Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e302e302f31372d3137203d3e20313333313138.roa
File:                     3130362e37342e302e302f31372d3137203d3e20313333313138.roa (raw, json)
Hash identifier:          JdUx6XU6FPs9SA34xdzzux/NwTIHajzzO1uSbNcPbV0=
Subject key identifier:   AC:DC:71:E0:87:C0:C8:F5:DE:BD:8F:28:1F:C5:C6:AA:E2:1A:25:AD
Certificate issuer:       /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial:       7AEAC735C47C2F9743DA2FD29894D7D171D43F63
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e302e302f31372d3137203d3e20313333313138.roa
Signing time:             Fri 15 May 2026 09:21:18 +0000
ROA not before:           Fri 15 May 2026 09:16:18 +0000
ROA not after:            Fri 14 May 2027 09:21:18 +0000
asID:                     133118
IP address blocks:        106.74.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ea:c7:35:c4:7c:2f:97:43:da:2f:d2:98:94:d7:d1:71:d4:3f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
        Validity
            Not Before: May 15 09:16:18 2026 GMT
            Not After : May 14 09:21:18 2027 GMT
        Subject: CN=ACDC71E087C0C8F5DEBD8F281FC5C6AAE21A25AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:30:fb:4d:34:93:2e:46:0b:9f:af:95:5d:15:
                    59:9c:31:aa:19:e9:8f:1a:4d:67:48:88:c8:28:83:
                    94:7f:c3:8f:e0:68:4c:d0:33:72:2a:cf:36:52:93:
                    95:ab:99:2e:a2:3f:80:2f:9e:83:01:6c:bd:5f:31:
                    f2:89:b7:77:66:e7:ce:2e:f4:fa:a7:94:a2:ca:b3:
                    0d:7a:47:a0:c3:d4:9d:c3:e1:84:d1:f3:5e:05:2a:
                    71:91:79:4e:75:17:e7:73:2e:5d:e9:73:25:5e:0b:
                    bf:ca:df:11:14:35:2d:43:d9:18:53:ae:58:e6:50:
                    f6:b3:a0:c1:d1:43:64:3c:8e:b7:26:5c:20:41:ff:
                    48:72:df:6a:c5:4c:fe:76:f7:99:61:4c:d5:1e:4e:
                    a5:bc:06:6b:d3:b7:93:8d:42:eb:98:47:98:26:96:
                    77:53:f5:86:8a:11:f5:6e:05:02:1f:02:41:ca:99:
                    23:6a:de:40:65:43:95:97:ce:4e:c3:99:48:fc:2b:
                    65:55:0e:99:b2:54:99:91:9d:17:92:d6:76:3e:64:
                    2f:aa:d2:80:c3:fd:43:3e:17:fd:de:46:56:9a:6a:
                    14:a1:f0:6f:a8:5f:c9:df:51:06:19:c1:b2:9b:99:
                    4b:35:e9:8c:bf:45:21:92:f6:57:81:65:cd:54:04:
                    28:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DC:71:E0:87:C0:C8:F5:DE:BD:8F:28:1F:C5:C6:AA:E2:1A:25:AD
            X509v3 Authority Key Identifier:
                keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e302e302f31372d3137203d3e20313333313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.74.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         31:c3:37:e0:e4:82:21:79:97:56:8b:d0:1d:fb:f1:20:8c:3a:
         55:31:a0:41:91:f8:90:76:b9:d4:30:37:14:dc:a3:2f:9c:9a:
         f5:f5:62:da:10:9f:18:09:e7:21:04:cc:3a:4e:86:12:67:16:
         59:78:ba:c8:6f:c2:de:b3:5a:d4:a3:0e:2c:97:8f:11:f6:8c:
         0c:ed:eb:1f:2b:0d:19:88:f7:28:55:84:55:60:90:e0:69:cb:
         91:7e:b8:57:8a:21:2e:46:ea:d6:7d:f3:8b:cf:ed:ec:5d:70:
         31:e3:72:5a:70:5f:bd:8b:10:57:43:61:a8:d4:a0:f9:61:54:
         3d:3e:58:0c:a3:07:a2:12:bb:57:a8:ac:1c:85:a4:a8:69:2c:
         25:f7:54:e4:cb:2b:c0:18:08:ee:3e:45:12:f5:41:f1:e5:a9:
         dd:6b:3a:3c:4f:1c:13:30:4e:8b:13:42:25:e9:ee:97:24:f4:
         28:90:7a:02:10:ec:0e:3c:15:a2:c2:03:05:de:36:d8:48:ba:
         92:14:5f:d7:81:53:bb:c1:e2:ef:58:13:cb:6b:83:18:4b:83:
         9e:06:26:2f:40:f4:f4:d4:fc:02:9c:f0:2a:8f:2a:ba:58:7d:
         15:d0:c0:0a:03:48:2d:89:bf:72:9b:15:62:0d:ff:73:af:32:
         1e:94:f6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:34 2026 by rpki-client