Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e32352e302f32342d3234203d3e20313333313138.roa
File:                     3130362e37342e32352e302f32342d3234203d3e20313333313138.roa (raw, json)
Hash identifier:          oG07JCNq1GzDOr0l8qMdsF8wIb252X1fEt3O78vxlH0=
Subject key identifier:   6F:2B:88:EE:4C:40:5D:13:8C:BC:F5:91:C3:31:71:F8:4D:0F:67:D6
Certificate issuer:       /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial:       05198F3BD61415CC4EABAA072F643304E26E3E86
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e32352e302f32342d3234203d3e20313333313138.roa
Signing time:             Fri 15 May 2026 09:20:05 +0000
ROA not before:           Fri 15 May 2026 09:15:05 +0000
ROA not after:            Fri 14 May 2027 09:20:05 +0000
asID:                     133118
IP address blocks:        106.74.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:19:8f:3b:d6:14:15:cc:4e:ab:aa:07:2f:64:33:04:e2:6e:3e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
        Validity
            Not Before: May 15 09:15:05 2026 GMT
            Not After : May 14 09:20:05 2027 GMT
        Subject: CN=6F2B88EE4C405D138CBCF591C33171F84D0F67D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c2:3f:a2:c2:68:18:9a:0c:96:ae:3f:60:85:
                    7a:7b:7e:c8:78:b5:c6:fb:d2:9a:95:dd:f9:e7:6f:
                    2b:fc:80:af:f7:1d:a6:0c:e8:2e:d5:2f:15:d8:14:
                    34:56:81:19:d8:e2:a7:92:ba:f7:de:70:6a:d2:a2:
                    ca:b6:7b:b5:67:87:b1:e1:5f:c6:5a:b6:d1:2c:04:
                    b4:c9:b8:7c:77:a1:80:2b:c4:22:67:38:4e:e3:52:
                    54:7f:cf:1e:ae:96:b9:a2:66:43:76:dc:35:33:c3:
                    9a:60:16:60:1e:f7:90:d1:a1:4c:32:99:81:8a:1f:
                    cb:ae:1f:c0:66:a9:7b:42:1e:e9:ff:53:f3:b0:61:
                    ad:7f:32:74:2d:3d:b9:11:73:82:6b:df:52:78:94:
                    1c:2c:6f:d1:7b:0f:74:1a:19:15:7d:6b:b3:14:c2:
                    3c:85:5a:42:06:43:bc:0a:bd:3f:b1:5b:31:c6:35:
                    79:70:8c:53:1d:b0:a3:f3:e5:d7:bb:8a:62:3b:7a:
                    b9:8b:0c:2f:b8:dc:61:74:1f:e0:a1:c2:96:ab:fe:
                    89:6a:86:65:33:cf:32:db:f4:79:77:62:38:21:db:
                    a1:72:f3:65:63:61:0f:67:fa:79:77:52:8b:a9:ae:
                    a8:61:8f:13:9f:2d:13:b4:ef:c9:8a:1f:86:a2:08:
                    1b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2B:88:EE:4C:40:5D:13:8C:BC:F5:91:C3:31:71:F8:4D:0F:67:D6
            X509v3 Authority Key Identifier:
                keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e32352e302f32342d3234203d3e20313333313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.74.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:b6:7b:15:86:7f:84:a7:43:91:da:51:3a:bf:20:2b:6c:9e:
         ef:cb:e9:80:00:2c:3e:d5:a9:93:bb:5b:4d:89:dc:e6:8d:e6:
         73:e3:b0:41:cb:5b:5d:07:dd:82:f7:dc:ce:94:c6:79:46:be:
         a7:3c:2e:92:72:21:8c:de:0c:78:ee:c1:1a:ea:39:26:e3:fa:
         49:d6:01:7c:b8:5f:43:ed:2c:ff:ce:88:57:f0:45:ae:aa:d2:
         07:67:f2:bf:37:26:a2:b2:0d:10:32:2a:8f:d7:e8:38:97:63:
         c2:10:7d:39:62:a5:3a:8b:45:2a:b9:12:42:e3:89:ef:df:d9:
         e9:b8:7c:bb:32:49:9f:ee:83:40:91:82:26:c5:a5:ae:7a:c4:
         1b:28:21:69:bb:d5:77:e2:b3:ad:27:21:46:f8:8b:68:01:69:
         62:5c:fb:73:72:c1:b5:10:69:e0:64:e6:3b:b7:63:d3:91:ac:
         d5:ca:bf:76:e9:1d:aa:ff:ef:83:7e:01:40:40:e4:73:85:9b:
         ed:74:47:35:bd:e2:bf:8b:91:25:9b:ae:76:1b:f1:9b:4a:8b:
         65:22:3a:20:3d:40:cb:06:5d:af:4d:4f:0f:46:cd:44:aa:cd:
         eb:bd:ca:ee:df:89:25:c4:56:9b:e3:87:33:60:09:40:cb:d9:
         50:8e:8e:6b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:56:34 2026 by rpki-client