Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e32392e302e302f31392d3139203d3e203538383334.roa
File:                     3132342e32392e302e302f31392d3139203d3e203538383334.roa (raw, json)
Hash identifier:          4KXWBC7Udm/rKSHsGW2aP8MzNhG8ssP0grQpmgHaZlA=
Subject key identifier:   0C:6D:B7:B7:54:2E:60:1D:F5:9C:63:BE:7C:B2:27:7B:E6:74:E9:6F
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       6BB5C3BCD98ED9B04B48FFBF8176DF4F37D92CE7
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e32392e302e302f31392d3139203d3e203538383334.roa
Signing time:             Mon 31 Aug 2026 04:52:47 +0000
ROA not before:           Mon 31 Aug 2026 04:47:47 +0000
ROA not after:            Mon 30 Aug 2027 04:52:47 +0000
asID:                     58834
IP address blocks:        124.29.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 09:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b5:c3:bc:d9:8e:d9:b0:4b:48:ff:bf:81:76:df:4f:37:d9:2c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Aug 31 04:47:47 2026 GMT
            Not After : Aug 30 04:52:47 2027 GMT
        Subject: CN=0C6DB7B7542E601DF59C63BE7CB2277BE674E96F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e9:0d:81:76:60:6d:91:e5:d9:a1:8b:99:39:
                    d9:03:81:00:71:85:f1:07:46:1f:4a:c5:c3:ba:59:
                    93:f0:70:27:25:ba:69:92:31:05:42:24:01:f0:77:
                    a1:48:96:90:c5:9d:b6:4b:77:1f:a1:ea:c3:26:0e:
                    d7:a2:df:4e:9d:2a:3b:a2:b9:01:6f:20:2e:20:ce:
                    8c:f0:1c:11:b5:dd:cc:8e:49:3a:a8:e3:8d:53:9e:
                    1e:0a:71:93:38:f3:00:d1:4d:f3:31:dc:04:e3:93:
                    87:32:2d:04:5f:3f:29:b3:30:15:4b:93:27:a5:a3:
                    4b:26:a7:ce:39:07:82:28:0d:e8:d2:f5:fd:5d:33:
                    ba:c9:d2:d0:e7:ac:65:75:9a:d1:28:09:c1:9a:eb:
                    e3:29:ac:cd:05:62:1e:c9:88:b8:37:d7:54:17:15:
                    c2:50:83:f3:49:ec:c3:b9:6d:c7:8f:c8:4a:5a:10:
                    d7:f3:c2:4b:a8:c9:ca:fe:1c:c5:36:1b:f6:49:02:
                    41:b9:2a:0b:e7:82:0d:b7:ff:c5:24:4e:b6:05:4a:
                    35:f2:67:ab:ec:14:34:dd:cd:54:99:66:14:4b:31:
                    2e:af:45:3c:df:76:b7:ef:57:f6:e3:d7:aa:4f:60:
                    26:32:5b:85:0b:f8:f9:3d:e8:31:a2:99:5d:a4:c3:
                    17:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6D:B7:B7:54:2E:60:1D:F5:9C:63:BE:7C:B2:27:7B:E6:74:E9:6F
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e32392e302e302f31392d3139203d3e203538383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.29.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4f:50:10:8f:61:4e:ca:f3:0c:e0:4e:bf:44:f7:38:72:c6:b8:
         0e:14:9a:9d:7d:15:ce:d1:28:f4:73:4d:f0:03:b9:03:1a:ca:
         7c:a2:ac:ad:33:44:03:9d:1e:4c:dd:18:77:84:22:a5:7c:65:
         96:5b:48:36:fb:6e:87:ed:45:67:f8:7a:69:e4:a4:c4:f0:eb:
         07:07:13:0d:66:02:5a:bf:6b:9c:86:17:56:c2:ff:27:9b:9a:
         cb:d2:4a:f1:95:07:56:75:b8:89:dc:02:b7:2d:56:67:e7:74:
         e5:19:fc:ee:76:c4:7d:8d:fb:fb:74:cc:b4:80:fe:ad:51:84:
         9a:b4:03:8c:b8:d1:1e:ee:3c:56:43:06:39:91:30:9c:a6:0e:
         43:16:73:fd:fc:83:77:dc:b3:4e:01:c7:48:21:97:ce:5e:60:
         c7:47:0f:4d:27:61:28:f7:67:4e:8a:d7:7c:e7:63:b9:dd:6a:
         eb:b0:31:11:6b:3a:6b:2d:df:80:1d:27:ba:63:2e:c9:ec:ed:
         aa:34:22:3f:56:c0:1c:7a:62:ef:06:09:72:85:b6:85:d4:58:
         04:62:7b:a0:9f:4a:1b:27:86:f3:64:95:18:62:a0:b6:ee:cc:
         b2:2d:90:ad:eb:ec:d0:bd:f4:7b:0f:ed:7f:09:0b:81:8f:82:
         b0:6b:cf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:08:45 2026 by rpki-client