Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130362e322e38312e302f32342d3234203d3e203435303632.roa
File:                     3130362e322e38312e302f32342d3234203d3e203435303632.roa (raw, json)
Hash identifier:          QyUk9ZHRe77sqGuXm5N3sAdKjIVV1CECDuqe/+//e/U=
Subject key identifier:   21:AB:9C:0C:77:54:C1:2C:6C:CB:3B:2F:1E:07:C5:9C:12:03:FC:B1
Certificate issuer:       /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial:       6348CF8AC553DE8E9EBC4299DC093C121C0D964F
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130362e322e38312e302f32342d3234203d3e203435303632.roa
Signing time:             Fri 10 Apr 2026 06:04:08 +0000
ROA not before:           Fri 10 Apr 2026 05:59:08 +0000
ROA not after:            Fri 09 Apr 2027 06:04:08 +0000
asID:                     45062
IP address blocks:        106.2.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:48:cf:8a:c5:53:de:8e:9e:bc:42:99:dc:09:3c:12:1c:0d:96:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
        Validity
            Not Before: Apr 10 05:59:08 2026 GMT
            Not After : Apr  9 06:04:08 2027 GMT
        Subject: CN=21AB9C0C7754C12C6CCB3B2F1E07C59C1203FCB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:54:60:93:4e:3d:f0:37:e6:24:47:3b:d5:72:
                    47:9f:57:0c:55:b7:6b:09:fd:32:58:06:db:38:00:
                    a5:13:4a:92:ac:21:eb:b8:56:ee:61:b1:11:10:74:
                    f2:7b:49:b7:df:d0:6f:80:07:60:ae:92:0a:ba:b8:
                    7b:ca:32:d4:9a:1f:5f:5b:50:2b:03:89:2c:c8:3b:
                    c7:dd:c0:1e:a1:0b:96:3c:b5:19:14:81:c8:ed:b5:
                    f5:94:3c:72:1e:f2:a2:d8:c9:a6:64:e8:87:70:7d:
                    b9:db:ba:3e:f6:3e:8c:3b:3b:a2:b9:b8:8f:6a:69:
                    e6:ab:8f:8e:59:c6:1a:4c:0c:71:11:df:56:ee:14:
                    4b:4a:e1:4c:db:36:a3:4d:74:20:79:4e:e7:cc:29:
                    d7:b1:17:e7:97:8a:cd:78:3c:b1:d1:12:a3:b1:b9:
                    90:88:09:4e:ce:80:30:0b:2b:d2:ee:33:b7:b2:d9:
                    ef:fd:13:46:0f:66:13:01:c7:33:e5:bf:ea:8b:ea:
                    d3:2c:41:f1:15:fd:22:7a:b2:2d:ca:60:12:d1:d5:
                    44:b6:51:2a:74:9b:45:28:f6:8f:40:cb:0b:a6:f7:
                    2c:5f:e1:d9:8c:96:89:b3:a8:95:95:23:62:16:15:
                    0e:8c:70:c8:53:42:49:3c:33:b4:ab:30:f1:e3:f3:
                    d5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AB:9C:0C:77:54:C1:2C:6C:CB:3B:2F:1E:07:C5:9C:12:03:FC:B1
            X509v3 Authority Key Identifier:
                keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130362e322e38312e302f32342d3234203d3e203435303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.2.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:03:33:7b:3b:55:a3:ca:c4:bf:e2:9a:9f:8b:6b:a3:0b:dc:
         ee:7b:0d:07:c4:66:0c:aa:fa:aa:2c:fd:46:34:5d:b0:17:62:
         82:ba:c2:09:2d:16:c1:00:50:f6:0c:a0:99:e9:c3:4e:65:ac:
         95:88:22:74:38:63:4e:4b:25:2c:56:5d:77:6c:f3:db:00:45:
         9b:c9:38:dd:38:54:41:bd:46:1e:88:5b:bb:43:13:cc:04:17:
         2f:c7:d0:2c:a7:c3:f1:16:bc:77:8b:3c:f6:ac:14:81:81:21:
         52:6c:aa:3d:bd:7d:b9:9b:1e:70:94:02:7b:1b:df:74:9a:8d:
         c2:6e:3d:12:b8:7a:20:6b:55:ca:24:20:62:c6:4e:c1:51:95:
         c5:1c:17:6b:dd:1a:87:84:8f:10:82:85:76:89:a0:d1:cc:22:
         18:17:8d:65:31:e1:00:e3:18:22:4d:73:96:cb:5d:36:c0:7b:
         af:ee:f0:21:2f:8a:cd:7d:7e:d2:64:20:35:98:d2:06:94:f0:
         7a:55:e5:a4:5b:f3:6c:aa:a9:93:81:99:f0:f1:8e:55:7c:c5:
         f1:87:45:b7:5b:0e:5d:e9:5d:13:47:3b:4a:74:44:23:b1:9c:
         0e:4e:50:b6:ba:80:3c:25:bb:09:d3:78:93:c1:87:7c:f6:09:
         81:47:4c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:16 2026 by rpki-client