Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e32392e302e302f31382d3138203d3e203538383334.roa
File:                     3132342e32392e302e302f31382d3138203d3e203538383334.roa (raw, json)
Hash identifier:          vDOlq62e6P2KXut8iEPLkCdB+/Bpm4aOXTfZ8sqGFEo=
Subject key identifier:   89:47:04:57:6A:02:49:CD:5B:FD:FD:E4:E4:67:3B:54:7B:94:F6:AD
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       2525BF32222AC4A0AC8B73F319A46133690D5F9F
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e32392e302e302f31382d3138203d3e203538383334.roa
Signing time:             Mon 31 Aug 2026 04:54:29 +0000
ROA not before:           Mon 31 Aug 2026 04:49:29 +0000
ROA not after:            Mon 30 Aug 2027 04:54:29 +0000
asID:                     58834
IP address blocks:        124.29.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 09:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:25:bf:32:22:2a:c4:a0:ac:8b:73:f3:19:a4:61:33:69:0d:5f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Aug 31 04:49:29 2026 GMT
            Not After : Aug 30 04:54:29 2027 GMT
        Subject: CN=894704576A0249CD5BFDFDE4E4673B547B94F6AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f7:cd:7e:5e:fe:bc:e0:a0:5f:e7:32:93:9b:
                    d0:93:b3:b1:3c:72:15:49:77:f7:d7:6e:02:00:14:
                    da:d9:2a:01:e2:98:38:6b:b2:97:45:52:c2:e0:76:
                    fd:81:e8:c6:25:46:70:8f:f3:5b:3b:24:dd:00:f7:
                    73:00:87:ab:62:91:be:32:22:d2:0c:b3:33:83:3f:
                    53:f9:56:df:73:0d:90:f4:44:4f:eb:20:c9:99:f9:
                    f2:c1:a8:05:30:84:fe:20:94:70:30:aa:b5:6a:79:
                    6d:67:a7:4b:f8:1c:74:c1:6e:25:05:7d:aa:fe:f5:
                    fe:04:73:d3:d3:41:69:d4:5b:30:5b:c7:8e:30:45:
                    e9:9e:8e:68:81:d4:4d:69:c5:e3:66:d6:0d:12:2f:
                    6d:9a:d2:4a:be:e3:9b:9f:24:4f:3e:12:5b:ec:e0:
                    9d:4e:8f:63:ed:c7:21:ad:61:ac:06:be:10:b4:98:
                    5f:04:32:7a:09:b0:79:63:b9:bb:8f:11:5f:71:09:
                    c3:99:62:50:62:39:3c:b9:8b:23:a4:2d:e1:3b:35:
                    60:50:28:b9:2e:14:e3:0b:0f:53:3a:79:77:de:ec:
                    ce:42:6b:80:e6:50:3a:9e:4f:e6:cf:36:c5:04:fa:
                    32:0d:0f:e4:69:65:36:c2:d0:a2:61:12:dd:67:52:
                    4b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:47:04:57:6A:02:49:CD:5B:FD:FD:E4:E4:67:3B:54:7B:94:F6:AD
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e32392e302e302f31382d3138203d3e203538383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.29.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b1:e3:5a:a1:e6:ee:8e:16:0d:e8:e9:9f:e4:11:36:7a:11:dd:
         19:1b:cf:60:27:7c:80:68:d8:b7:f8:fc:4b:90:5b:33:fe:75:
         4e:75:ef:6c:c4:02:b2:6d:bd:18:23:69:01:93:17:b8:2a:a1:
         ea:6a:3e:12:be:cc:ac:7e:dc:20:86:a8:5a:6b:11:3d:e4:33:
         b5:91:8f:36:ec:6f:60:6f:4f:54:be:74:89:24:a3:ac:17:bc:
         e5:1b:f4:e1:ae:4b:3a:42:76:4b:5b:a7:45:dd:8f:ef:c8:d9:
         1f:73:50:90:ed:6c:7e:e9:b7:d6:d1:d2:a8:21:29:2a:7f:cf:
         c5:ab:64:3e:5f:0c:ec:da:d1:f0:32:eb:7e:51:80:c4:51:82:
         38:3d:28:f9:e5:00:ee:13:34:69:e5:7d:72:db:eb:cf:42:9e:
         12:22:46:eb:15:a3:c9:46:6b:db:88:b1:ce:9c:ca:fc:5a:54:
         45:d2:c2:82:a8:c6:b9:33:24:54:f8:fb:2c:22:72:80:87:13:
         c4:f5:86:c0:37:22:a0:d0:3b:c5:71:e4:ae:ab:ce:d0:f7:3f:
         6a:2c:c6:7f:55:7b:e9:41:59:9c:ee:63:ce:13:d5:88:6c:01:
         d8:1b:21:1c:5a:c5:a5:b1:ec:6b:9f:c4:f0:b5:2c:c7:a6:f7:
         6e:e4:f1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:08:46 2026 by rpki-client