Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130332e37342e32342e302f32322d3234203d3e203233373234.roa
File:                     3130332e37342e32342e302f32322d3234203d3e203233373234.roa (raw, json)
Hash identifier:          mHMX8wZjs4bbCtm4X6ShTpKDm1CgmLa+/e9/dla7P4k=
Subject key identifier:   50:B8:71:DA:7D:07:DB:E0:92:B9:96:D9:5D:8A:C4:E9:13:6B:57:57
Certificate issuer:       /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial:       4B1F4CDEDB840A07682ACA93A74C7E2056EAAC92
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130332e37342e32342e302f32322d3234203d3e203233373234.roa
Signing time:             Fri 10 Apr 2026 06:07:17 +0000
ROA not before:           Fri 10 Apr 2026 06:02:17 +0000
ROA not after:            Fri 09 Apr 2027 06:07:17 +0000
asID:                     23724
IP address blocks:        103.74.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:1f:4c:de:db:84:0a:07:68:2a:ca:93:a7:4c:7e:20:56:ea:ac:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
        Validity
            Not Before: Apr 10 06:02:17 2026 GMT
            Not After : Apr  9 06:07:17 2027 GMT
        Subject: CN=50B871DA7D07DBE092B996D95D8AC4E9136B5757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ec:de:7d:14:9e:e3:29:32:7b:67:46:a1:b1:
                    d6:64:7c:df:98:d7:1b:03:c9:24:0f:e6:f7:3d:3e:
                    d6:d2:e7:cc:fb:aa:2f:b4:f3:41:0c:8b:e2:d0:50:
                    cc:81:21:95:a0:f4:cb:eb:ec:63:e8:b5:f8:40:da:
                    26:24:00:71:37:0d:79:18:ab:61:10:41:e9:08:28:
                    69:f2:2f:fe:24:6e:83:60:80:79:72:6f:50:5b:a4:
                    4c:38:de:b5:1a:f4:19:01:fd:fa:df:6e:e9:ca:d6:
                    4d:e5:08:42:4a:81:c2:79:2c:c8:87:25:e7:bf:fa:
                    ee:fe:54:18:72:11:41:ed:2f:f1:0c:bb:ba:ca:5b:
                    12:07:53:a0:9a:0b:64:37:e9:ff:e5:9d:75:64:c5:
                    3d:5a:8d:dd:89:05:09:cb:2f:20:11:e5:b5:81:a4:
                    09:de:20:57:a5:2c:a5:31:be:78:ac:69:04:28:17:
                    5d:bf:d0:4c:bf:c0:24:02:a0:48:69:c6:4e:1f:ee:
                    a7:a7:c7:76:ad:e4:2e:37:42:ea:0e:58:ab:b0:1e:
                    a5:f9:ba:0c:c8:aa:be:da:98:f8:07:9c:0a:5c:ef:
                    71:1e:0e:b6:71:cb:2e:78:95:c1:94:b2:be:a2:8d:
                    d1:83:d5:21:6a:ee:1f:c3:34:1b:9d:dc:53:f5:ef:
                    d4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B8:71:DA:7D:07:DB:E0:92:B9:96:D9:5D:8A:C4:E9:13:6B:57:57
            X509v3 Authority Key Identifier:
                keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130332e37342e32342e302f32322d3234203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:c3:ce:b2:e9:ee:16:10:2d:af:e2:bf:89:92:95:6e:51:b5:
         1e:e9:49:9c:aa:8c:35:a0:86:9c:7c:16:8f:6f:77:16:2c:1f:
         2d:28:70:a9:dd:f4:8f:43:51:a8:31:80:be:af:6d:1c:8c:b8:
         34:6c:d2:2c:e9:80:ea:fe:6f:0c:26:f6:f8:63:ef:c6:f7:3c:
         61:7a:74:71:4d:88:0a:3d:2c:02:26:ea:5e:5e:31:94:74:9b:
         ce:6d:7f:58:7a:d2:54:0e:fb:df:b1:d1:dc:3d:4a:f9:a1:53:
         0e:71:d5:03:84:de:31:30:1a:94:b9:fc:06:0b:33:a8:49:04:
         f3:03:f2:bb:43:1d:39:25:cd:f6:a7:a0:8b:cf:4b:20:ca:d9:
         3e:24:d8:75:cd:e2:9a:8a:98:02:47:60:21:32:49:4d:f5:f5:
         0b:df:aa:f1:0a:7e:ae:c7:05:e0:c2:6f:59:d2:85:1a:7a:39:
         ac:34:6b:b3:7d:72:38:9b:06:55:a7:3f:1c:6b:70:76:93:77:
         62:52:e1:3a:d0:92:b5:cc:9a:01:63:56:95:a2:ac:de:60:cd:
         0b:55:4c:bd:5f:82:da:4a:f3:de:56:2e:64:62:6a:77:ff:5b:
         08:57:29:56:45:48:87:fb:e0:3e:19:39:bb:8c:28:36:35:8c:
         90:16:2d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:25 2026 by rpki-client