Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e32362e302f32342d3234203d3e20313333313138.roa
File:                     3130362e37342e32362e302f32342d3234203d3e20313333313138.roa (raw, json)
Hash identifier:          wZndSNYKmlygRnh1HF2SnHbUW0K8fW+BDsbmeOFeDjU=
Subject key identifier:   EF:9A:7C:40:D4:49:0D:77:E5:B8:C7:8D:BC:27:E7:4F:96:E4:1F:EF
Certificate issuer:       /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial:       57476BEAFBEC9DA93D77073C321D30864C68A742
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e32362e302f32342d3234203d3e20313333313138.roa
Signing time:             Fri 15 May 2026 09:20:17 +0000
ROA not before:           Fri 15 May 2026 09:15:17 +0000
ROA not after:            Fri 14 May 2027 09:20:17 +0000
asID:                     133118
IP address blocks:        106.74.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:47:6b:ea:fb:ec:9d:a9:3d:77:07:3c:32:1d:30:86:4c:68:a7:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
        Validity
            Not Before: May 15 09:15:17 2026 GMT
            Not After : May 14 09:20:17 2027 GMT
        Subject: CN=EF9A7C40D4490D77E5B8C78DBC27E74F96E41FEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2c:7a:c1:5d:85:36:30:fc:3b:02:f8:63:7b:
                    78:55:af:73:1d:71:65:51:e6:fa:4d:df:04:6d:b9:
                    35:e5:91:11:06:9a:42:4d:6c:93:2e:72:ec:50:30:
                    64:6f:7c:c6:87:d9:86:8e:2d:ad:f0:74:1f:32:ec:
                    08:55:cc:87:95:05:02:4c:cf:33:7f:83:af:9a:12:
                    98:38:2c:f3:d6:8f:0c:66:5e:c1:be:53:15:76:9a:
                    bd:0f:92:e4:92:11:ca:bd:de:be:48:94:7b:78:15:
                    d3:c5:fe:96:42:4d:f1:1f:60:25:6c:80:2f:a6:44:
                    32:91:1b:f3:11:ff:73:e6:ee:27:fb:5f:ab:af:74:
                    80:11:3e:4a:53:2f:5b:ac:f1:f2:0e:e6:bd:10:1b:
                    7b:0c:8c:3a:c2:af:9b:65:86:0f:be:92:be:f0:73:
                    2a:2f:86:6f:dd:7c:61:eb:4a:2d:9b:1a:e6:40:45:
                    34:6e:8c:db:2e:20:95:ce:6a:8d:33:93:54:ff:75:
                    20:ff:7d:05:7a:d8:b9:89:82:b2:cb:49:ad:b7:d2:
                    c8:be:ce:77:53:71:b2:24:9f:d1:95:2d:f5:85:60:
                    53:f5:69:4b:ba:c8:b2:90:ae:d2:37:af:ca:f4:35:
                    b7:ed:78:b1:90:d0:ed:ab:af:ee:c7:51:19:ad:67:
                    70:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9A:7C:40:D4:49:0D:77:E5:B8:C7:8D:BC:27:E7:4F:96:E4:1F:EF
            X509v3 Authority Key Identifier:
                keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e32362e302f32342d3234203d3e20313333313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.74.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:83:1d:d8:5d:10:47:d8:c1:92:ff:a4:09:bf:53:0f:24:cd:
         ca:54:cd:ba:1a:68:8f:79:10:47:ae:a2:04:d3:a4:da:47:6b:
         e7:31:03:de:e6:44:6e:b9:ae:b4:70:d8:ea:53:90:fa:56:dd:
         8b:3b:98:d5:9c:5a:4c:74:26:ea:a7:18:87:92:ac:e3:b3:53:
         37:81:07:4a:bf:b3:4e:85:fb:ea:e5:75:60:5f:4e:bd:1b:c4:
         16:e9:24:e9:9f:1a:b5:fa:59:a4:02:69:41:2a:f9:40:a6:07:
         76:a6:6b:6d:eb:32:18:a2:a7:5d:c6:3c:ea:cb:8d:ac:94:c5:
         62:df:21:25:7b:72:1e:dc:01:e2:aa:cc:7b:c8:8c:a6:63:36:
         4a:59:3d:bf:e1:b2:4b:29:e6:bf:a8:a1:44:48:fd:2e:4d:06:
         96:5f:53:ab:90:4a:c8:6c:de:21:f3:d9:a5:e4:db:c0:08:e6:
         d2:97:57:6a:98:09:c9:6c:24:f3:41:73:8e:b6:36:43:95:45:
         7b:87:d2:e1:76:d4:be:6a:41:02:ed:10:af:3b:f5:57:e7:41:
         3e:9a:31:fc:ed:cc:ec:b8:01:c9:c9:61:8f:a7:f8:0c:e1:86:
         b6:d8:a6:97:0d:2f:60:6c:79:4f:2b:20:fc:b4:f8:a2:5b:54:
         a9:9c:fe:ce
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:31 2026 by rpki-client