Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e31332e302f32342d3332203d3e20313331353339.roa
File:                     3131302e34322e31332e302f32342d3332203d3e20313331353339.roa (raw, json)
Hash identifier:          QDeAv7tbNK0dMQGA0BU37qfi2Z4gz8gzfujfTSjvoA0=
Subject key identifier:   0B:D1:B6:E2:7B:95:D2:27:5F:D6:44:DF:41:07:AD:04:F2:83:AE:E8
Certificate issuer:       /CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
Certificate serial:       30F87AADF7CC433DC753759486B1D3490EA36028
Authority key identifier: 0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e31332e302f32342d3332203d3e20313331353339.roa
Signing time:             Tue 28 Jul 2026 06:38:58 +0000
ROA not before:           Tue 28 Jul 2026 06:33:58 +0000
ROA not after:            Tue 27 Jul 2027 06:38:58 +0000
asID:                     131539
IP address blocks:        110.42.13.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:44:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f8:7a:ad:f7:cc:43:3d:c7:53:75:94:86:b1:d3:49:0e:a3:60:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
        Validity
            Not Before: Jul 28 06:33:58 2026 GMT
            Not After : Jul 27 06:38:58 2027 GMT
        Subject: CN=0BD1B6E27B95D2275FD644DF4107AD04F283AEE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ad:bf:bb:74:b7:fd:a6:b5:56:e5:a7:12:46:
                    f0:9e:83:0e:51:17:9f:b0:f3:da:8b:c7:8c:10:e4:
                    9c:20:d7:9a:63:5d:96:60:a1:01:e2:cc:18:97:dc:
                    9a:f4:ad:c9:9e:38:4b:0c:bc:72:22:df:90:bc:28:
                    6c:1c:65:bb:9b:ff:bc:dc:80:c0:d9:8c:f0:ad:63:
                    1e:4e:de:17:fa:bf:d0:95:7b:c7:5e:31:98:9e:f9:
                    7c:65:31:04:82:8e:ff:c2:d8:46:98:0e:61:83:54:
                    e9:1d:b9:27:94:54:5e:b6:d9:ed:8b:56:c3:40:11:
                    7f:a0:ad:47:57:69:bd:f1:8c:14:b6:fc:ac:3f:dc:
                    9e:fb:4b:fd:91:e1:54:55:bc:7e:44:07:79:86:25:
                    ed:0b:55:ae:73:f7:8d:e5:79:89:a8:f1:72:1c:33:
                    fa:9d:9a:f2:2c:a0:19:0d:e9:9a:71:a1:f2:79:46:
                    bc:cb:83:ca:f3:e4:1a:40:9d:82:8a:3d:2f:dc:8e:
                    65:1e:42:07:a9:28:47:e6:b9:00:d3:8d:88:5c:dc:
                    e9:ee:41:62:ff:b4:90:fb:bb:9b:b5:d1:87:76:6d:
                    3f:f1:d6:2d:2d:7b:c1:13:cf:b1:a9:0a:95:de:b1:
                    41:38:26:c8:c5:ac:e5:61:22:85:77:3d:bd:f1:a9:
                    53:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D1:B6:E2:7B:95:D2:27:5F:D6:44:DF:41:07:AD:04:F2:83:AE:E8
            X509v3 Authority Key Identifier:
                keyid:0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e31332e302f32342d3332203d3e20313331353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.42.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:2e:ab:88:3a:a1:36:c4:df:5f:29:34:bf:f8:d4:37:02:b4:
         cb:57:10:bb:67:6a:f9:7f:36:4e:95:05:cb:14:71:8a:e9:92:
         db:c9:78:86:9a:43:e6:8a:00:10:ac:93:dd:4e:71:2c:cc:85:
         6e:d6:3a:4a:fd:40:ba:eb:55:c9:08:7a:45:bb:5e:4b:07:ad:
         f5:dc:fe:08:99:37:9f:dc:fc:c3:a2:32:d0:4e:d6:72:42:42:
         30:97:a9:41:98:54:b1:3f:78:dd:17:2b:e2:c6:37:04:3b:31:
         5b:dc:04:1f:e2:1a:5d:95:a1:48:d8:87:fd:36:39:5f:74:03:
         51:b6:77:2d:b2:16:6c:e2:30:b1:73:52:e5:98:e8:0c:7a:a7:
         96:cd:66:5c:92:d2:d2:12:6f:3b:b0:02:45:51:d6:a4:d7:b1:
         5f:39:f0:b6:6f:21:f4:2a:71:3f:ad:0f:42:cc:60:7d:1b:4a:
         67:a6:f8:f3:f2:5a:a3:ce:c9:19:b8:8f:3e:d7:93:67:f5:70:
         cd:86:9d:e1:66:71:b3:5c:cf:78:b5:5d:ee:19:78:31:2a:01:
         5b:fa:8a:43:b2:9a:0b:a3:84:fa:8a:32:ec:00:3f:fb:b8:68:
         7d:11:e1:87:7c:62:97:9c:73:8c:89:67:fd:48:d5:5d:c2:55:
         89:5b:d6:ed
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:40:01 2026 by rpki-client