Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3132342e34372e33372e302f32342d3234203d3e203233373731.roa
File:                     3132342e34372e33372e302f32342d3234203d3e203233373731.roa (raw, json)
Hash identifier:          XuTsL6FFmlhdq/DaiDoVMBr4LMcVY3+mp6PXtl8RjVc=
Subject key identifier:   8A:41:3C:81:1F:14:A2:A9:FE:4C:91:A6:0B:74:25:B0:8D:1E:80:9E
Certificate issuer:       /CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
Certificate serial:       255B47310755D30CCFBF251C426EE2F2FD2D43F4
Authority key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3132342e34372e33372e302f32342d3234203d3e203233373731.roa
Signing time:             Mon 20 Apr 2026 02:22:34 +0000
ROA not before:           Mon 20 Apr 2026 02:17:34 +0000
ROA not after:            Mon 19 Apr 2027 02:22:34 +0000
asID:                     23771
IP address blocks:        124.47.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5b:47:31:07:55:d3:0c:cf:bf:25:1c:42:6e:e2:f2:fd:2d:43:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
        Validity
            Not Before: Apr 20 02:17:34 2026 GMT
            Not After : Apr 19 02:22:34 2027 GMT
        Subject: CN=8A413C811F14A2A9FE4C91A60B7425B08D1E809E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:09:b6:0a:86:e1:2b:86:89:ef:82:ca:b6:2b:
                    49:a0:c3:e4:6e:6d:c5:ef:da:28:74:21:ff:53:01:
                    e3:6d:50:ab:fa:29:92:e3:99:d4:93:3b:d5:5a:cc:
                    5e:16:e9:2f:f0:fb:d1:09:12:6f:02:bd:61:08:33:
                    1b:27:49:8d:f5:14:d5:1d:34:17:65:db:a2:a7:8c:
                    ee:fa:2d:df:0a:54:25:7c:f5:79:db:f4:cb:fb:f1:
                    b5:29:4e:c1:b8:4e:c8:1a:95:a7:10:21:f6:a2:b3:
                    74:87:60:26:65:d2:05:0d:8c:6c:89:b3:c9:ad:87:
                    d1:6c:02:8d:86:8e:69:05:d7:5b:e2:26:f7:ad:2b:
                    09:68:bc:2a:66:a9:9c:04:24:e4:70:d6:aa:cb:9b:
                    14:0e:e3:74:39:96:e2:7b:c8:20:4d:8a:4f:79:b6:
                    04:25:47:50:9d:28:55:c9:93:51:61:c6:bb:c7:72:
                    32:ec:af:9a:57:64:1d:d2:bc:a5:e9:22:fa:82:26:
                    bc:81:2c:c7:7d:ea:97:11:3c:63:7b:b5:90:36:80:
                    55:37:2a:f8:d1:7e:91:f5:28:60:ea:2e:11:1e:eb:
                    54:34:09:7f:cd:a3:36:68:d8:6d:82:88:63:22:1f:
                    dc:ce:8a:e8:70:16:cc:da:15:d0:8a:b0:7b:2a:d2:
                    97:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:41:3C:81:1F:14:A2:A9:FE:4C:91:A6:0B:74:25:B0:8D:1E:80:9E
            X509v3 Authority Key Identifier:
                keyid:FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3132342e34372e33372e302f32342d3234203d3e203233373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.47.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:7e:56:e3:84:aa:14:ab:6a:8d:66:a1:cb:22:a3:4f:c4:bc:
         ad:eb:65:ef:95:34:5a:3b:66:d3:f1:20:30:31:ca:0b:9a:7e:
         a3:67:7d:36:48:2f:9b:27:eb:65:89:99:4f:9c:f7:04:01:82:
         15:b6:e1:a2:e7:4b:0b:b3:7b:95:4b:12:25:d2:f9:7f:5c:e0:
         42:6b:4c:35:5a:d1:9b:0a:50:df:8f:c8:14:90:75:7b:e8:67:
         9d:ec:d0:db:dc:56:7e:74:e8:c2:37:c7:55:63:1d:cd:b7:5c:
         91:4b:d1:10:44:7f:d4:7d:b9:67:fc:54:f1:7b:d4:5b:07:85:
         c2:64:37:86:cb:07:25:e6:ed:a6:dc:95:c0:94:30:01:82:4f:
         5a:82:77:77:ba:51:3f:80:92:ed:8f:8c:9d:c8:82:de:e8:71:
         74:58:85:a8:6e:13:db:10:23:aa:1e:84:21:cc:96:f4:6b:c8:
         75:cf:d9:27:ee:77:40:9a:95:94:e5:85:d0:5f:91:16:9f:b6:
         ed:c8:41:00:e9:85:9f:14:05:01:c7:a1:79:23:7d:9e:2d:b4:
         5f:3e:e4:0c:1c:cb:bf:25:a5:8a:6b:59:4b:a1:22:23:03:e9:
         f3:c3:ea:82:84:9a:3d:16:59:3d:61:68:de:01:ef:c3:1e:f2:
         3b:a5:ad:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:53:45 2026 by rpki-client