Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132362e302f32342d3234203d3e2034383437.roa
File:                     3130332e37342e3132362e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          XoD6cgHqg3X0ov86da+/+QQsiJTPhvpHI3Ucm68Ts14=
Subject key identifier:   75:F0:A7:68:DF:F8:BB:39:C7:70:57:89:56:E6:39:AC:34:52:C8:0C
Certificate issuer:       /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial:       053B73DE72E8967E24BEBDBBBB78E8422A76D6BA
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132362e302f32342d3234203d3e2034383437.roa
Signing time:             Wed 01 Jul 2026 07:27:02 +0000
ROA not before:           Wed 01 Jul 2026 07:22:02 +0000
ROA not after:            Wed 30 Jun 2027 07:27:02 +0000
asID:                     4847
IP address blocks:        103.74.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 23:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:3b:73:de:72:e8:96:7e:24:be:bd:bb:bb:78:e8:42:2a:76:d6:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
        Validity
            Not Before: Jul  1 07:22:02 2026 GMT
            Not After : Jun 30 07:27:02 2027 GMT
        Subject: CN=75F0A768DFF8BB39C770578956E639AC3452C80C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b6:a2:89:43:cb:cb:bf:73:2c:f9:17:01:9f:
                    cc:48:92:a8:73:ed:d7:5b:93:7e:0d:60:3a:ba:80:
                    f3:f6:7a:af:3a:a8:02:41:90:93:7e:8c:6e:28:fe:
                    9a:b0:2a:96:26:5b:54:f1:67:05:15:aa:23:3b:8e:
                    ea:d1:38:ec:d3:6f:56:14:84:5f:53:09:93:a1:0d:
                    57:f0:5c:11:7d:00:b5:66:5c:00:91:8f:e1:e2:f7:
                    ac:fc:5c:b9:af:9b:0d:04:b7:04:4d:e4:a5:46:7f:
                    d3:3d:a1:c8:cc:72:8e:c0:fb:5a:9f:24:2d:a7:fc:
                    e5:9d:07:4b:8d:59:87:84:7a:5a:68:af:f8:33:58:
                    10:fa:5b:0a:02:31:fd:2c:90:fc:5a:d5:33:4b:c1:
                    14:2f:d4:d9:16:81:5e:59:d0:cd:ae:fc:c0:8b:5d:
                    ab:42:dd:95:1a:ad:04:da:14:6c:46:50:ca:b8:f8:
                    93:a8:7c:af:7e:9f:72:3d:f9:04:f2:f7:14:63:ff:
                    99:08:4b:26:f1:f0:3a:4e:64:f3:5d:36:98:31:bf:
                    3b:5c:ae:53:91:8c:57:e0:c3:54:9b:3d:d2:7e:8a:
                    cb:17:e8:8b:2a:61:88:f3:9f:88:39:58:b2:56:ce:
                    ec:ce:9f:a2:78:30:28:14:c6:6c:35:06:0a:31:95:
                    78:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F0:A7:68:DF:F8:BB:39:C7:70:57:89:56:E6:39:AC:34:52:C8:0C
            X509v3 Authority Key Identifier:
                keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132362e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:53:34:41:a4:12:e8:fd:5a:5d:21:06:9f:88:7b:be:14:1d:
         41:65:5c:c1:4b:8d:d8:a9:cf:e7:47:28:79:41:76:52:88:23:
         95:00:c8:5d:54:5d:33:be:b0:7e:91:e5:1b:b9:86:6b:65:05:
         a1:ec:f9:40:75:4f:c4:65:b0:26:c4:b6:cc:d7:34:24:e3:63:
         aa:6b:91:73:49:ad:a2:dc:bc:3a:45:4c:5b:4c:5c:7d:6d:dd:
         30:d6:4a:4f:ed:7f:fc:91:f6:71:0f:b4:bb:70:39:90:dc:3d:
         bd:c5:f6:76:ac:b9:48:49:9e:2b:11:61:66:3c:d6:41:6b:26:
         e0:ae:1e:5f:30:5f:a5:44:a1:47:b9:09:7f:93:8b:2f:e8:04:
         b7:8c:a5:67:2b:a6:1f:df:f2:0e:2c:04:a6:42:b9:fe:ca:14:
         be:dc:15:a7:97:6c:85:50:8b:79:2f:6a:38:a1:b2:ec:e8:ba:
         ce:97:a2:03:a7:df:f8:3d:91:1f:28:7e:3d:c3:28:7a:74:fc:
         ea:48:4e:30:f6:8a:51:0e:40:ea:50:a0:e1:e6:9b:b6:ac:08:
         e8:a4:aa:8c:f6:26:ce:50:3a:85:c4:1c:fe:03:81:d2:d1:0a:
         be:d8:79:35:33:62:ae:99:2b:62:2b:60:71:22:80:84:4b:d1:
         d5:dc:35:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:51:17 2026 by rpki-client