Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e3139392e302f32342d3234203d3e2030.roa
File:                     3132342e3137332e3139392e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          jMwcqGIZNJC3k3xR4ZBFEBYJnRnYNzcQGc3nLVAH1QE=
Subject key identifier:   C5:1F:41:94:37:83:73:3F:88:07:53:42:29:3A:E4:81:46:3C:E5:04
Certificate issuer:       /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial:       0117E4D6FB1554DD55568AE2C16045F7478D6DB4
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e3139392e302f32342d3234203d3e2030.roa
Signing time:             Thu 23 Apr 2026 07:19:10 +0000
ROA not before:           Thu 23 Apr 2026 07:14:10 +0000
ROA not after:            Thu 22 Apr 2027 07:19:10 +0000
asID:                     0
IP address blocks:        124.173.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:17:e4:d6:fb:15:54:dd:55:56:8a:e2:c1:60:45:f7:47:8d:6d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
        Validity
            Not Before: Apr 23 07:14:10 2026 GMT
            Not After : Apr 22 07:19:10 2027 GMT
        Subject: CN=C51F41943783733F88075342293AE481463CE504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7f:f8:41:82:8d:55:19:b9:26:5f:b0:62:80:
                    21:23:43:9d:d3:06:e9:0a:13:96:db:1b:f0:eb:5d:
                    ed:51:0f:5d:9d:fd:99:a1:f7:1f:e6:1d:03:36:9b:
                    b9:7e:d1:4a:af:14:bc:54:53:d2:aa:62:f3:df:b0:
                    f0:3e:32:f0:4d:5a:88:26:c6:32:90:97:9b:e8:77:
                    f0:5a:41:cb:e9:c5:39:b6:d3:7b:a3:2f:fa:b4:50:
                    6c:cc:28:6c:d1:c6:c2:3a:a8:34:f3:ab:ea:87:0c:
                    f6:fd:d0:f6:be:5b:ac:c8:5c:77:71:e8:56:20:d2:
                    cc:f6:ba:c5:ab:bd:01:ec:b4:12:78:e7:90:06:e9:
                    42:7d:41:e6:a8:5a:b9:13:b4:91:9f:ca:85:2b:cf:
                    a0:6a:70:61:0d:a4:7e:85:b8:8f:f8:34:6e:3b:2b:
                    4f:7e:50:ca:d3:c1:4e:e4:bf:bf:40:36:f8:73:04:
                    06:9b:8e:2c:73:cd:a3:9e:27:09:19:60:7b:bb:23:
                    fa:e0:fa:65:40:ca:64:1c:c1:61:b1:f6:81:10:d3:
                    67:e0:d5:7f:b7:f3:26:b8:a8:ff:17:fc:fc:df:33:
                    1c:51:79:21:fc:67:ef:f5:e7:73:19:96:3e:b3:14:
                    fe:9f:fe:7d:79:00:74:cc:bc:c8:26:26:09:28:30:
                    bb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1F:41:94:37:83:73:3F:88:07:53:42:29:3A:E4:81:46:3C:E5:04
            X509v3 Authority Key Identifier:
                keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e3139392e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.173.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:70:31:cb:7b:21:93:34:bb:a3:08:be:12:4f:0a:11:bf:8e:
         55:8b:81:57:fe:70:91:1e:b6:58:83:c3:8e:78:f0:bb:bd:2c:
         3d:41:f6:75:33:47:2f:4b:49:b8:d5:a6:61:ea:ae:eb:05:a8:
         5d:71:41:e6:47:60:3a:c4:1b:40:10:09:b9:d3:d6:19:97:49:
         1a:3d:b7:58:00:4b:f1:8d:a2:51:62:3b:5f:20:9a:27:e9:fc:
         a5:0a:15:02:c5:9d:3b:b1:d0:58:99:b5:c1:61:93:db:d0:da:
         bc:13:b1:e9:4e:cc:99:c6:ce:51:b6:ae:86:47:19:92:df:fc:
         6a:4d:c0:5b:d9:9e:cc:50:6c:a9:fa:72:68:58:71:ae:0d:83:
         eb:38:c6:1e:20:10:d5:9f:10:b5:f1:2a:fa:f9:f9:26:18:b2:
         29:c8:51:9c:e3:46:8d:52:ce:07:de:4e:b5:e9:cf:f0:0c:2c:
         a9:de:b0:e0:61:b1:4a:f8:82:b9:16:95:7f:87:db:16:8f:fa:
         d6:b2:88:3d:d3:b6:ce:0a:1b:bc:20:3d:bf:2d:18:5c:a4:a0:
         3c:fa:b8:ab:4e:90:6a:e5:96:a0:0d:f7:33:00:5d:65:44:9a:
         2d:1c:58:3c:e8:f4:8a:f5:56:b5:03:c3:e7:3c:53:cf:29:26:
         5e:ef:e3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:15:22 2026 by rpki-client