Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130362e322e3132342e302f32322d3234203d3e203435303632.roa
File:                     3130362e322e3132342e302f32322d3234203d3e203435303632.roa (raw, json)
Hash identifier:          cuCwEnQtVh2j0AzrvEUtlgRSf/2sPeV0J/b/YAzokKQ=
Subject key identifier:   0E:A1:3B:4A:BA:B6:9F:FA:08:31:54:23:AA:1C:86:B7:83:A5:71:93
Certificate issuer:       /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial:       50C61F663125BF3F1A86D888892CAC3AC8D3EF13
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130362e322e3132342e302f32322d3234203d3e203435303632.roa
Signing time:             Fri 10 Apr 2026 06:04:08 +0000
ROA not before:           Fri 10 Apr 2026 05:59:08 +0000
ROA not after:            Fri 09 Apr 2027 06:04:08 +0000
asID:                     45062
IP address blocks:        106.2.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c6:1f:66:31:25:bf:3f:1a:86:d8:88:89:2c:ac:3a:c8:d3:ef:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
        Validity
            Not Before: Apr 10 05:59:08 2026 GMT
            Not After : Apr  9 06:04:08 2027 GMT
        Subject: CN=0EA13B4ABAB69FFA08315423AA1C86B783A57193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:95:fa:38:05:cd:85:44:35:e3:cd:92:0a:59:
                    52:7c:0f:3f:7a:f9:fb:89:d0:74:b3:c6:cd:79:fd:
                    71:02:1f:d1:6e:ef:54:64:16:ee:92:26:a1:1a:12:
                    aa:80:7d:a9:aa:fc:4d:74:39:90:7b:a5:f9:8a:37:
                    44:74:6a:b1:88:4b:68:e2:e1:54:4a:f9:b4:70:c8:
                    88:38:bc:90:1b:e7:fb:40:14:1f:30:ce:98:c5:4c:
                    20:68:d8:b1:9a:f5:12:44:f6:2d:83:43:10:d5:4a:
                    5d:77:b3:2d:4d:84:fd:3c:b3:f7:db:3c:66:a4:24:
                    61:09:e8:d5:c5:b2:55:b0:ee:30:9d:8e:c1:f7:28:
                    a3:c1:cd:27:eb:87:96:5a:15:5a:cb:20:bc:89:6b:
                    d7:9f:be:87:77:96:4a:74:29:e8:9c:75:9a:2e:e3:
                    ea:6b:f4:cd:e8:aa:49:96:2f:b3:df:41:3d:02:ef:
                    af:69:a1:2b:ee:04:2f:8d:75:e1:23:7a:7b:94:73:
                    f1:88:96:00:cc:f6:09:d2:f6:40:7b:68:cd:61:66:
                    ec:9d:82:b9:55:c4:4d:22:1b:5f:13:e1:fc:d0:ea:
                    17:47:04:4e:67:1c:a8:a3:2d:09:02:4f:48:33:9b:
                    4c:30:ae:1c:c5:ea:e3:2a:11:10:b2:c9:ff:c3:c4:
                    7f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A1:3B:4A:BA:B6:9F:FA:08:31:54:23:AA:1C:86:B7:83:A5:71:93
            X509v3 Authority Key Identifier:
                keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130362e322e3132342e302f32322d3234203d3e203435303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.2.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:19:b9:d0:90:44:6d:7f:b8:2a:1d:6a:44:db:30:33:06:1e:
         a9:f1:2b:f8:88:72:a4:aa:83:02:5e:e7:cc:84:31:04:37:cf:
         65:1c:dd:a8:20:d1:e5:80:e9:e1:e7:29:53:16:bd:ee:4b:32:
         87:4b:eb:ff:c8:5f:ab:9d:df:d3:8c:4c:66:a2:55:27:c9:de:
         3f:30:48:bf:cf:1e:14:95:3a:ed:2e:f5:c7:a7:7b:b7:29:88:
         bd:3f:9c:b4:86:da:1d:82:10:cb:de:e4:ef:ce:2a:e3:9e:4d:
         b1:6f:85:35:f2:82:57:d1:cf:0f:bc:7e:a2:ed:60:c6:f5:ee:
         e1:06:63:f3:ca:ba:2e:ec:4e:ad:57:81:ad:e9:88:73:1a:72:
         02:51:ee:11:3a:1e:63:96:b6:b5:16:6d:d6:a7:bd:22:69:9a:
         7b:7e:66:4f:6e:23:cd:da:d7:32:26:4a:20:c7:0a:be:97:73:
         e3:c1:fb:d2:6d:4d:41:56:f3:ad:a0:7e:b8:b2:55:44:74:42:
         2e:bb:9a:24:6a:68:48:d8:13:cf:5f:45:51:aa:7f:2f:f9:69:
         8e:c1:73:12:2c:f1:76:72:d4:85:49:a9:05:5b:17:28:b8:3c:
         5b:b1:de:c2:ea:7f:e8:95:bb:19:d3:84:6d:93:68:5e:32:6c:
         39:0d:61:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:23:26 2026 by rpki-client