Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948337155/0/3131302e37352e3139322e302f31392d3234203d3e203337393633.roa
File:                     3131302e37352e3139322e302f31392d3234203d3e203337393633.roa (raw, json)
Hash identifier:          L9vKjxmTLgLvbIwQKj/ZG9VHpS0mWhg61joj+cGcGvs=
Subject key identifier:   76:0F:20:32:D2:B8:09:1E:09:1C:37:F3:50:34:62:FF:0B:99:89:54
Certificate issuer:       /CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F
Certificate serial:       622BEA5DD2385F42021B80429FC0B21D32671BB2
Authority key identifier: 05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/3131302e37352e3139322e302f31392d3234203d3e203337393633.roa
Signing time:             Thu 26 Feb 2026 02:55:11 +0000
ROA not before:           Thu 26 Feb 2026 02:50:11 +0000
ROA not after:            Thu 25 Feb 2027 02:55:11 +0000
asID:                     37963
IP address blocks:        110.75.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 00:39:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2b:ea:5d:d2:38:5f:42:02:1b:80:42:9f:c0:b2:1d:32:67:1b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F
        Validity
            Not Before: Feb 26 02:50:11 2026 GMT
            Not After : Feb 25 02:55:11 2027 GMT
        Subject: CN=760F2032D2B8091E091C37F3503462FF0B998954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2e:a5:9f:34:40:2b:88:2e:c9:73:20:23:88:
                    74:75:ce:86:db:c2:13:17:19:ed:10:3e:98:ae:a1:
                    bc:74:5c:5a:ab:03:22:f9:7a:4b:e6:46:62:16:8b:
                    05:a1:7c:60:85:f2:2e:85:82:8e:2e:47:d6:89:1f:
                    b0:9e:d8:f3:1d:31:ed:f0:a1:47:d0:06:6d:7c:95:
                    45:8e:da:96:d9:d1:3a:30:08:f0:4e:f4:74:8b:3b:
                    9e:35:a4:e6:67:79:33:ec:32:08:85:8b:dc:6f:23:
                    72:d7:c9:a2:b9:c9:94:d6:5f:1a:6b:57:6d:1b:17:
                    f2:dd:4e:b6:3b:00:09:b4:83:b6:cc:1c:17:03:ea:
                    8f:41:f7:52:60:d0:29:5a:4e:c3:e3:3e:36:5a:3f:
                    ac:92:74:de:10:aa:8b:87:93:e7:86:0c:3e:4e:15:
                    b5:7f:00:d7:66:ab:12:15:61:b8:c1:28:54:a4:48:
                    b2:98:e3:d1:4f:57:40:2b:a1:86:1b:07:b4:ba:a6:
                    10:ed:4f:74:9a:83:cb:cd:ee:bf:1e:e4:ec:fa:8c:
                    e4:30:9e:77:15:5f:e4:01:d0:66:39:3b:22:b0:06:
                    ef:88:11:89:23:1f:4d:a8:16:57:df:cf:b6:48:1c:
                    64:b9:73:28:35:a9:44:24:d0:b4:41:07:d9:2c:05:
                    09:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0F:20:32:D2:B8:09:1E:09:1C:37:F3:50:34:62:FF:0B:99:89:54
            X509v3 Authority Key Identifier:
                keyid:05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/3131302e37352e3139322e302f31392d3234203d3e203337393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.75.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1d:54:0a:19:3c:a1:ff:d0:8d:cd:ad:72:9a:4b:66:7f:d8:2f:
         0f:4d:07:65:ff:56:40:da:a9:31:80:b5:12:af:0b:d6:4d:7f:
         e5:32:fe:b0:e9:c0:68:0f:ba:36:bd:28:70:b4:e1:46:32:ec:
         4f:d1:07:0a:ad:2f:35:54:e1:cf:3b:02:5d:84:27:6b:d0:95:
         7b:e5:f9:45:05:5a:c5:d8:75:85:ed:da:b5:58:bd:62:b3:ba:
         4f:95:6a:31:4c:91:f1:47:3c:6e:d1:8e:8a:9a:a0:d9:fc:a8:
         9c:62:1b:a8:db:6b:44:b2:c0:f8:94:f8:60:c7:68:05:37:30:
         8e:f0:48:bf:45:5d:01:ac:88:0b:2c:c1:71:90:39:5d:0e:58:
         fb:38:0c:db:d3:e4:33:0f:37:e9:3d:12:46:d5:22:3a:34:53:
         75:ce:85:96:0d:03:b2:85:e7:cf:cd:8f:f1:ac:31:5e:20:29:
         ab:b1:57:3e:31:29:1d:65:d6:ee:f4:98:4c:66:8b:d6:2a:9a:
         44:be:db:ce:f0:32:cd:73:24:1b:6d:07:cd:f5:bc:39:eb:e2:
         06:5c:5d:27:da:b4:ea:b4:7c:b5:f8:8e:70:92:73:18:c0:83:
         70:3f:12:b8:a7:46:82:0d:a5:d5:49:9a:60:c9:92:33:88:bd:
         cb:78:7f:c3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:14:54 2026 by rpki-client