 GMT
        Subject: CN=629A88ED1CEF46CBD26C5386D0B1E09E8C04FD55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8d:bc:d1:16:54:18:42:56:c8:e1:e6:92:d7:
                    93:a5:1d:19:4d:fa:59:11:c5:40:ef:4b:fe:ac:8d:
                    8f:01:0c:68:f8:23:5a:e1:68:68:b0:2c:3b:08:2e:
                    3b:57:39:ea:07:ce:44:00:91:99:f8:ab:a3:83:e4:
                    e6:a4:d9:53:86:65:f0:d8:49:9a:72:69:bd:e4:77:
                    26:88:07:9c:e2:2b:e8:6a:25:f8:9d:d2:2f:c1:fb:
                    25:ae:b3:fc:ab:80:f5:80:16:bb:3e:c6:d5:7e:f5:
                    d8:d3:c5:1b:7e:05:93:fb:e5:1b:eb:38:5b:1e:c1:
                    a5:33:86:0e:08:e9:06:22:0a:86:03:e7:6e:1d:ce:
                    bf:fa:b9:b9:7c:a3:e6:9b:26:82:f1:b8:e7:d5:8c:
                    88:6e:7c:42:19:2d:94:88:62:12:34:9a:df:bf:77:
                    eb:bc:6e:ff:24:b0:2a:81:76:19:06:77:4b:ed:4e:
                    44:42:1e:15:1e:a4:fd:68:16:8b:8e:e9:df:aa:4e:
                    ca:75:97:17:a8:7b:f4:c4:fc:e7:ef:0d:a0:62:74:
                    2a:43:ef:85:ff:d8:fe:ea:61:ab:7b:4b:f6:f3:ac:
                    e9:ea:a9:fd:18:cb:2e:6f:fa:a8:b2:2e:bf:a8:5d:
                    56:77:44:85:84:27:61:1f:b0:2a:a7:5f:e1:fe:73:
                    d2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9A:88:ED:1C:EF:46:CB:D2:6C:53:86:D0:B1:E0:9E:8C:04:FD:55
            X509v3 Authority Key Identifier:
                keyid:A2:6A:13:14:11:EA:F2:5D:64:5F:4C:22:90:30:78:A4:45:B0:73:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/3135322e3130342e3132382e302f31382d3138203d3e2039393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.104.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3d:8f:a6:12:3e:1c:71:97:18:ec:77:76:6c:f7:bb:4f:b9:4f:
         65:6a:9e:3c:50:1c:1f:a8:46:ed:88:10:1e:af:c8:44:3c:22:
         77:c1:15:ee:86:d6:ae:47:5b:d8:96:a9:ae:d8:99:6d:1c:3f:
         9e:ad:19:3a:2b:1d:72:60:84:4e:24:6c:af:3b:13:07:84:ff:
         7d:37:df:19:af:7d:d7:b8:28:05:3a:da:89:08:51:cd:3e:b1:
         bd:26:ad:5a:a6:bd:58:9a:33:6f:0a:d7:81:be:a6:af:ee:39:
         ae:b6:42:6e:67:a7:51:82:72:15:b7:b3:25:cc:ac:26:48:8a:
         07:1b:a9:88:0e:8b:30:49:e6:c9:d1:8e:dd:ee:a3:77:fd:b3:
         61:3c:a3:10:91:22:b5:d6:de:7b:30:47:1e:00:9a:6e:d2:92:
         ca:09:cc:15:d8:b3:37:5f:06:cf:f0:5b:a8:20:c8:71:65:50:
         f8:3d:fe:56:fa:d6:87:db:c2:bf:a4:e1:bd:a5:43:d7:3b:ed:
         32:16:1c:ee:c5:cc:dd:fe:7f:3b:69:45:c5:8b:86:c1:db:1e:
         06:92:04:6b:11:04:9f:77:73:1a:c1:ae:1c:38:54:63:8c:f8:
         89:4f:f0:30:b9:c3:9a:78:0e:ec:26:58:66:ae:ae:00:bf:33:
         5e:36:06:a2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:20:54 2026 by rpki-client