Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e332e302f32342d3234203d3e20313938343836.roa
File:                     3132332e39382e332e302f32342d3234203d3e20313938343836.roa (raw, json)
Hash identifier:          T114yHGVMxNHjd1VVeIO0BG6x0CkfOnxE0Kn3Hji2X0=
Subject key identifier:   54:69:DB:5D:66:E6:BE:1C:6F:67:60:31:0A:EC:29:DB:C2:1B:2F:2B
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       2ADFC06C83350DC4AE0B2004E5370F4B2FEEF252
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e332e302f32342d3234203d3e20313938343836.roa
Signing time:             Mon 13 Jul 2026 03:46:36 +0000
ROA not before:           Mon 13 Jul 2026 03:41:36 +0000
ROA not after:            Mon 12 Jul 2027 03:46:36 +0000
asID:                     198486
IP address blocks:        123.98.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:df:c0:6c:83:35:0d:c4:ae:0b:20:04:e5:37:0f:4b:2f:ee:f2:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Jul 13 03:41:36 2026 GMT
            Not After : Jul 12 03:46:36 2027 GMT
        Subject: CN=5469DB5D66E6BE1C6F6760310AEC29DBC21B2F2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:06:92:2d:19:11:c2:3f:eb:b3:53:02:8b:2a:
                    ba:67:d8:55:c5:5e:0c:4b:bd:7c:06:2d:ef:12:ac:
                    09:20:f9:2f:bb:a9:94:2b:a8:96:46:f1:29:f5:88:
                    79:18:29:89:49:cf:39:a9:f0:05:dd:ba:21:96:5a:
                    8e:05:fe:36:67:d4:01:f2:c2:17:a8:b5:df:41:c9:
                    38:3a:f8:2f:14:96:2d:af:af:48:7a:66:27:9c:f1:
                    f6:02:f9:94:b1:c0:96:27:a0:bd:57:1f:a5:c0:9a:
                    1b:2d:51:78:41:a5:77:46:2a:3f:a5:30:5d:16:e0:
                    70:ca:a1:e0:bd:39:01:5c:a5:4e:91:38:fa:2b:71:
                    0d:53:06:86:08:2e:e2:46:56:dd:64:65:e7:24:ec:
                    e0:5a:73:6a:e7:74:3f:48:29:48:3c:e7:7d:eb:80:
                    f4:d9:a7:dd:f4:18:5d:72:cb:d8:8a:24:7a:98:04:
                    34:1e:70:e5:85:00:9d:b2:60:81:48:74:7a:1b:b1:
                    e3:27:7a:a8:28:34:1f:2f:9d:3d:57:77:8c:85:60:
                    f9:46:f3:6f:c9:82:fd:11:10:43:28:fd:22:60:d6:
                    0e:d6:0b:f2:ca:27:79:c7:69:c5:f0:6e:51:3e:2b:
                    ea:c5:a8:e3:01:15:95:61:eb:51:2f:ad:14:9f:42:
                    1d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:69:DB:5D:66:E6:BE:1C:6F:67:60:31:0A:EC:29:DB:C2:1B:2F:2B
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e332e302f32342d3234203d3e20313938343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.98.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:ea:f7:b3:c7:0d:80:a7:91:6a:16:df:98:f0:b3:51:82:9d:
         bc:9d:dc:ee:f9:6f:38:9d:5c:ad:b4:92:64:d6:10:54:d6:53:
         36:87:c6:d9:ec:ad:65:81:3f:0e:42:9a:6f:21:b4:2f:85:87:
         fb:2f:17:ad:c7:ec:fb:75:29:74:87:53:9b:1a:56:ff:ec:61:
         a8:f2:44:62:75:33:37:a5:eb:60:19:7d:96:81:7e:96:c7:8a:
         45:fb:be:c2:22:aa:56:0f:00:16:fa:b5:d1:c2:32:37:38:0f:
         60:7b:86:eb:0a:6d:bd:f5:75:a7:e0:5c:09:e2:54:aa:68:56:
         78:94:a6:4c:34:12:61:59:06:f0:70:1f:5b:dc:28:f9:cd:55:
         d9:24:96:e6:b1:e3:f7:5d:8c:68:9e:c0:a1:00:2a:f8:a9:f5:
         6a:a1:90:fc:9c:8b:af:a9:13:75:d5:20:e0:1b:b7:4f:34:5a:
         95:c7:21:c4:a5:d4:15:40:11:72:e5:c3:03:46:3c:6e:e9:e2:
         12:51:51:61:fc:48:10:1d:ee:71:81:58:e7:1f:44:17:5e:be:
         9d:ed:7d:25:72:22:70:82:dd:4a:8e:32:a0:ac:b2:7e:80:a1:
         93:24:5f:0f:8e:69:46:b9:26:2b:93:24:c0:2d:30:16:00:5a:
         99:57:92:5b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUKt/AbIM1DcSuCyAE5TcPSy/u8lIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0
NEM5RUY4RTAeFw0yNjA3MTMwMzQxMzZaFw0yNzA3MTIwMzQ2MzZaMDMxMTAvBgNV
BAMTKDU0NjlEQjVENjZFNkJFMUM2RjY3NjAzMTBBRUMyOURCQzIxQjJGMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZBpItGRHCP+uzUwKLKrpn2FXF
XgxLvXwGLe8SrAkg+S+7qZQrqJZG8Sn1iHkYKYlJzzmp8AXduiGWWo4F/jZn1AHy
wheotd9ByTg6+C8Uli2vr0h6Ziec8fYC+ZSxwJYnoL1XH6XAmhstUXhBpXdGKj+l
MF0W4HDKoeC9OQFcpU6ROPorcQ1TBoYILuJGVt1kZeck7OBac2rndD9IKUg8533r
gPTZp930GF1yy9iKJHqYBDQecOWFAJ2yYIFIdHobseMneqgoNB8vnT1Xd4yFYPlG
82/Jgv0REEMo/SJg1g7WC/LKJ3nHacXwblE+K+rFqOMBFZVh61EvrRSfQh1XAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUVGnbXWbmvhxvZ2AxCuwp28IbLyswHwYDVR0j
BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2
NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NTI1MjUxLzAvMzEzMjMzMmUzOTM4
MmUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzkzODM0MzgzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAHtiAzANBgkqhkiG9w0BAQsFAAOCAQEAfur3s8cNgKeRahbfmPCzUYKdvJ3c
7vlvOJ1crbSSZNYQVNZTNofG2eytZYE/DkKabyG0L4WH+y8Xrcfs+3UpdIdTmxpW
/+xhqPJEYnUzN6XrYBl9loF+lseKRfu+wiKqVg8AFvq10cIyNzgPYHuG6wptvfV1
p+BcCeJUqmhWeJSmTDQSYVkG8HAfW9wo+c1V2SSW5rHj912MaJ7AoQAq+Kn1aqGQ
/JyLr6kTddUg4Bu3TzRalcchxKXUFUARcuXDA0Y8buniElFRYfxIEB3ucYFY5x9E
F16+ne19JXIicILdSo4yoKyyfoChkyRfD45pRrkmK5MkwC0wFgBamVeSWw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:49:50 2026 by rpki-client