Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e33322e302f32342d3234203d3e20313333313138.roa
File:                     3130362e37342e33322e302f32342d3234203d3e20313333313138.roa (raw, json)
Hash identifier:          YtCOc4+jzqEVpODeLiy4+aoUvfK1voT0f7BH02ALLP8=
Subject key identifier:   A8:EA:C1:1B:F1:E8:20:3C:58:31:C5:05:B9:3C:E9:28:3F:C2:16:45
Certificate issuer:       /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial:       0D6D5E37A8B770AD948F8DC0DFA83B70FEF59EC6
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e33322e302f32342d3234203d3e20313333313138.roa
Signing time:             Fri 15 May 2026 09:20:46 +0000
ROA not before:           Fri 15 May 2026 09:15:46 +0000
ROA not after:            Fri 14 May 2027 09:20:46 +0000
asID:                     133118
IP address blocks:        106.74.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:6d:5e:37:a8:b7:70:ad:94:8f:8d:c0:df:a8:3b:70:fe:f5:9e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
        Validity
            Not Before: May 15 09:15:46 2026 GMT
            Not After : May 14 09:20:46 2027 GMT
        Subject: CN=A8EAC11BF1E8203C5831C505B93CE9283FC21645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:32:36:b4:45:9b:92:d5:c1:0c:f4:74:bd:4c:
                    d9:d9:f8:e1:58:f1:db:0e:fb:52:22:9d:ad:39:0e:
                    18:f4:3c:cc:88:10:54:18:cd:77:70:d6:81:b2:41:
                    ed:30:0b:bd:16:e2:54:a6:b3:53:09:83:9b:a4:01:
                    db:24:6b:00:18:0b:31:c4:a6:78:c7:77:47:ab:ba:
                    15:1f:39:1a:e4:34:80:b1:4f:53:fd:18:ff:16:b3:
                    04:e4:69:ce:62:8e:80:41:2c:24:10:66:7c:53:15:
                    98:1d:7b:36:e3:da:e8:a2:f7:5d:5c:93:40:9e:b1:
                    c4:ef:3d:61:07:ff:7e:37:fe:be:7e:e9:09:3f:a2:
                    6e:7e:a0:b9:a3:ee:59:85:44:ae:25:1e:68:1a:3c:
                    40:ea:4f:6c:03:47:e0:1a:14:44:7b:ad:8a:d9:7f:
                    ac:f7:e6:d6:7b:3b:6e:cb:8c:47:ac:97:a3:00:80:
                    3f:e5:a5:5b:8b:28:9a:d8:bb:a0:16:87:c6:b4:49:
                    c8:2f:cf:8d:b7:53:6e:4c:f8:6a:ba:ba:9e:28:b6:
                    29:c3:d8:ad:5d:67:ea:58:9f:69:59:4b:54:f4:4c:
                    08:55:6a:0e:88:bb:c8:c4:72:5e:29:1f:a1:52:90:
                    02:77:d4:02:85:ee:87:94:d6:aa:23:f1:80:86:27:
                    64:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EA:C1:1B:F1:E8:20:3C:58:31:C5:05:B9:3C:E9:28:3F:C2:16:45
            X509v3 Authority Key Identifier:
                keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e33322e302f32342d3234203d3e20313333313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.74.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:64:b3:3f:cd:f4:1a:5a:4e:1f:a9:58:22:3f:88:b7:c6:44:
         74:dc:81:4d:43:71:18:a8:1a:8a:5d:da:19:4e:6e:e4:70:45:
         03:56:db:4f:69:ff:68:35:2a:85:8b:e9:20:c1:c6:39:de:6f:
         4b:94:f8:7d:7d:f1:bd:0b:09:eb:75:ad:f5:53:06:28:ef:e7:
         39:32:36:b4:e5:f7:9d:5a:f9:78:3d:a1:8d:67:14:45:27:d3:
         c2:70:bf:39:16:a2:ca:71:49:6b:7f:14:82:4c:59:10:6f:48:
         5b:f7:a9:a4:fb:97:43:ec:85:9e:50:71:30:03:1f:76:9a:17:
         8a:e3:b9:bc:22:f1:88:5c:ec:a6:85:9e:52:07:b8:dd:b3:8f:
         e8:49:15:3e:8d:8b:41:c3:b4:20:e7:8a:23:6d:e1:ce:53:0a:
         19:d3:db:52:e2:44:a2:14:09:92:55:0f:7f:ef:03:d7:97:7a:
         ff:dc:cb:28:14:23:eb:b6:72:0d:c0:70:6c:90:03:bc:52:05:
         88:50:e7:0e:3c:4b:2e:2c:6a:2f:33:a6:53:2f:ba:e4:9c:35:
         4d:02:1c:08:1c:6d:e3:55:06:f9:e5:f2:4c:80:8f:48:8b:2d:
         a9:5b:ae:2b:a2:72:77:57:42:7f:2a:b6:52:7f:9b:33:bc:f7:
         09:5a:23:98
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:54:48 2026 by rpki-client