Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096689320682651650/0/3131302e37362e3139322e302f31382d3138203d3e203234313337.roa
File:                     3131302e37362e3139322e302f31382d3138203d3e203234313337.roa (raw, json)
Hash identifier:          A1FWuEjTW0p3C5lu9cQ6PMbCpWod9JNyjtO0cfLmQEU=
Subject key identifier:   30:03:05:04:85:22:39:0E:E3:85:17:06:E5:25:20:6D:36:E0:97:4A
Certificate issuer:       /CN=833355AAAB477A3A1D2F649973B483982F9BA6CE
Certificate serial:       4AE023414649E8B54B7156690F26F0A5F7A4078E
Authority key identifier: 83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/3131302e37362e3139322e302f31382d3138203d3e203234313337.roa
Signing time:             Wed 15 Apr 2026 07:09:14 +0000
ROA not before:           Wed 15 Apr 2026 07:04:14 +0000
ROA not after:            Wed 14 Apr 2027 07:09:14 +0000
asID:                     24137
IP address blocks:        110.76.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e0:23:41:46:49:e8:b5:4b:71:56:69:0f:26:f0:a5:f7:a4:07:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833355AAAB477A3A1D2F649973B483982F9BA6CE
        Validity
            Not Before: Apr 15 07:04:14 2026 GMT
            Not After : Apr 14 07:09:14 2027 GMT
        Subject: CN=300305048522390EE3851706E525206D36E0974A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b3:07:c7:32:58:21:46:99:2e:f4:f5:fe:ff:
                    70:53:51:c8:80:ac:79:6c:27:0f:c0:45:a4:38:cc:
                    30:4a:ec:84:a2:18:f2:bb:54:96:0d:39:26:b8:ca:
                    cf:30:cc:f3:6e:21:fa:ab:ff:0f:17:a8:b1:c6:50:
                    39:6e:6b:41:6b:00:89:f9:a0:3b:35:a5:e5:2b:d6:
                    1b:74:21:c9:9a:f4:ae:cf:da:87:5a:32:06:aa:20:
                    56:1a:7b:85:4b:5f:71:99:fa:d4:04:1f:14:fb:a4:
                    60:c0:06:43:15:20:62:a1:14:78:8f:b3:8f:b1:03:
                    82:fb:cd:29:8e:3d:d7:f2:ab:41:4b:08:af:23:28:
                    cb:4d:5f:35:e5:72:17:14:f0:32:47:d8:dc:0b:25:
                    45:bc:94:20:8f:59:53:70:59:cd:6b:07:cf:f9:25:
                    a4:88:b3:7a:12:0a:94:0e:c1:66:50:04:5e:3f:02:
                    c1:51:64:3a:9a:5b:8b:74:be:c8:55:b7:1d:91:e3:
                    7c:a8:f3:39:35:de:3c:79:97:79:40:72:2b:33:dc:
                    df:4c:35:5c:bd:49:7a:19:fc:07:63:4e:f7:26:5f:
                    2e:8e:5b:21:d3:1d:13:d7:9c:64:d5:d0:09:55:9b:
                    35:b6:f0:c5:33:f2:1d:09:2d:59:7f:dc:54:50:a6:
                    a7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:03:05:04:85:22:39:0E:E3:85:17:06:E5:25:20:6D:36:E0:97:4A
            X509v3 Authority Key Identifier:
                keyid:83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/3131302e37362e3139322e302f31382d3138203d3e203234313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.76.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6d:ce:29:c1:12:16:65:61:97:b1:8c:f3:68:c2:bd:c4:94:85:
         f4:d5:4b:70:ed:b5:03:5f:c8:16:25:37:82:08:8f:40:49:07:
         e1:6b:90:c7:0e:5e:33:11:e0:7b:71:78:a1:1a:6f:73:94:09:
         d1:76:c2:ba:b3:a5:1b:ee:2d:73:a6:b6:3f:fb:79:59:d9:af:
         2b:cf:d4:71:cc:7a:e3:50:80:ce:6a:75:0a:59:91:50:26:40:
         b2:f0:81:bd:f8:86:e1:e6:6e:46:b2:ec:1c:78:f5:d2:5b:4e:
         ea:0d:d8:fe:66:8d:36:e3:23:96:3e:0e:ec:8f:57:02:a3:90:
         2d:82:03:aa:71:99:77:a1:ef:b1:4f:44:2e:08:4b:60:02:d3:
         37:df:d0:d9:45:f5:47:ea:8b:e9:d6:c4:df:f2:6f:a9:b0:68:
         2d:4c:11:e1:71:54:14:ed:15:e7:b3:e7:e1:48:ba:df:9e:c9:
         67:b0:18:13:e5:db:ce:59:79:8f:e2:b7:4a:7b:fc:e1:c1:87:
         b1:e2:ef:9e:df:0c:b6:0a:2e:7f:99:f2:2e:80:43:47:d9:c1:
         aa:44:bc:4f:38:ed:c4:9d:25:04:8d:9f:e8:57:72:2f:f7:6c:
         b6:31:3e:c1:82:62:23:4d:a0:78:ea:a4:46:6c:e8:c7:d3:a4:
         80:5f:06:07
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:43:25 2026 by rpki-client