Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e32342e302f32342d3234203d3e20313333313138.roa
File:                     3130362e37342e32342e302f32342d3234203d3e20313333313138.roa (raw, json)
Hash identifier:          CHsKFS1v7arjdsv/KiBrNpEB72gF/zGK+ClkH/e8SKA=
Subject key identifier:   C5:C0:D2:86:99:91:45:67:3E:E3:BC:F5:31:3C:D8:74:F3:4A:43:10
Certificate issuer:       /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial:       0E9952B9E55B020BBEE7FC3E3BE0D7448350C42C
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e32342e302f32342d3234203d3e20313333313138.roa
Signing time:             Fri 15 May 2026 09:19:55 +0000
ROA not before:           Fri 15 May 2026 09:14:55 +0000
ROA not after:            Fri 14 May 2027 09:19:55 +0000
asID:                     133118
IP address blocks:        106.74.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:99:52:b9:e5:5b:02:0b:be:e7:fc:3e:3b:e0:d7:44:83:50:c4:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
        Validity
            Not Before: May 15 09:14:55 2026 GMT
            Not After : May 14 09:19:55 2027 GMT
        Subject: CN=C5C0D286999145673EE3BCF5313CD874F34A4310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4b:cb:e7:bf:9d:3e:d4:f6:30:89:bd:e6:d5:
                    c1:8c:4f:62:98:0d:02:d2:65:30:8b:bd:e2:8a:86:
                    61:ac:90:c8:b2:39:99:ae:95:9b:ee:ce:ff:5b:fb:
                    c9:e7:64:9c:ba:e1:59:a2:3c:79:88:45:4f:d9:4f:
                    57:01:f3:fd:14:71:36:96:19:b7:2c:d4:93:83:09:
                    93:6c:ad:e7:f4:4b:b8:89:4c:e7:f9:7a:86:8c:67:
                    6a:f3:1f:26:85:e8:74:4a:39:aa:af:b9:18:fc:88:
                    44:4e:97:4e:64:d2:f8:9e:57:6f:2e:fc:4d:e9:de:
                    80:2a:b5:82:6f:18:3d:58:ce:15:04:ed:a2:a7:db:
                    ed:fb:bc:0e:3e:d7:3f:bf:aa:1a:66:73:74:2e:35:
                    65:dd:2d:b1:ae:a6:0c:af:e4:2a:46:61:77:11:91:
                    b4:b0:e8:4d:2e:e3:cd:71:15:2e:13:83:04:34:e8:
                    1a:b6:96:7c:58:e6:01:d0:2d:2e:11:82:22:8e:96:
                    d7:de:65:11:d7:e3:da:c1:dd:9f:f4:74:32:9c:66:
                    4f:66:48:bd:09:8f:5b:6c:e9:27:f9:ce:01:95:9f:
                    9e:ba:b8:1c:0b:7c:ea:d9:31:d3:0c:c4:88:1e:c9:
                    46:be:83:d9:ee:3f:d4:05:6d:2d:15:ba:c7:8e:48:
                    7e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C0:D2:86:99:91:45:67:3E:E3:BC:F5:31:3C:D8:74:F3:4A:43:10
            X509v3 Authority Key Identifier:
                keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e32342e302f32342d3234203d3e20313333313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.74.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:fd:fd:a8:b0:f2:01:7f:ba:c7:64:f8:4f:e3:db:2f:19:33:
         73:ed:f6:1d:0c:1e:74:90:d5:7d:b7:0f:a4:7a:f8:51:c0:d1:
         6e:13:71:6b:4a:ce:44:b0:f4:e7:dc:13:1d:fd:91:de:a4:b1:
         17:95:4b:d4:00:51:7c:86:b5:81:bf:ac:c4:cc:40:14:bb:09:
         aa:57:e2:4a:23:fc:7d:45:ca:ba:d3:43:e4:a2:f5:69:68:88:
         3f:dc:c2:c7:20:97:e7:c3:bf:36:aa:c5:f9:d3:48:8c:dd:f2:
         f1:b2:11:18:83:be:d6:5a:2a:c0:04:6e:92:1e:8f:91:11:05:
         6a:a7:92:73:fd:ef:51:19:d3:05:91:34:80:9f:49:82:e6:3a:
         5b:0f:00:8e:58:ce:3a:25:da:3a:a1:5b:98:4e:8c:70:a1:d4:
         bb:3f:10:52:f2:b8:1c:7b:54:d1:0a:d8:23:c2:d0:fe:9d:f7:
         93:a4:eb:49:eb:f6:51:54:33:d4:95:b8:bc:53:aa:f9:f5:5e:
         1e:5b:59:91:32:37:ce:6d:ed:8c:77:2a:bd:a6:29:ef:48:e2:
         31:f5:bf:fa:cb:6b:37:d8:61:31:2f:71:8b:37:1f:1c:5f:03:
         b7:a7:df:bc:a4:49:68:f9:12:bc:77:02:79:37:cc:23:61:d9:
         77:c4:78:c1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:26 2026 by rpki-client