Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e322e302f32342d3332203d3e20313331353339.roa
File:                     3131302e34322e322e302f32342d3332203d3e20313331353339.roa (raw, json)
Hash identifier:          eI2Au66LMbF0S4gztMAphliyfK7erZNtw8elWCywNUw=
Subject key identifier:   29:22:4A:E7:0C:0C:B4:AE:E3:D6:95:66:EF:9A:A7:65:5A:EB:55:BD
Certificate issuer:       /CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
Certificate serial:       31FD2B0B854A9F072A7A03C04AC202B1D72B4E5D
Authority key identifier: 0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e322e302f32342d3332203d3e20313331353339.roa
Signing time:             Tue 28 Jul 2026 06:38:58 +0000
ROA not before:           Tue 28 Jul 2026 06:33:58 +0000
ROA not after:            Tue 27 Jul 2027 06:38:58 +0000
asID:                     131539
IP address blocks:        110.42.2.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:44:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:fd:2b:0b:85:4a:9f:07:2a:7a:03:c0:4a:c2:02:b1:d7:2b:4e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
        Validity
            Not Before: Jul 28 06:33:58 2026 GMT
            Not After : Jul 27 06:38:58 2027 GMT
        Subject: CN=29224AE70C0CB4AEE3D69566EF9AA7655AEB55BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1b:5d:c2:48:aa:d1:19:e8:5f:4c:50:e1:fa:
                    f5:81:9d:8e:0f:d0:42:27:65:c8:6c:a6:d5:b2:65:
                    9f:4f:48:35:41:08:12:2b:d5:5d:4f:cb:69:88:5f:
                    5c:45:98:65:5b:58:e1:4a:fd:20:83:ac:49:a8:c1:
                    8c:7c:23:ab:ee:e4:a7:be:71:63:6d:2a:5a:67:55:
                    25:e0:11:a6:c6:2f:af:1d:63:dd:dd:ff:8b:2b:6d:
                    c9:2f:21:64:5d:a4:d1:31:08:16:53:27:6d:f9:4e:
                    97:6b:cf:2c:2c:d4:0c:c2:6a:1f:3a:7c:a3:c4:3f:
                    05:b8:a5:c1:8d:ce:5b:61:eb:98:6b:3f:e3:b2:02:
                    f0:ba:13:d5:ec:f4:65:45:5c:b8:41:b7:d1:48:64:
                    90:1c:6b:86:c1:88:c2:04:a8:40:c5:a7:39:ad:c1:
                    cf:81:75:82:d9:d8:84:ae:ce:6e:f3:31:31:3f:28:
                    d3:41:46:e6:9d:46:db:de:08:b3:cf:b6:ab:85:32:
                    0a:e6:e4:9c:09:3e:d9:3d:46:9d:77:1e:0c:c0:a4:
                    a5:1d:01:cc:57:2e:29:5e:b0:53:e7:20:b5:75:42:
                    f8:88:6f:0e:9e:ea:f0:63:24:e5:62:9d:34:ae:fc:
                    24:13:67:f4:9b:cc:47:e6:76:aa:55:54:85:ae:21:
                    8b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:22:4A:E7:0C:0C:B4:AE:E3:D6:95:66:EF:9A:A7:65:5A:EB:55:BD
            X509v3 Authority Key Identifier:
                keyid:0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e322e302f32342d3332203d3e20313331353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.42.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:c8:11:7d:bd:bf:08:ea:81:58:d5:c8:ea:5e:37:d4:80:54:
         c5:aa:d6:79:dc:be:41:7d:00:1d:bb:73:14:2d:60:27:ae:15:
         a0:80:f1:1e:c4:66:0d:81:5b:f0:93:08:4e:21:9f:c1:26:31:
         4c:98:dc:3f:55:a6:12:ac:81:dc:c1:76:32:03:c4:43:d2:eb:
         f9:76:50:00:e2:b3:79:71:97:5e:6f:92:e4:33:27:da:03:d9:
         e9:e1:d8:a0:81:dc:dc:00:67:a8:11:28:ee:f4:8b:93:ca:60:
         e6:d0:4d:de:82:ec:01:5e:f1:37:c2:f9:ea:c4:dd:ec:68:de:
         ff:49:7d:ab:72:44:2c:89:6e:7d:6d:7b:3d:01:af:1f:54:2d:
         55:fd:28:a5:44:19:31:93:37:f1:28:61:e0:cf:99:60:5f:f7:
         9d:db:07:51:6c:bd:d2:ff:09:e3:0c:e7:a4:ed:49:ab:c5:17:
         f2:dd:f8:b5:f3:d6:f8:61:15:05:18:37:3d:09:d2:a0:fd:12:
         f7:17:49:14:b9:42:9f:a0:b4:81:ed:10:db:aa:e2:a8:3f:8b:
         3b:83:88:68:a3:46:1b:dd:35:95:e6:53:b5:5c:18:d3:8d:2f:
         6c:41:41:b2:eb:d5:7d:c6:46:94:06:5c:37:dc:59:a4:8e:45:
         c6:83:77:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:40:01 2026 by rpki-client