Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e302e302f31372d3234203d3e20313532313739.roa
File:                     3132342e3137322e302e302f31372d3234203d3e20313532313739.roa (raw, json)
Hash identifier:          DgWEfY3tON8R74QG/a18MbLYWQDHiLQgmvUUtMhrHFI=
Subject key identifier:   68:28:35:85:80:DC:62:FC:19:51:CC:75:08:2E:16:1E:A7:17:3E:6F
Certificate issuer:       /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial:       57B7796962F3AF5BB130A57FC28C996D3CE2DB1C
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e302e302f31372d3234203d3e20313532313739.roa
Signing time:             Fri 11 Sep 2026 12:25:25 +0000
ROA not before:           Fri 11 Sep 2026 12:20:25 +0000
ROA not after:            Fri 10 Sep 2027 12:25:25 +0000
asID:                     152179
IP address blocks:        124.172.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 08:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b7:79:69:62:f3:af:5b:b1:30:a5:7f:c2:8c:99:6d:3c:e2:db:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
        Validity
            Not Before: Sep 11 12:20:25 2026 GMT
            Not After : Sep 10 12:25:25 2027 GMT
        Subject: CN=6828358580DC62FC1951CC75082E161EA7173E6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7a:5c:bb:ee:ab:f2:40:67:9e:ea:ce:6c:34:
                    8f:58:10:ba:b2:25:f5:15:90:d2:09:8e:fd:0c:eb:
                    ca:2e:8d:34:96:d5:f6:96:c5:ae:39:7a:54:70:a8:
                    f3:2f:52:88:78:00:25:2f:4f:c2:8c:bd:4b:08:05:
                    96:8d:8f:53:d2:db:6a:a5:10:68:0f:b2:d6:71:57:
                    e4:12:35:d2:89:04:a1:9d:3b:3f:d5:36:61:61:8a:
                    75:2a:7b:ed:ea:12:7c:02:32:66:2f:cd:6d:1f:97:
                    58:e3:ef:1a:2e:c2:ab:e3:e5:fa:37:2e:86:4e:02:
                    ca:5c:75:1a:18:66:4d:74:e4:1a:f2:f5:dd:a8:57:
                    0b:5b:1d:fd:26:89:4b:19:11:8b:75:5e:37:5e:2c:
                    0f:e7:03:c4:ed:85:17:1f:0c:3e:2f:54:85:fb:bb:
                    d3:70:1f:39:59:7a:3a:e8:3b:5a:c0:9a:20:c4:f8:
                    1c:77:ef:05:33:d3:4f:84:d3:e3:d5:61:be:93:d1:
                    f8:52:e4:5f:a1:5d:e4:9a:18:ed:4c:a4:46:7c:5e:
                    89:84:e5:a9:35:45:ef:bb:5a:07:70:2a:b6:5f:89:
                    61:fd:99:2a:72:7c:6f:ff:4c:32:3e:c4:cb:a1:c5:
                    de:9b:f1:81:42:00:aa:0f:39:bc:72:87:d3:86:ae:
                    c8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:28:35:85:80:DC:62:FC:19:51:CC:75:08:2E:16:1E:A7:17:3E:6F
            X509v3 Authority Key Identifier:
                keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e302e302f31372d3234203d3e20313532313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.172.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         46:95:e5:07:71:02:90:b8:8f:b6:86:33:3c:44:d6:39:be:4c:
         4a:d3:d1:5b:08:93:b0:56:37:ee:bc:bf:73:e9:26:68:77:e6:
         e0:6a:46:f2:e0:09:ed:32:97:56:ce:04:ee:57:ea:76:7e:8f:
         e1:24:de:a6:ae:83:86:0f:68:a7:30:3e:73:59:24:a7:9c:cf:
         32:fa:b5:6b:69:f4:21:d0:50:1a:6b:25:4f:54:5e:dc:01:0b:
         47:72:3f:fd:a7:7b:5c:79:5d:b4:ab:46:ca:14:22:6b:a2:5b:
         b4:ed:6e:a3:de:b6:aa:4a:dc:6c:dd:a9:26:43:bf:a2:54:c9:
         27:05:e5:05:dd:6a:87:4e:43:13:95:6f:d9:eb:41:64:50:bf:
         0e:99:25:b8:c3:e2:fe:8a:39:4c:f6:9e:56:c4:5a:f6:85:38:
         44:a0:bb:29:01:65:5e:63:d7:67:f1:35:cd:e5:af:1d:e9:bd:
         3d:23:28:24:61:e7:25:78:a2:e5:57:fd:05:ae:0e:0f:98:54:
         33:5e:15:0d:72:ed:2f:51:4f:7f:34:15:3c:be:f9:aa:5f:b8:
         f7:b9:61:7c:59:3c:9d:10:fa:e0:42:61:99:3e:24:0e:af:97:
         3c:7c:90:69:07:7e:63:c2:da:52:71:7c:54:6e:f0:24:44:2a:
         94:22:3d:b3
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUV7d5aWLzr1uxMKV/woyZbTzi2xwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2
QkY0MjQzRDAeFw0yNjA5MTExMjIwMjVaFw0yNzA5MTAxMjI1MjVaMDMxMTAvBgNV
BAMTKDY4MjgzNTg1ODBEQzYyRkMxOTUxQ0M3NTA4MkUxNjFFQTcxNzNFNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXely77qvyQGee6s5sNI9YELqy
JfUVkNIJjv0M68oujTSW1faWxa45elRwqPMvUoh4ACUvT8KMvUsIBZaNj1PS22ql
EGgPstZxV+QSNdKJBKGdOz/VNmFhinUqe+3qEnwCMmYvzW0fl1jj7xouwqvj5fo3
LoZOAspcdRoYZk105Bry9d2oVwtbHf0miUsZEYt1XjdeLA/nA8TthRcfDD4vVIX7
u9NwHzlZejroO1rAmiDE+Bx37wUz00+E0+PVYb6T0fhS5F+hXeSaGO1MpEZ8XomE
5ak1Re+7WgdwKrZfiWH9mSpyfG//TDI+xMuhxd6b8YFCAKoPObxyh9OGrsjJAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUaCg1hYDcYvwZUcx1CC4WHqcXPm8wHwYDVR0j
BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD
QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0NzgxMjg2Ny8wLzMxMzIzNDJlMzEz
NzMyMmUzMDJlMzAyZjMxMzcyZDMyMzQyMDNkM2UyMDMxMzUzMjMxMzczOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEB3ysADANBgkqhkiG9w0BAQsFAAOCAQEARpXlB3ECkLiPtoYzPETWOb5M
StPRWwiTsFY37ry/c+kmaHfm4GpG8uAJ7TKXVs4E7lfqdn6P4STepq6Dhg9opzA+
c1kkp5zPMvq1a2n0IdBQGmslT1Re3AELR3I//ad7XHldtKtGyhQia6JbtO1uo962
qkrcbN2pJkO/olTJJwXlBd1qh05DE5Vv2etBZFC/DpkluMPi/oo5TPaeVsRa9oU4
RKC7KQFlXmPXZ/E1zeWvHem9PSMoJGHnJXii5Vf9Ba4OD5hUM14VDXLtL1FPfzQV
PL75ql+497lhfFk8nRD64EJhmT4kDq+XPHyQaQd+Y8LaUnF8VG7wJEQqlCI9sw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 08:58:52 2026 by rpki-client