Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e39372e302f32342d3234203d3e2034383038.roa
File:                     3130362e37342e39372e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          PoN70IPXBx0MbhAAFtV5fTd/xhqtUiCQPrAcMvleFNU=
Subject key identifier:   68:E5:61:E7:20:F7:A5:E1:C9:F1:97:62:8E:35:98:9C:C6:E7:9A:EC
Certificate issuer:       /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial:       0632E18EA62FB9F08733A5F41F155419DA628726
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e39372e302f32342d3234203d3e2034383038.roa
Signing time:             Fri 15 May 2026 08:58:56 +0000
ROA not before:           Fri 15 May 2026 08:53:56 +0000
ROA not after:            Fri 14 May 2027 08:58:56 +0000
asID:                     4808
IP address blocks:        106.74.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:32:e1:8e:a6:2f:b9:f0:87:33:a5:f4:1f:15:54:19:da:62:87:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
        Validity
            Not Before: May 15 08:53:56 2026 GMT
            Not After : May 14 08:58:56 2027 GMT
        Subject: CN=68E561E720F7A5E1C9F197628E35989CC6E79AEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e5:8e:5f:c9:05:5a:e1:e5:4f:7f:f3:24:7a:
                    ac:ee:0b:43:50:b3:2f:4a:87:48:10:c3:83:d4:44:
                    9b:ee:d9:a9:a8:0a:e7:56:92:78:a4:e5:e7:9e:8d:
                    67:65:20:f4:79:d2:1e:f2:39:3a:af:5b:6d:68:fe:
                    1b:4d:6d:4e:0a:4e:a6:82:c3:fb:b1:83:1a:aa:91:
                    97:87:e7:19:3c:04:30:09:31:c4:32:67:ed:d9:5a:
                    66:52:3c:67:ec:f0:8f:55:54:b5:09:09:fb:c3:1e:
                    b1:4d:32:b9:70:48:6f:46:73:b3:42:8c:7f:06:4f:
                    a2:50:7d:bc:75:31:6d:0c:f7:81:e4:54:43:1e:f6:
                    b0:41:9f:32:3d:f7:39:88:94:97:34:fc:7c:1d:56:
                    65:a6:01:6a:ba:8b:33:6f:c2:e0:0f:0c:8d:da:00:
                    a9:82:56:4a:84:81:e7:66:86:ab:b5:80:cb:e9:f1:
                    e1:ef:ec:a0:bb:18:45:83:86:ba:46:af:d1:65:8e:
                    d0:cd:43:3c:3e:38:bd:eb:21:56:f7:74:5a:94:42:
                    c7:fc:ed:91:7a:83:ea:6e:7a:2a:19:cd:70:d4:bc:
                    8b:b8:7e:94:2d:c2:d6:b7:ce:6b:64:fc:4b:90:f3:
                    65:ff:1e:af:22:42:5d:1f:9a:26:65:80:bc:64:63:
                    29:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E5:61:E7:20:F7:A5:E1:C9:F1:97:62:8E:35:98:9C:C6:E7:9A:EC
            X509v3 Authority Key Identifier:
                keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e39372e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.74.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:f1:de:33:bb:e7:08:ec:e3:61:c9:62:2c:2d:61:2b:10:ad:
         2a:62:9f:57:16:ea:16:05:d8:cf:64:f9:20:52:e5:e8:c0:65:
         52:b3:0e:1b:dc:01:b6:21:20:4a:20:4e:cd:86:bb:64:ef:0d:
         34:77:06:4a:50:fa:51:31:92:2e:a6:2b:14:4c:b5:83:84:cf:
         5e:e1:8e:ae:e8:0f:f5:70:58:c2:72:4b:26:fb:86:78:6d:07:
         9a:f3:7c:52:31:ff:3d:58:a7:77:7e:3d:e9:ea:3a:47:70:26:
         8b:2c:e7:77:c3:6c:08:68:23:26:e7:51:14:58:aa:98:d6:d8:
         f5:b1:54:cf:68:3e:49:91:83:76:b5:f8:c4:0c:37:c9:04:d0:
         d9:6f:b5:e3:1f:ab:af:ec:39:46:b0:b0:57:5b:7f:62:c7:94:
         cc:65:20:2f:a3:c4:f7:c1:e3:68:6b:7e:62:ff:3b:e5:40:50:
         de:18:6c:23:63:8c:fd:f4:7a:10:5d:be:b5:cb:89:a6:b7:33:
         06:c5:87:96:48:14:89:81:31:dd:1c:4f:8a:5e:16:10:d8:55:
         86:b2:46:50:b0:d9:04:32:6f:fd:b5:5a:60:31:80:a9:a9:87:
         73:da:a3:d1:56:43:83:4b:e5:58:6a:a9:9c:59:67:e5:e6:2a:
         d5:51:b4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:26 2026 by rpki-client