Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130362e322e39362e302f32302d3234203d3e203435303632.roa
File:                     3130362e322e39362e302f32302d3234203d3e203435303632.roa (raw, json)
Hash identifier:          7d5tTw7pIzfwVS+m1KQSNVI4+uMvkjUcjPTPsD7/jjc=
Subject key identifier:   CC:78:2A:FA:7C:24:41:7A:D9:23:21:63:D4:85:69:15:C4:30:73:0D
Certificate issuer:       /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial:       44E2C93A094E09F91DB7BE320B54156B9B6A265B
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130362e322e39362e302f32302d3234203d3e203435303632.roa
Signing time:             Fri 10 Apr 2026 06:04:08 +0000
ROA not before:           Fri 10 Apr 2026 05:59:08 +0000
ROA not after:            Fri 09 Apr 2027 06:04:08 +0000
asID:                     45062
IP address blocks:        106.2.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e2:c9:3a:09:4e:09:f9:1d:b7:be:32:0b:54:15:6b:9b:6a:26:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
        Validity
            Not Before: Apr 10 05:59:08 2026 GMT
            Not After : Apr  9 06:04:08 2027 GMT
        Subject: CN=CC782AFA7C24417AD9232163D4856915C430730D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e5:30:7c:e8:af:ca:46:bc:fe:86:39:7a:73:
                    24:ae:3e:10:15:de:c9:26:98:e4:65:1d:fc:3a:7e:
                    11:3f:ba:f4:55:3a:8b:4f:45:e8:90:1e:f7:ae:1e:
                    4f:d8:6c:6d:dd:2d:9e:b3:9e:19:8c:f4:ac:5d:cc:
                    f3:ed:a3:10:f2:27:53:c3:62:3b:fa:8b:81:e6:76:
                    ab:bc:3a:78:ff:2f:eb:02:af:ec:34:f5:e5:5a:1d:
                    44:b6:df:e0:b7:bd:b4:c5:ba:26:52:0c:20:9a:4a:
                    42:77:76:9c:ed:a7:7d:eb:9a:2c:67:f9:d3:bc:5a:
                    4f:31:ec:97:09:3b:4e:81:4d:ef:bc:bc:9f:b3:c4:
                    4a:b7:1f:39:8f:79:55:41:8e:9e:f6:cf:fe:ec:42:
                    23:25:c4:de:a8:b6:32:2a:c9:0c:99:b9:c1:a0:a2:
                    76:80:a8:b1:5a:ae:3f:b6:f9:c9:88:e2:7d:62:7b:
                    f8:e2:d0:99:a0:5c:bd:57:ac:16:15:60:16:59:90:
                    8c:bd:f9:1b:9d:16:ab:5b:36:c6:ac:54:e6:fd:94:
                    a1:84:e7:10:f2:00:92:38:46:f5:84:b2:eb:69:36:
                    b2:2e:16:5c:89:8d:64:38:20:5c:51:4b:f7:25:62:
                    c5:aa:fe:6f:cf:26:82:87:a4:ca:7e:df:e5:91:79:
                    b8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:78:2A:FA:7C:24:41:7A:D9:23:21:63:D4:85:69:15:C4:30:73:0D
            X509v3 Authority Key Identifier:
                keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130362e322e39362e302f32302d3234203d3e203435303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.2.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:0b:ec:21:b9:cd:13:94:3e:99:f5:66:4b:41:a7:03:4a:d4:
         e8:5d:70:e1:d4:8d:56:09:bc:f8:fc:86:84:bb:2f:92:21:34:
         44:90:ef:77:33:cf:63:ac:7b:af:e0:cc:68:ba:e7:fd:ec:37:
         b7:ea:5e:10:1e:bd:6b:9c:99:57:1f:44:60:86:d5:21:48:72:
         99:89:35:0b:c6:f0:91:3e:34:45:95:3e:54:81:99:f2:37:f4:
         9f:7f:4a:2a:f5:b1:90:25:c6:03:d6:0c:ec:7d:3e:44:d5:6b:
         7a:33:07:38:fb:aa:71:0a:ee:12:0e:fb:0c:c6:c5:4e:e7:55:
         3f:e2:f0:25:35:31:2a:10:70:e7:34:55:11:af:ca:0b:27:01:
         32:b2:a2:a1:97:f3:eb:e6:f6:45:95:bb:02:df:b3:be:a7:69:
         ed:2c:a0:fb:2c:1c:a5:5b:a7:0c:15:46:ca:4d:f1:e9:33:01:
         45:78:fa:fd:2b:d1:bc:56:c8:67:6f:17:e5:4a:d6:e0:33:76:
         fd:3d:6b:b7:11:54:0f:cd:10:fd:c5:a5:61:67:5d:bc:34:ea:
         c6:d2:a9:9c:0c:a5:a7:40:d0:37:93:4e:17:cb:a0:ee:92:e8:
         c9:05:98:8d:17:49:97:b5:18:16:29:a5:a7:3d:01:60:7e:40:
         12:db:37:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:23 2026 by rpki-client