Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e38302e302f32342d3234203d3e2034383038.roa
File:                     3130362e37342e38302e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          PGZKmyLMFh46ckD7vm6qru8Bd2rVgULIPr3OMwX+QnY=
Subject key identifier:   71:42:6B:3F:F7:CD:E2:66:F4:86:6C:B4:26:E6:AE:C4:25:80:16:50
Certificate issuer:       /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial:       5CD6B71EF20BEDB2C52723F62AE0D55AEEA0CB58
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e38302e302f32342d3234203d3e2034383038.roa
Signing time:             Fri 15 May 2026 08:58:19 +0000
ROA not before:           Fri 15 May 2026 08:53:19 +0000
ROA not after:            Fri 14 May 2027 08:58:19 +0000
asID:                     4808
IP address blocks:        106.74.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d6:b7:1e:f2:0b:ed:b2:c5:27:23:f6:2a:e0:d5:5a:ee:a0:cb:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
        Validity
            Not Before: May 15 08:53:19 2026 GMT
            Not After : May 14 08:58:19 2027 GMT
        Subject: CN=71426B3FF7CDE266F4866CB426E6AEC425801650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5e:21:42:57:ce:6c:63:05:a6:25:42:9d:16:
                    46:df:42:a0:92:76:83:35:45:9d:bf:6b:65:29:6a:
                    85:96:a3:ce:68:a6:52:6c:75:bb:84:d9:a0:0c:75:
                    84:e1:6f:2d:b4:1b:cc:b1:af:e8:e7:5a:a7:30:2f:
                    6c:c6:9e:4a:ed:22:6f:91:11:09:6f:e8:1e:8b:8d:
                    d9:7a:07:f3:3f:b0:75:96:81:4b:ca:de:55:00:0c:
                    38:fe:d0:78:2c:9b:6d:f4:30:b6:83:1a:57:50:75:
                    3f:62:e0:00:b5:7c:04:43:4c:bb:c7:97:85:df:38:
                    07:2f:e2:b6:55:04:81:1a:4c:5b:1b:5b:97:78:53:
                    d8:22:1a:fc:93:c9:2b:fd:b7:e2:e8:05:31:d4:2d:
                    aa:f9:73:d9:75:3a:1f:29:18:0c:8c:07:65:89:d0:
                    a4:bf:6d:e9:2a:61:e7:ac:82:2d:cb:fe:e7:ee:bf:
                    6d:e6:f3:13:df:d4:de:2c:a5:64:74:e8:de:d4:7e:
                    01:78:34:36:e0:82:18:a2:aa:1d:17:f5:da:97:ae:
                    1c:61:8d:35:a5:19:d5:f2:21:4b:b6:d8:93:fb:2f:
                    20:bd:11:2a:73:54:99:65:7b:ad:42:b0:19:7a:86:
                    04:6e:77:35:86:1c:cb:20:c1:75:5d:c6:37:25:b6:
                    66:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:42:6B:3F:F7:CD:E2:66:F4:86:6C:B4:26:E6:AE:C4:25:80:16:50
            X509v3 Authority Key Identifier:
                keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e38302e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.74.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:83:b4:07:23:32:f5:40:8a:53:f0:3b:59:5d:a1:cb:ed:24:
         5a:a0:c0:eb:ba:41:56:ab:25:a0:75:16:72:17:59:f8:ae:95:
         33:63:fc:87:cc:fd:dc:17:f1:b7:22:7a:2e:f6:bf:06:b0:14:
         10:77:cc:dd:19:77:32:a9:9f:8b:dc:4d:fc:35:af:57:39:8f:
         5a:80:00:71:5d:77:2c:01:d2:37:2c:58:22:55:ef:03:14:28:
         70:91:ce:af:20:3c:08:8d:91:b1:7a:15:ad:ec:bc:50:da:1f:
         7d:21:c8:40:ce:9e:74:4a:91:30:ce:f6:d3:31:95:c1:fe:59:
         7a:36:a8:a2:4d:3b:68:b8:3b:f9:a3:cc:7e:b1:f9:64:a3:f0:
         83:71:02:82:52:0d:cd:fd:6c:42:57:f9:ad:5e:5d:31:e1:a9:
         82:a3:5c:7a:82:20:8c:3f:3f:d6:5b:4f:ae:23:79:c3:ec:ad:
         e8:5d:ba:4a:09:ad:f0:78:51:bb:1c:bc:df:2f:54:2f:10:50:
         c0:77:1d:b5:04:b5:71:db:97:3e:3a:9c:76:2f:29:0d:1a:99:
         a7:8f:6d:e1:c0:6d:65:76:e3:bb:d3:05:b8:6c:4f:2f:fc:56:
         34:5a:ca:00:c0:95:f4:f5:77:c2:57:53:23:b6:3f:44:e7:8d:
         ab:0f:7b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:28 2026 by rpki-client