Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e312e302f32342d3234203d3e20313938343836.roa
File:                     3132332e39382e312e302f32342d3234203d3e20313938343836.roa (raw, json)
Hash identifier:          43/JloEeFU6MmePOSLltS+vOVjVFE42DoF0sXdV4KDg=
Subject key identifier:   78:33:A8:C1:4C:2E:90:36:63:64:CC:FF:40:39:C4:D9:57:5D:38:69
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       0F01279615B692E69CB0630C8ED092064E14DC78
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e312e302f32342d3234203d3e20313938343836.roa
Signing time:             Wed 06 May 2026 06:18:03 +0000
ROA not before:           Wed 06 May 2026 06:13:03 +0000
ROA not after:            Wed 05 May 2027 06:18:03 +0000
asID:                     198486
IP address blocks:        123.98.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:01:27:96:15:b6:92:e6:9c:b0:63:0c:8e:d0:92:06:4e:14:dc:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: May  6 06:13:03 2026 GMT
            Not After : May  5 06:18:03 2027 GMT
        Subject: CN=7833A8C14C2E90366364CCFF4039C4D9575D3869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b9:8e:26:b5:52:7c:ac:23:9c:ad:3f:fe:e1:
                    33:cf:d2:01:75:4b:05:bb:4a:ae:fa:02:75:2a:15:
                    b9:00:d8:10:2b:51:2c:26:e5:16:a2:1f:5d:c3:a4:
                    d4:ee:af:77:20:cf:1e:05:69:ac:30:fa:c6:f8:1d:
                    a1:5f:2c:42:3f:8b:8d:51:7d:1a:a7:ae:64:8e:b7:
                    a4:de:17:0c:e5:73:f2:2a:6c:9b:ef:ec:30:df:ba:
                    b2:23:6a:ca:0f:93:8d:67:40:1a:bb:08:0a:d9:3b:
                    e4:62:1f:ad:21:a4:83:17:8d:06:ec:e2:95:b9:c8:
                    56:6c:11:1b:a0:73:1f:d8:f5:dd:28:59:39:87:4c:
                    6a:d5:45:35:e3:85:c5:d6:2b:e5:16:c2:69:05:c4:
                    c7:da:93:89:8d:a8:6c:fc:ab:47:1e:c8:43:99:6e:
                    40:ba:94:18:4a:5a:0f:4d:a4:25:96:d3:cc:c8:b7:
                    af:27:a8:11:bf:4d:7a:f8:f9:f2:fb:7a:31:2d:b9:
                    82:81:95:3e:d8:b0:c9:f0:86:e6:2b:e7:0e:8d:88:
                    d3:1c:7d:66:52:cc:ed:44:4e:0a:83:17:8a:ce:78:
                    23:2d:9e:82:f9:1d:11:8f:a9:3c:6c:55:6a:72:6e:
                    ea:7e:41:85:61:67:1f:a1:f8:69:46:9e:61:6c:32:
                    34:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:33:A8:C1:4C:2E:90:36:63:64:CC:FF:40:39:C4:D9:57:5D:38:69
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e312e302f32342d3234203d3e20313938343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.98.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:b2:33:a0:45:40:6f:d3:94:53:33:8a:04:e7:26:0c:14:0c:
         a2:cc:a1:84:93:8b:8e:31:19:ac:11:70:d4:6f:76:c5:3e:3a:
         33:56:a9:4c:7e:63:52:22:2e:b2:6a:c6:63:b7:e5:a5:d9:bb:
         8d:f1:e2:77:8c:84:f0:1f:a6:f9:52:33:76:f8:6b:5f:87:fd:
         f5:d2:f6:91:31:28:18:ff:80:72:3d:eb:27:de:67:54:7d:df:
         7d:37:5c:fa:32:a0:3f:ce:4f:c3:89:1d:3a:f6:a6:88:02:82:
         b2:1a:af:2f:b4:34:ad:05:e7:0d:cd:94:be:78:11:bc:ce:ae:
         3d:a3:53:32:db:f9:1e:18:bb:4c:80:3b:85:c1:71:ff:18:39:
         93:26:e8:73:02:1c:58:bd:a6:0b:cd:35:5c:e4:73:40:6a:cb:
         75:ee:8e:f0:85:b9:85:34:03:58:9d:19:35:f6:b8:f0:34:68:
         31:61:64:3f:a3:61:9f:c2:7d:4b:98:26:83:3f:8f:08:89:a7:
         5f:a8:da:90:2b:0f:f4:b9:a0:3f:f1:63:df:ff:cc:88:80:9e:
         d5:0c:e1:f6:af:d2:e0:30:52:40:fd:72:f7:88:ac:7f:f0:c8:
         ec:12:11:ce:40:8a:83:b9:e5:6c:11:03:af:9d:7c:3f:40:8d:
         fa:1b:12:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:19:06 2026 by rpki-client