Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447923715/0/3135322e3130342e3233362e302f32322d3232203d3e2039393339.roa
File:                     3135322e3130342e3233362e302f32322d3232203d3e2039393339.roa (raw, json)
Hash identifier:          bmUoL+fOu4BaCls7X9MgP1uo47T2a95MrOxizht/8h4=
Subject key identifier:   10:56:7C:6A:01:38:CF:06:C7:F0:6D:71:99:F7:CA:CD:91:9A:EE:1E
Certificate issuer:       /CN=A26A131411EAF25D645F4C22903078A445B073F7
Certificate serial:       61D94EC11F51FE55E06348C48E06D9297629C0BC
Authority key identifier: A2:6A:13:14:11:EA:F2:5D:64:5F:4C:22:90:30:78:A4:45:B0:73:F7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/3135322e3130342e3233362e302f32322d3232203d3e2039393339.roa
Signing time:             Fri 10 Apr 2026 07:48:45 +0000
ROA not before:           Fri 10 Apr 2026 07:43:45 +0000
ROA not after:            Fri 09 Apr 2027 07:48:45 +0000
asID:                     9939
IP address blocks:        152.104.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 08:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d9:4e:c1:1f:51:fe:55:e0:63:48:c4:8e:06:d9:29:76:29:c0:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A26A131411EAF25D645F4C22903078A445B073F7
        Validity
            Not Before: Apr 10 07:43:45 2026 GMT
            Not After : Apr  9 07:48:45 2027 GMT
        Subject: CN=10567C6A0138CF06C7F06D7199F7CACD919AEE1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8f:11:1c:11:c1:b5:53:f0:c8:49:1e:7a:46:
                    ae:2c:19:6e:c3:75:99:3e:12:9d:fc:32:05:b0:a8:
                    16:b5:d4:d3:b2:d2:ed:25:4a:e5:c4:6e:4f:76:76:
                    b3:3b:34:b9:90:9b:6b:51:3f:15:dc:c3:64:ff:10:
                    9e:b6:da:94:dd:13:11:b8:3a:e4:89:26:88:66:a8:
                    d1:d5:be:72:96:23:23:63:17:fc:20:9a:25:99:72:
                    37:1e:1c:8e:03:27:bf:8d:a8:57:f7:84:a2:39:4a:
                    47:ba:9e:d6:51:86:53:eb:65:fb:37:32:3c:f9:a5:
                    28:00:dc:2e:3f:3d:13:d8:8c:35:15:ad:d9:01:54:
                    f7:ec:cf:fe:23:fb:77:06:5f:d2:70:e0:09:39:cc:
                    ca:fb:2f:4c:71:bc:2d:62:35:8d:5c:cf:b0:d0:d2:
                    41:70:32:b0:80:af:c9:ec:ef:ef:13:f2:9f:23:a2:
                    27:54:12:0b:2b:9c:54:9a:81:87:ee:61:c5:e5:66:
                    82:5a:1b:8c:b0:2d:31:91:4a:c5:20:69:82:3d:f4:
                    91:73:7b:bf:79:80:1f:2d:de:d3:e9:b9:e9:6c:ff:
                    43:e4:3b:bc:7b:d6:6a:76:8e:e1:72:d6:35:eb:22:
                    b4:c5:33:06:92:dc:2c:13:4b:2f:96:0c:21:36:61:
                    9d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:56:7C:6A:01:38:CF:06:C7:F0:6D:71:99:F7:CA:CD:91:9A:EE:1E
            X509v3 Authority Key Identifier:
                keyid:A2:6A:13:14:11:EA:F2:5D:64:5F:4C:22:90:30:78:A4:45:B0:73:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/3135322e3130342e3233362e302f32322d3232203d3e2039393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.104.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:c6:b9:03:a1:9f:b0:af:ed:ca:65:6f:82:8f:4c:07:a5:2e:
         8f:b4:33:91:c1:43:18:76:09:4b:f6:05:68:7c:a9:72:24:26:
         73:1b:c0:b6:c3:a2:98:96:4e:cd:fc:f5:8c:b4:8e:f9:5d:a3:
         c2:4d:51:00:bd:e6:7f:7c:a2:9f:f5:48:3f:e3:7b:9d:9b:36:
         b7:c7:ea:b5:8c:28:28:32:fe:64:0b:1b:ab:2a:d2:c7:46:eb:
         4f:3c:9d:1e:6d:37:ca:1d:ab:ac:68:36:1f:e8:27:c7:87:55:
         42:a8:eb:d9:70:ac:ff:d3:9f:7b:53:84:33:63:dc:35:01:f1:
         e4:62:59:36:9a:22:82:c1:2e:a9:19:3e:1e:69:82:85:d9:7e:
         d2:39:06:a3:c4:be:0a:58:b5:4c:0a:ca:c6:7f:9e:a0:d7:e8:
         71:26:8f:21:4f:cd:36:5a:61:49:8a:56:2d:ee:f5:b9:83:7f:
         3c:38:0f:31:a3:b3:75:a1:a4:cc:0e:bb:1a:c6:ae:7a:fe:7d:
         62:9b:93:5c:24:f0:6f:e6:b7:d7:5a:e5:ef:df:a7:56:41:ba:
         82:a5:32:94:c4:86:19:d2:7c:a2:87:03:8a:fd:d1:fd:42:10:
         00:f3:28:9d:67:75:d7:3e:61:ce:59:fc:90:c5:79:2d:e8:ef:
         89:b3:b9:c8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:20:49 2026 by rpki-client