Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106516114969460755/0/3131372e37342e36382e302f32322d3232203d3e203435303937.roa
File:                     3131372e37342e36382e302f32322d3232203d3e203435303937.roa (raw, json)
Hash identifier:          EnRpv3YOLwd2iarS7W5bMMrMvnUxbsEcDpCI1puQX/A=
Subject key identifier:   0C:4E:F8:6C:BD:E7:C5:A0:2F:00:5C:78:67:EE:88:EA:E0:1E:9A:63
Certificate issuer:       /CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9
Certificate serial:       6CFCB3A1BB2EF8698035F188E2A83B182A144D45
Authority key identifier: C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/3131372e37342e36382e302f32322d3232203d3e203435303937.roa
Signing time:             Tue 12 May 2026 09:43:20 +0000
ROA not before:           Tue 12 May 2026 09:38:20 +0000
ROA not after:            Tue 11 May 2027 09:43:20 +0000
asID:                     45097
IP address blocks:        117.74.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:fc:b3:a1:bb:2e:f8:69:80:35:f1:88:e2:a8:3b:18:2a:14:4d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9
        Validity
            Not Before: May 12 09:38:20 2026 GMT
            Not After : May 11 09:43:20 2027 GMT
        Subject: CN=0C4EF86CBDE7C5A02F005C7867EE88EAE01E9A63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c8:08:1d:02:db:de:74:77:ee:8a:5d:99:78:
                    37:13:ed:f9:1b:8a:85:26:fe:8d:a0:b2:33:0b:a3:
                    d5:86:7c:89:dd:1a:db:bf:bd:78:3e:51:12:71:7d:
                    47:8e:92:95:01:a8:30:5e:81:da:c0:37:15:c3:21:
                    20:ff:0e:04:cd:40:b3:e4:38:04:16:26:68:a8:73:
                    93:26:13:2c:77:9c:48:f9:90:d5:4f:db:a0:41:fe:
                    71:6f:db:ae:76:37:8b:b2:a3:55:92:9e:95:01:70:
                    8e:62:4b:2c:bc:08:2f:4a:7b:0d:cf:26:54:0f:f9:
                    30:ad:1d:76:d9:96:e9:60:81:be:b0:2e:d3:9c:bf:
                    48:58:ff:b4:6c:e4:c7:77:28:b5:bc:2b:03:7d:f8:
                    61:dc:ef:86:9e:0d:d2:e1:9c:28:1c:b1:7a:60:93:
                    57:66:24:9e:8a:80:62:09:6c:67:f0:0f:cc:17:c5:
                    15:e9:50:f6:93:b0:a2:1d:1f:74:1b:da:03:82:ab:
                    34:41:62:f4:cb:c7:69:79:6f:5d:db:08:9f:c8:65:
                    50:8f:c4:54:eb:c3:9c:39:8b:b6:5a:eb:98:ae:cb:
                    06:e8:f2:92:27:d5:4e:51:b4:7b:50:f9:c9:5d:aa:
                    0f:b8:5c:db:9e:0a:13:a4:03:20:4b:ba:09:47:37:
                    e0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4E:F8:6C:BD:E7:C5:A0:2F:00:5C:78:67:EE:88:EA:E0:1E:9A:63
            X509v3 Authority Key Identifier:
                keyid:C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/3131372e37342e36382e302f32322d3232203d3e203435303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:ca:19:01:e8:a5:a0:c9:8b:6a:fd:c6:3f:b3:8e:23:07:e4:
         1c:4e:2e:e5:ed:55:82:6a:d2:79:db:d4:ee:4e:9c:4c:ba:0f:
         6b:9c:36:cc:1e:29:3c:22:62:b1:7c:ec:f1:fb:35:e3:1a:c6:
         d5:d3:cd:71:b2:57:d7:8f:c9:84:56:a1:24:d1:18:fb:4b:a3:
         6f:1e:f0:2e:e1:e1:73:6f:5d:ac:1f:8f:af:93:17:17:2f:28:
         d2:1b:6e:b3:94:7b:5f:93:50:03:74:71:58:ee:01:2a:83:0e:
         2d:3b:db:f7:2e:41:01:b8:e7:d4:43:fb:cd:27:f6:79:79:8f:
         9d:60:e8:1e:8d:66:85:20:e9:52:1d:5a:32:e6:b5:bc:08:22:
         b1:0a:48:90:c8:d6:72:ca:84:02:ee:c1:ad:ba:b1:56:14:d9:
         d4:bb:dd:80:2f:57:23:15:07:a0:f9:ed:d0:32:53:f8:8b:7f:
         14:79:d3:f6:b6:86:61:08:71:b0:b9:5d:86:e3:69:38:df:18:
         98:e1:6d:9f:c8:89:0f:b9:fd:e7:85:ff:de:95:2d:f1:2b:f9:
         43:dc:93:13:12:89:df:13:1e:3e:4b:5e:41:0c:6b:25:c2:bf:
         1c:a4:67:28:bf:7c:cb:3d:a6:06:94:42:c8:6c:c7:94:b9:da:
         3e:eb:1c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:00:54 2026 by rpki-client