Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3231302e37362e37342e302f32342d3234203d3e20313337373938.roa
File:                     3231302e37362e37342e302f32342d3234203d3e20313337373938.roa (raw, json)
Hash identifier:          uI0WzN6MGhTEe64M7KlsQjb0z16CzRoetiGyRwp+AQA=
Subject key identifier:   C2:4A:CF:64:5B:A4:3B:61:40:CC:C2:B7:AB:9B:54:8D:8B:C3:04:D3
Certificate issuer:       /CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
Certificate serial:       5E9A62FEABED0CF280EB67AD1E445C6DF412BFF3
Authority key identifier: 45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3231302e37362e37342e302f32342d3234203d3e20313337373938.roa
Signing time:             Thu 16 Apr 2026 08:44:48 +0000
ROA not before:           Thu 16 Apr 2026 08:39:48 +0000
ROA not after:            Thu 15 Apr 2027 08:44:48 +0000
asID:                     137798
IP address blocks:        210.76.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:9a:62:fe:ab:ed:0c:f2:80:eb:67:ad:1e:44:5c:6d:f4:12:bf:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
        Validity
            Not Before: Apr 16 08:39:48 2026 GMT
            Not After : Apr 15 08:44:48 2027 GMT
        Subject: CN=C24ACF645BA43B6140CCC2B7AB9B548D8BC304D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:38:da:85:6b:b5:d2:0c:36:43:34:90:4d:f0:
                    8e:10:27:89:15:0e:e0:c6:f3:6c:0d:8d:26:95:1c:
                    91:d3:90:c1:6f:a1:3c:3f:86:2a:80:62:3d:76:63:
                    ab:73:06:ce:9c:33:de:c6:8c:33:da:a0:5e:9f:43:
                    af:7f:a2:41:cb:16:cd:5c:0b:67:2e:03:8c:eb:c0:
                    73:95:9a:52:df:93:2c:fd:9c:78:c0:2e:08:c1:9a:
                    97:c4:42:dd:98:55:7e:6e:bf:84:e0:7b:c0:a0:84:
                    0c:3d:98:1c:1c:61:88:e4:24:01:6c:2d:42:26:bb:
                    0b:63:cf:d0:b6:ac:62:22:9d:9d:15:76:ef:c9:54:
                    01:b1:2f:98:6d:19:4f:63:6d:bd:de:da:41:9b:b9:
                    7a:5d:de:b3:c1:fa:c0:f4:ff:b6:89:b2:ae:c6:c5:
                    52:6d:4a:30:a3:fd:9b:81:52:03:9c:6d:2f:8f:5b:
                    a6:5e:7d:a2:4e:41:72:03:68:35:69:91:3b:de:4b:
                    3b:50:44:f3:2b:5a:d2:d6:f1:07:91:28:55:f5:c7:
                    ac:e5:3e:e0:96:5b:90:c3:b7:08:b3:76:64:d2:59:
                    98:30:4a:13:0d:3c:39:7c:fa:e3:d7:b7:48:12:ca:
                    6f:88:0d:98:92:6e:7e:1b:62:1f:9e:06:da:34:3f:
                    f6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4A:CF:64:5B:A4:3B:61:40:CC:C2:B7:AB:9B:54:8D:8B:C3:04:D3
            X509v3 Authority Key Identifier:
                keyid:45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3231302e37362e37342e302f32342d3234203d3e20313337373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.76.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:cb:8f:dc:f0:87:7b:64:77:84:43:5c:fc:3c:fc:4a:14:64:
         b2:6f:f2:dc:ba:29:59:39:9c:f9:f4:dd:aa:42:50:05:9b:bc:
         06:88:1a:44:1b:2a:aa:1c:8f:e6:37:3f:5e:de:14:97:4f:58:
         15:25:bc:fc:87:df:b9:0c:e1:27:d2:ab:1b:9a:5e:f1:90:10:
         4c:44:0f:64:34:74:20:0e:ea:47:c3:ec:d3:15:c2:20:7c:cb:
         92:c2:ca:4c:32:85:25:e6:e6:1c:78:86:11:7a:14:52:03:cd:
         8a:63:51:aa:3b:a1:d1:66:ce:8f:25:12:87:b9:22:0e:87:51:
         24:d1:24:bd:41:1b:98:0a:8a:2b:62:9c:12:72:02:9d:b5:4a:
         9c:84:2e:68:11:be:52:cc:44:98:9e:e4:a2:a4:96:ec:1d:59:
         e8:0d:f6:49:b7:ed:9a:12:41:fd:f0:40:d0:b3:df:ba:bf:04:
         1f:56:1c:a7:c6:98:62:76:08:e3:f4:89:9a:6f:b0:52:a4:f5:
         37:14:dc:8c:68:d7:a9:b4:fa:5e:9b:c7:e5:73:38:de:9f:90:
         73:94:d2:cd:5e:66:0c:4c:ff:73:f5:68:bc:9d:f1:e3:41:31:
         74:11:e1:c1:b2:ff:b2:e2:51:75:5f:b2:86:0f:87:72:e0:74:
         3e:b8:34:f7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:01:36 2026 by rpki-client