Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129459715/0/3131302e37362e302e302f31392d3234203d3e203435313032.roa
File:                     3131302e37362e302e302f31392d3234203d3e203435313032.roa (raw, json)
Hash identifier:          KpbyfMQgiRPHc4JXVVcufeCDpffM9jStUuQqy7RhNDk=
Subject key identifier:   D2:DB:37:7F:40:B8:24:D4:4B:DB:01:9A:04:22:BF:AE:B7:EF:A0:18
Certificate issuer:       /CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD
Certificate serial:       44E1157183F9481D3D644A03F2DAC07E72B467BC
Authority key identifier: C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/3131302e37362e302e302f31392d3234203d3e203435313032.roa
Signing time:             Fri 27 Mar 2026 16:29:16 +0000
ROA not before:           Fri 27 Mar 2026 16:24:16 +0000
ROA not after:            Fri 26 Mar 2027 16:29:16 +0000
asID:                     45102
IP address blocks:        110.76.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e1:15:71:83:f9:48:1d:3d:64:4a:03:f2:da:c0:7e:72:b4:67:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD
        Validity
            Not Before: Mar 27 16:24:16 2026 GMT
            Not After : Mar 26 16:29:16 2027 GMT
        Subject: CN=D2DB377F40B824D44BDB019A0422BFAEB7EFA018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:94:23:6c:38:d4:39:94:64:3b:6c:d2:09:b3:
                    c8:74:a0:fe:65:50:9a:ca:e2:45:80:45:e0:05:2c:
                    13:66:7e:ac:aa:9f:cb:bf:fb:e0:e3:d7:2d:98:70:
                    74:85:be:56:a7:e4:66:21:a3:dd:18:be:4a:a6:2f:
                    ff:0d:82:da:38:a0:39:66:c0:65:32:b4:43:27:45:
                    82:4b:87:26:76:73:73:6c:79:b4:6a:71:1a:91:a0:
                    84:3e:e9:aa:38:26:ad:f8:7b:13:28:57:a0:ff:de:
                    a6:57:90:4d:e3:4c:b1:ab:c2:63:c7:d7:55:e9:97:
                    01:e5:a9:5a:ab:58:47:06:74:8a:c9:42:f5:20:b3:
                    02:60:5c:59:7e:a1:d5:85:af:5a:e6:99:2b:22:34:
                    36:3a:ca:ff:18:d6:47:94:6b:2d:d8:93:c1:a5:dc:
                    d0:34:26:c1:a3:4c:5c:3d:cf:56:29:e6:9d:d1:dc:
                    59:db:df:e8:79:d2:1b:c3:ab:00:c5:6b:88:00:d8:
                    a4:14:9b:99:f0:b1:71:38:77:06:e3:ab:41:53:f7:
                    b5:ec:28:3c:35:c5:62:71:38:14:c5:68:59:c9:ac:
                    71:ea:80:50:34:3f:3f:af:e9:5f:57:12:ac:cd:c4:
                    91:9e:82:80:94:ad:dc:ac:4e:69:6e:72:ae:1b:35:
                    3e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DB:37:7F:40:B8:24:D4:4B:DB:01:9A:04:22:BF:AE:B7:EF:A0:18
            X509v3 Authority Key Identifier:
                keyid:C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/3131302e37362e302e302f31392d3234203d3e203435313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.76.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         21:e1:b6:1e:d0:c3:74:42:6f:94:99:a4:b9:66:ee:44:7f:66:
         d9:df:ac:64:ae:d6:a2:6f:a1:50:eb:1e:9e:9e:3d:16:69:ae:
         57:9c:68:68:23:d5:39:81:fc:43:71:71:58:b8:5f:c4:db:80:
         44:e9:44:73:34:e9:0d:46:30:67:f3:fa:d6:04:d1:cd:d9:7c:
         87:50:69:08:de:40:a9:18:2a:fd:65:8f:9f:ce:f2:3d:9f:5c:
         33:59:62:5b:5a:66:ab:9e:51:59:45:7e:4a:7c:79:25:02:95:
         0a:a5:c4:ef:db:c4:f9:e3:0e:94:95:f5:27:75:48:48:e3:26:
         4f:ea:92:04:02:05:35:c4:a1:64:ad:0f:e0:1b:53:1c:42:97:
         63:04:8e:f9:af:8c:52:58:98:05:1c:d4:24:de:5f:3f:a7:39:
         9d:a3:78:8c:cc:e5:16:49:61:7e:fe:bd:54:2b:92:56:8b:74:
         11:fe:73:b8:a4:eb:32:73:31:44:69:04:18:c5:12:cb:ae:2a:
         5a:82:dc:03:89:37:82:dd:36:f9:e8:46:fc:aa:b5:92:0e:a4:
         5a:e5:47:53:b8:96:67:0e:6d:96:e1:9c:7b:01:d8:54:0a:e0:
         33:89:6e:ee:48:3a:cf:6c:a9:15:e8:d2:3d:a9:f8:06:96:6a:
         81:e7:37:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:24:14 2026 by rpki-client