Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265682433/0/3130332e37342e38322e302f32342d3234203d3e20313531323935.roa
File:                     3130332e37342e38322e302f32342d3234203d3e20313531323935.roa (raw, json)
Hash identifier:          5mr3pAfi6VYXP3QTlvsdwggy2bmbBTx6ynIJhBTco2U=
Subject key identifier:   95:5F:26:00:9B:85:61:ED:60:06:DB:98:7F:6E:85:8C:5F:E1:EA:8E
Certificate issuer:       /CN=EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5
Certificate serial:       6871FBB142073272626F785F194F3A0AAAE34563
Authority key identifier: EF:71:80:BB:CF:EE:6A:47:CF:C4:29:C1:F6:1B:F4:C2:69:F8:19:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/3130332e37342e38322e302f32342d3234203d3e20313531323935.roa
Signing time:             Fri 17 Apr 2026 08:09:09 +0000
ROA not before:           Fri 17 Apr 2026 08:04:09 +0000
ROA not after:            Fri 16 Apr 2027 08:09:09 +0000
asID:                     151295
IP address blocks:        103.74.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 09:58:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:71:fb:b1:42:07:32:72:62:6f:78:5f:19:4f:3a:0a:aa:e3:45:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5
        Validity
            Not Before: Apr 17 08:04:09 2026 GMT
            Not After : Apr 16 08:09:09 2027 GMT
        Subject: CN=955F26009B8561ED6006DB987F6E858C5FE1EA8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:48:34:d9:9a:c1:5b:68:c0:d3:74:d5:4f:28:
                    c4:a4:f9:77:e3:da:9c:53:a6:36:b5:a4:1a:5d:97:
                    c4:69:bd:89:d2:03:4b:71:bb:b0:b7:07:29:cd:d5:
                    1d:9d:ca:af:6d:31:bd:6a:5e:28:df:df:58:42:8f:
                    60:ff:a5:69:65:82:8a:3c:15:91:16:57:c5:c7:b3:
                    94:00:32:5d:59:95:ac:ad:e8:45:40:09:fc:a7:3a:
                    22:a3:8c:f5:55:2a:2f:97:41:cb:9e:e1:3c:db:da:
                    67:5c:be:df:79:49:b2:03:fd:d0:eb:bb:35:2d:c1:
                    f8:30:c1:d5:97:0f:a0:b7:08:e9:bf:5f:e6:75:a5:
                    74:e9:91:df:93:69:a3:8a:9e:ce:56:a4:20:91:79:
                    c8:a2:a7:6c:64:82:9d:19:72:4c:b2:44:6c:75:6e:
                    c6:09:26:87:fe:51:6a:81:6a:e7:90:2c:60:be:1c:
                    6e:2a:bf:06:f2:aa:bc:fb:90:02:32:69:7b:15:14:
                    65:d6:5a:09:60:60:16:4f:3a:80:dd:8e:3d:78:c6:
                    e6:a7:bd:1a:0f:3a:5f:29:25:82:07:f9:18:51:c3:
                    d6:a7:36:6a:55:e9:7c:a9:1f:bb:db:2f:a5:79:2c:
                    4b:91:b3:df:9d:47:92:83:8c:da:5e:d4:48:1c:44:
                    0a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5F:26:00:9B:85:61:ED:60:06:DB:98:7F:6E:85:8C:5F:E1:EA:8E
            X509v3 Authority Key Identifier:
                keyid:EF:71:80:BB:CF:EE:6A:47:CF:C4:29:C1:F6:1B:F4:C2:69:F8:19:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/3130332e37342e38322e302f32342d3234203d3e20313531323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:a0:79:8a:15:8b:e7:06:02:c3:36:c3:77:b1:1c:f3:30:db:
         79:01:16:dc:93:4d:90:23:23:e4:b6:5c:ee:06:b9:a7:11:95:
         26:d3:57:f6:a6:44:09:56:65:06:bf:39:9d:53:0c:95:8c:48:
         c1:3a:f5:58:6e:20:99:6c:71:b1:4b:ab:85:fb:30:3f:2f:e7:
         b9:ea:9c:03:c3:81:fa:eb:19:7b:da:1f:6e:63:7f:71:fd:93:
         80:8b:f5:c0:26:ed:ad:70:dc:9d:2f:d7:6d:7a:22:27:0c:2f:
         c6:04:62:48:a8:ac:87:60:ca:1a:ae:25:46:de:c7:49:06:e5:
         be:6e:42:3b:f0:30:ca:79:62:0d:48:30:1b:5e:39:cc:2d:6b:
         cc:95:90:c8:8a:aa:94:99:60:c6:fb:a3:c8:f4:61:25:c0:58:
         0a:75:55:91:c1:fb:13:a8:e8:75:41:27:6d:66:b7:93:9d:d9:
         d3:7a:72:b6:1f:36:06:c2:7e:48:79:26:0a:27:d9:17:d2:13:
         c9:14:01:e8:55:e2:8a:d4:0c:89:cb:75:cf:5c:29:c9:5a:b2:
         7d:71:a6:2f:4c:0f:27:89:1e:23:f3:e7:49:f4:b4:4c:fd:3f:
         f8:ca:84:82:7f:ef:c7:73:71:81:89:c9:55:6d:6e:ae:a3:77:
         99:c5:c4:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:25:54 2026 by rpki-client