Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130362e322e38382e302f32312d3234203d3e203435303632.roa
File:                     3130362e322e38382e302f32312d3234203d3e203435303632.roa (raw, json)
Hash identifier:          pfudjeMwiPttQX7zewm2dAHI6vgGZc38BcnhTrvqd8U=
Subject key identifier:   06:C6:02:7B:85:D1:0B:23:74:5F:EC:7F:44:82:B3:3A:1B:94:26:4E
Certificate issuer:       /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial:       7703AAE8E2EF1297834622821C5A8F4FB1F23E96
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130362e322e38382e302f32312d3234203d3e203435303632.roa
Signing time:             Fri 10 Apr 2026 06:04:08 +0000
ROA not before:           Fri 10 Apr 2026 05:59:08 +0000
ROA not after:            Fri 09 Apr 2027 06:04:08 +0000
asID:                     45062
IP address blocks:        106.2.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:03:aa:e8:e2:ef:12:97:83:46:22:82:1c:5a:8f:4f:b1:f2:3e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
        Validity
            Not Before: Apr 10 05:59:08 2026 GMT
            Not After : Apr  9 06:04:08 2027 GMT
        Subject: CN=06C6027B85D10B23745FEC7F4482B33A1B94264E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:72:6c:af:e9:ac:34:c2:1b:11:45:0e:7a:96:
                    30:6f:ed:0a:4c:1d:10:ad:84:c8:c8:3f:db:bb:32:
                    59:f1:e6:84:8b:13:07:46:81:ed:72:68:55:e1:34:
                    a2:94:20:85:5b:64:b2:7c:12:1f:dc:e1:dc:2c:e7:
                    21:ae:01:00:ee:1f:87:48:b5:9a:ad:55:40:80:1e:
                    7a:c0:fa:f4:e1:79:34:65:93:15:6b:30:5d:8a:51:
                    60:0b:f6:ec:72:da:58:23:ac:91:33:06:17:5e:72:
                    12:fd:e9:d8:a1:be:53:4e:d0:82:fe:48:ef:3e:e9:
                    06:29:25:16:27:37:6f:c0:d5:01:d4:02:c5:80:5a:
                    d2:e1:22:ec:08:61:f9:69:ed:5c:43:9c:77:cf:59:
                    f2:2b:51:1f:27:f4:a6:c1:73:98:17:81:55:9c:a6:
                    72:30:89:60:de:c9:60:ad:43:10:b1:5f:52:16:13:
                    2e:43:a1:1d:bf:01:8a:91:ea:9b:78:67:54:7a:c3:
                    a6:82:25:39:67:e7:1a:11:34:0f:8a:b5:18:5e:a4:
                    f9:04:12:d5:b0:fb:27:01:5a:cf:c3:0b:c6:82:5a:
                    fa:99:1b:f0:12:fe:2c:e2:40:84:34:70:04:05:6e:
                    21:93:65:ec:eb:ec:fa:9d:8b:98:47:1f:98:36:f4:
                    96:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C6:02:7B:85:D1:0B:23:74:5F:EC:7F:44:82:B3:3A:1B:94:26:4E
            X509v3 Authority Key Identifier:
                keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130362e322e38382e302f32312d3234203d3e203435303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.2.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:86:c0:f6:d0:23:74:9a:e6:30:05:d8:10:85:bb:f4:75:e3:
         c9:1f:f6:f8:d9:db:c8:c9:1e:44:c5:f3:a4:f9:f6:0b:98:90:
         90:72:5c:0e:cf:ff:76:ed:ec:f4:de:2c:1c:e1:88:a7:53:c5:
         3e:17:45:f9:67:22:39:57:2a:b8:f7:79:76:f4:90:36:0e:b4:
         bc:ce:e8:4d:58:8e:ef:d1:14:2f:90:d0:00:85:fe:f9:4e:63:
         bc:38:5c:cd:5a:35:cc:f6:11:b5:6c:ee:0a:ef:f3:f3:db:75:
         b2:5e:ab:58:57:7b:f5:c8:22:92:b8:c7:37:52:03:62:b3:83:
         fc:c5:ab:17:c9:04:66:90:f4:df:50:49:86:89:1d:88:07:c3:
         79:03:df:fd:04:2a:5d:3f:8d:e5:c3:3f:e8:e3:80:94:ff:cb:
         15:9c:5a:bb:a2:b8:e8:15:02:ee:d4:c7:64:c0:c6:a1:a7:ab:
         9f:71:2f:41:0a:81:45:ea:8a:d9:21:51:48:34:91:2d:c8:6a:
         71:39:c4:47:2f:07:b7:5a:82:46:14:b3:c3:2f:97:30:25:e0:
         4c:c9:e4:fa:58:7e:8d:a1:e8:69:2c:f2:11:16:bb:b3:0a:5c:
         e5:7f:d0:d8:dd:22:52:20:21:4d:60:dc:a4:6c:17:05:8a:6b:
         66:45:33:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:14 2026 by rpki-client