Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130362e322e38322e302f32332d3234203d3e203435303632.roa
File:                     3130362e322e38322e302f32332d3234203d3e203435303632.roa (raw, json)
Hash identifier:          ARdbssYWNRu7uzXVNxxW/BJ1EnrSaRscCouvjnwYr0Y=
Subject key identifier:   2A:E8:3F:72:C5:1F:19:9A:AE:61:8C:9D:7F:6E:20:43:20:4F:F3:AF
Certificate issuer:       /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial:       2C50D883C28051CC8B01BC628D6D202A0B9DEF16
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130362e322e38322e302f32332d3234203d3e203435303632.roa
Signing time:             Fri 10 Apr 2026 06:04:08 +0000
ROA not before:           Fri 10 Apr 2026 05:59:08 +0000
ROA not after:            Fri 09 Apr 2027 06:04:08 +0000
asID:                     45062
IP address blocks:        106.2.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:50:d8:83:c2:80:51:cc:8b:01:bc:62:8d:6d:20:2a:0b:9d:ef:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
        Validity
            Not Before: Apr 10 05:59:08 2026 GMT
            Not After : Apr  9 06:04:08 2027 GMT
        Subject: CN=2AE83F72C51F199AAE618C9D7F6E2043204FF3AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1e:f9:7a:e9:94:19:af:f4:62:67:5b:60:e9:
                    01:0c:6e:34:0a:f3:05:eb:17:98:6d:1c:97:b4:26:
                    4f:fc:a5:7d:27:02:65:20:e7:de:b7:37:c2:31:5a:
                    61:8d:ca:8a:25:53:b9:66:21:4d:d8:a8:34:84:d3:
                    31:df:82:73:5a:07:bc:fb:b2:84:f9:2d:1b:ff:20:
                    0b:d2:a7:c3:74:3f:79:1e:e4:19:65:a5:16:76:93:
                    12:1e:2f:ac:4d:0c:61:88:6f:ee:d2:89:81:e9:d0:
                    64:19:9c:e8:2d:c1:8b:89:23:25:69:16:ec:d7:b5:
                    2f:15:bf:79:b1:83:19:6a:10:7e:e3:cc:6c:3d:34:
                    48:ef:6a:35:d0:c5:f5:dd:36:3d:43:87:34:39:cf:
                    77:51:95:47:41:eb:3d:ae:d8:78:9a:90:1a:42:ca:
                    97:e3:e4:8d:3a:dc:99:05:d2:aa:8d:60:87:08:61:
                    8a:d6:1e:02:40:fa:81:a4:6e:0c:8b:0f:72:69:31:
                    95:ec:b6:0a:de:75:c9:5a:4b:40:c8:ee:17:df:c5:
                    10:58:0e:ea:ec:58:bd:28:d7:f7:89:08:c6:49:29:
                    a6:7e:a0:53:69:55:95:f6:76:19:16:63:53:8b:12:
                    01:24:12:79:74:46:1a:06:da:8b:47:45:fb:99:b4:
                    d5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E8:3F:72:C5:1F:19:9A:AE:61:8C:9D:7F:6E:20:43:20:4F:F3:AF
            X509v3 Authority Key Identifier:
                keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130362e322e38322e302f32332d3234203d3e203435303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.2.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:b2:94:12:5c:60:b7:b5:1c:63:12:df:d3:fd:65:70:65:5f:
         5d:93:27:e8:aa:b1:ae:55:f8:08:c4:8c:5e:be:34:ff:00:06:
         48:83:1c:d2:07:c0:68:f0:f5:c3:cb:84:58:72:39:93:0d:67:
         1f:3c:21:f0:cf:03:63:8a:be:97:16:60:10:55:d3:68:61:58:
         c1:2d:91:59:3e:f7:44:18:f4:7f:14:65:c5:9e:8c:77:d0:bf:
         cb:a2:d1:87:19:b2:0f:6d:ab:8f:5d:0c:f7:67:bd:bb:fb:ed:
         4b:d9:e2:bb:41:04:db:80:37:7d:ff:bb:18:40:09:14:ef:95:
         ca:14:ef:63:2d:3a:e0:ec:f7:2c:b1:cd:d7:ba:54:27:b9:fc:
         ba:bc:96:ec:1a:b8:f7:2b:cb:e3:39:6a:83:05:eb:60:87:09:
         1d:2f:33:22:4a:90:6d:1a:e5:81:11:69:4e:19:1a:5d:46:ee:
         e4:e7:5e:30:fa:3f:50:ad:36:e7:19:fa:b2:9b:b4:39:04:76:
         c9:3a:97:69:4b:30:0d:7b:7a:ab:e0:a2:6f:d9:f5:f3:08:ff:
         7e:d4:e5:d4:e5:bb:d3:70:ef:f4:59:e1:bf:18:ba:98:0a:ea:
         f6:f0:24:fc:2a:0d:15:ee:03:f9:72:90:fa:79:7c:ef:25:04:
         cf:15:4f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:15 2026 by rpki-client