Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3131372e37342e3132382e302f31372d3137203d3e2030.roa
File:                     3131372e37342e3132382e302f31372d3137203d3e2030.roa (raw, json)
Hash identifier:          5MlJOu/q0Q3Mts15LBalJ1sepbxwUb+VkGap3rDiJX0=
Subject key identifier:   8D:ED:2E:EF:1F:8A:FE:55:37:51:82:D7:C6:E2:20:27:28:62:C6:6D
Certificate issuer:       /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
Certificate serial:       49D97AB7F76690046BEBCDB68E2649781D1312A1
Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3131372e37342e3132382e302f31372d3137203d3e2030.roa
Signing time:             Mon 13 Apr 2026 02:57:13 +0000
ROA not before:           Mon 13 Apr 2026 02:52:13 +0000
ROA not after:            Mon 12 Apr 2027 02:57:13 +0000
asID:                     0
IP address blocks:        117.74.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d9:7a:b7:f7:66:90:04:6b:eb:cd:b6:8e:26:49:78:1d:13:12:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
        Validity
            Not Before: Apr 13 02:52:13 2026 GMT
            Not After : Apr 12 02:57:13 2027 GMT
        Subject: CN=8DED2EEF1F8AFE55375182D7C6E220272862C66D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:42:0f:6f:27:aa:31:b6:42:00:d5:be:c2:25:
                    41:e7:31:80:71:15:b7:f1:0a:da:41:2b:2c:9d:31:
                    c9:7c:49:5b:18:39:42:90:7d:da:51:0f:a9:b7:0c:
                    27:c7:6c:09:6f:47:aa:db:a8:01:e1:48:60:fc:1b:
                    07:3e:e5:00:76:a1:5c:e1:50:50:69:d7:45:6a:aa:
                    6b:8a:6f:b2:78:b2:19:2c:ff:2d:a2:89:8f:7e:4b:
                    1a:fb:fd:de:c2:28:9c:44:40:c3:f1:64:b0:7a:24:
                    33:6b:c0:52:e0:91:8d:d5:bc:01:50:55:a5:94:7d:
                    3d:fa:89:70:71:e4:11:ed:2e:5c:76:54:c8:7b:94:
                    96:ef:0d:79:53:a9:4b:af:9b:cc:ab:cd:95:8b:5c:
                    9f:77:a6:83:03:3c:7e:4a:86:5b:bf:00:4a:97:35:
                    fc:e9:2e:38:61:62:7e:a4:62:88:e2:bb:09:e8:c3:
                    08:d2:5b:43:05:5c:3f:58:9e:a5:f5:71:60:40:e1:
                    23:13:5a:12:1d:3f:d2:93:e6:aa:f4:72:dc:4b:8d:
                    61:f9:18:32:e2:e0:93:03:89:22:18:41:95:4e:d0:
                    b2:89:2b:9e:a1:cd:c8:fd:9b:6b:61:02:2a:1e:e7:
                    1d:0e:d6:5b:c6:d2:44:b4:9e:41:38:c5:4b:75:36:
                    31:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:ED:2E:EF:1F:8A:FE:55:37:51:82:D7:C6:E2:20:27:28:62:C6:6D
            X509v3 Authority Key Identifier:
                keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3131372e37342e3132382e302f31372d3137203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         89:05:eb:b4:ae:30:63:f6:f0:ad:f2:af:94:85:0f:a5:0c:02:
         2b:60:f3:84:22:95:75:8a:46:c6:35:fb:38:3a:07:5e:bf:64:
         54:8f:47:e1:e5:3e:3f:de:5a:e0:5f:9f:b8:6d:ab:98:9f:61:
         b5:35:1a:50:c6:7b:b4:d3:b1:a8:f8:a8:5f:64:f4:9d:27:ec:
         17:20:b5:0f:dc:32:a3:1b:87:ed:fd:01:dd:71:59:7f:23:39:
         8e:f3:ec:20:d7:86:da:ff:0b:c7:c0:bf:43:4a:62:8e:4f:a6:
         6f:c3:f2:dd:e8:9f:89:18:fa:28:9e:25:d1:dc:ed:56:40:36:
         95:f9:90:6c:c3:b7:31:99:65:ef:40:97:09:8b:e4:77:76:cd:
         53:20:a0:27:d0:2b:15:ad:0b:a0:e7:2f:46:65:7d:57:fe:ba:
         de:24:2b:df:fc:75:1f:0e:1d:fd:1c:e5:f5:9b:fa:75:c0:9b:
         04:53:0c:66:16:a8:c3:af:84:29:0b:ef:7b:cd:89:44:7a:9f:
         87:c2:8a:0b:ea:96:17:a3:c7:74:40:d3:a2:dd:19:ce:b6:fd:
         d5:cb:89:bd:1b:1d:ad:a4:3b:a3:98:fd:5e:65:2c:b7:9a:8f:
         ed:86:28:ff:e5:c7:05:b9:83:09:3f:7c:1d:03:9a:e0:3f:ba:
         7e:93:b7:6c
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUSdl6t/dmkARr6822jiZJeB0TEqEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG
NzU0QkYzRjAeFw0yNjA0MTMwMjUyMTNaFw0yNzA0MTIwMjU3MTNaMDMxMTAvBgNV
BAMTKDhERUQyRUVGMUY4QUZFNTUzNzUxODJEN0M2RTIyMDI3Mjg2MkM2NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuQg9vJ6oxtkIA1b7CJUHnMYBx
FbfxCtpBKyydMcl8SVsYOUKQfdpRD6m3DCfHbAlvR6rbqAHhSGD8Gwc+5QB2oVzh
UFBp10VqqmuKb7J4shks/y2iiY9+Sxr7/d7CKJxEQMPxZLB6JDNrwFLgkY3VvAFQ
VaWUfT36iXBx5BHtLlx2VMh7lJbvDXlTqUuvm8yrzZWLXJ93poMDPH5Khlu/AEqX
NfzpLjhhYn6kYojiuwnowwjSW0MFXD9YnqX1cWBA4SMTWhIdP9KT5qr0ctxLjWH5
GDLi4JMDiSIYQZVO0LKJK56hzcj9m2thAioe5x0O1lvG0kS0nkE4xUt1NjGVAgMB
AAGjggILMIICBzAdBgNVHQ4EFgQUje0u7x+K/lU3UYLXxuIgJyhixm0wHwYDVR0j
BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD
NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw
gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk1ODg3ODgwMDgzMDEzNjM1LzAvMzEzMTM3MmUzNzM0
MmUzMTMyMzgyZTMwMmYzMTM3MmQzMTM3MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB3VK
gDANBgkqhkiG9w0BAQsFAAOCAQEAiQXrtK4wY/bwrfKvlIUPpQwCK2DzhCKVdYpG
xjX7ODoHXr9kVI9H4eU+P95a4F+fuG2rmJ9htTUaUMZ7tNOxqPioX2T0nSfsFyC1
D9wyoxuH7f0B3XFZfyM5jvPsINeG2v8Lx8C/Q0pijk+mb8Py3eifiRj6KJ4l0dzt
VkA2lfmQbMO3MZll70CXCYvkd3bNUyCgJ9ArFa0LoOcvRmV9V/663iQr3/x1Hw4d
/Rzl9Zv6dcCbBFMMZhaow6+EKQvve82JRHqfh8KKC+qWF6PHdEDTot0Zzrb91cuJ
vRsdraQ7o5j9XmUst5qP7YYo/+XHBbmDCT98HQOa4D+6fpO3bA==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:23:25 2026 by rpki-client