Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130362e322e3131322e302f32312d3234203d3e203435303632.roa
File:                     3130362e322e3131322e302f32312d3234203d3e203435303632.roa (raw, json)
Hash identifier:          5ikxFSVe8me1FQYR3tgmskejWVUIPoMWv0ISfeBBQ6I=
Subject key identifier:   03:C3:DA:34:3D:59:94:EF:D3:12:56:57:36:0D:E6:8C:F7:88:4F:9E
Certificate issuer:       /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial:       6C7787C0CE61CC49E9B1C38476BFE9DD4C42F3AF
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130362e322e3131322e302f32312d3234203d3e203435303632.roa
Signing time:             Fri 10 Apr 2026 06:04:08 +0000
ROA not before:           Fri 10 Apr 2026 05:59:08 +0000
ROA not after:            Fri 09 Apr 2027 06:04:08 +0000
asID:                     45062
IP address blocks:        106.2.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:77:87:c0:ce:61:cc:49:e9:b1:c3:84:76:bf:e9:dd:4c:42:f3:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
        Validity
            Not Before: Apr 10 05:59:08 2026 GMT
            Not After : Apr  9 06:04:08 2027 GMT
        Subject: CN=03C3DA343D5994EFD3125657360DE68CF7884F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:51:a8:79:ce:8c:0a:89:df:80:3c:4c:0e:
                    f9:9f:83:94:61:c8:1d:79:28:f4:05:4f:ff:64:21:
                    be:74:c1:9d:64:a0:9c:c1:08:9b:7b:75:3a:9b:f7:
                    f8:51:2b:d3:d1:9f:63:44:e5:88:6d:41:76:68:7e:
                    69:0c:73:c0:b6:ef:15:bc:7c:28:0e:40:7f:a4:73:
                    3e:6d:d0:df:f4:96:6e:45:6d:9d:79:8b:c4:b0:55:
                    f7:51:ec:c0:e7:54:5d:c6:15:18:b6:08:0b:2e:fe:
                    f1:b2:fe:f6:b5:20:d6:fc:e7:91:22:76:30:85:23:
                    f5:ef:36:04:ef:96:69:b1:a3:5d:75:8b:a9:be:93:
                    01:b4:50:a3:e1:41:5d:90:53:9c:32:3e:b7:10:cd:
                    38:81:b6:60:72:73:b1:4f:8b:e4:00:57:c4:f0:4d:
                    8a:d9:b4:80:47:61:f1:fc:a0:a2:ca:cc:fc:c8:f5:
                    7b:a3:ae:a5:f1:29:8e:46:8a:a0:40:19:b8:1f:ee:
                    1e:2c:58:3f:82:32:62:b6:99:e1:96:69:6f:db:d8:
                    f0:73:51:57:bf:da:30:65:76:60:79:2d:bf:9f:1c:
                    55:ac:8a:e0:00:43:e6:19:53:1c:c8:04:9a:3e:e8:
                    42:81:d3:a7:3e:65:9b:e1:fa:09:ab:11:31:f5:f5:
                    fd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C3:DA:34:3D:59:94:EF:D3:12:56:57:36:0D:E6:8C:F7:88:4F:9E
            X509v3 Authority Key Identifier:
                keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130362e322e3131322e302f32312d3234203d3e203435303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.2.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         79:dd:37:59:9d:ee:81:00:e9:56:9d:44:0e:44:df:62:c3:30:
         9b:50:7d:3b:8d:08:56:3f:02:a2:49:51:55:8c:49:b1:1f:b9:
         c9:ce:50:0b:1c:5d:bc:30:78:d0:66:1b:80:20:c3:f1:ae:88:
         4a:a4:76:0c:fe:ab:e2:1f:37:6e:41:74:c8:f3:f9:c6:2c:9d:
         13:42:92:22:cb:4c:a6:8e:e6:b5:20:bb:4d:ac:e0:95:9a:56:
         7a:5d:cb:a6:f5:34:48:21:3c:f4:63:7e:bb:04:10:3e:05:d8:
         11:ff:eb:a3:ee:70:b5:9b:0b:b0:fe:6a:65:68:16:ec:25:c8:
         a6:ae:bd:21:ee:15:5e:54:55:11:ec:be:95:eb:65:ea:0d:b5:
         62:88:87:7a:13:76:2e:72:30:bc:f6:30:b3:93:8e:0f:95:c0:
         44:8b:96:c3:8c:d8:6e:5b:4c:0b:c8:55:44:e5:63:bf:5b:3e:
         07:50:e0:2b:d8:9c:a4:32:52:7e:76:a5:6e:3d:51:98:60:bd:
         b0:63:25:5a:f4:14:81:b7:57:ed:55:78:74:3b:74:ff:70:a4:
         42:60:4d:8c:55:8a:a9:08:70:d1:d9:ff:b7:5e:47:d5:a0:ae:
         99:02:20:05:3a:8b:45:fa:36:6b:a6:60:d8:bf:da:da:4c:74:
         66:a2:85:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:31 2026 by rpki-client