Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e342e302f32342d3234203d3e20313938343836.roa
File:                     3132332e39382e342e302f32342d3234203d3e20313938343836.roa (raw, json)
Hash identifier:          eKx5WdKwHu8QuZSfn70vzhbQYBVlC22bY8JOCFYLLnw=
Subject key identifier:   62:BC:C3:79:6F:F6:C0:C4:F1:5A:4A:CE:BC:03:80:C6:FF:37:A2:DC
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       4ED4788C72C492057DBC1A92B2080B5EC688E26F
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e342e302f32342d3234203d3e20313938343836.roa
Signing time:             Wed 06 May 2026 06:18:28 +0000
ROA not before:           Wed 06 May 2026 06:13:28 +0000
ROA not after:            Wed 05 May 2027 06:18:28 +0000
asID:                     198486
IP address blocks:        123.98.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d4:78:8c:72:c4:92:05:7d:bc:1a:92:b2:08:0b:5e:c6:88:e2:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: May  6 06:13:28 2026 GMT
            Not After : May  5 06:18:28 2027 GMT
        Subject: CN=62BCC3796FF6C0C4F15A4ACEBC0380C6FF37A2DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:43:a7:9e:b1:79:50:3c:d5:50:67:20:23:ab:
                    55:d6:a4:4f:e3:4a:f9:1a:a6:52:37:31:35:d8:93:
                    74:db:6d:1c:c7:01:71:8e:81:c0:aa:e2:69:ee:85:
                    23:e9:ef:c5:9c:d3:04:48:97:85:e4:85:d1:37:6a:
                    13:32:f4:12:e0:8a:64:85:40:97:43:a9:3d:5d:85:
                    7a:3f:bf:cb:8c:c8:c9:c5:e6:73:c7:67:7d:19:5c:
                    4c:bc:13:cb:f2:fe:f4:07:69:43:d0:0b:1b:d9:9f:
                    06:c9:1e:b7:17:ae:a6:8d:93:de:61:fe:43:85:35:
                    5c:5c:7a:73:4d:52:7b:51:a8:32:b3:d4:2d:16:00:
                    9e:12:8e:38:dd:72:29:11:fd:c7:4c:86:b7:5d:24:
                    c7:2f:47:2d:41:7c:42:9d:c7:6a:5a:78:a7:d8:f8:
                    94:18:75:0e:91:50:d6:7e:a6:68:f5:d8:b3:00:89:
                    e4:a1:cb:59:39:bd:64:5d:8e:9c:44:8f:9e:d9:0d:
                    48:9f:e9:3e:48:4d:40:2c:fe:ff:3b:8d:e3:b9:48:
                    bd:5e:fe:ee:4b:fb:9c:b0:41:57:15:47:fe:b1:04:
                    ac:39:a6:5d:3a:6d:a6:17:2d:9f:7c:b0:80:27:e2:
                    cd:7b:52:4f:c5:fd:53:c4:1c:63:19:33:95:03:57:
                    7f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BC:C3:79:6F:F6:C0:C4:F1:5A:4A:CE:BC:03:80:C6:FF:37:A2:DC
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e342e302f32342d3234203d3e20313938343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.98.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:2b:c5:3a:a0:df:76:70:15:6e:24:bb:69:9b:27:14:48:38:
         18:09:69:b8:59:4c:3d:80:fc:d8:f3:39:29:b1:45:8e:9c:f0:
         0e:89:13:2d:08:b4:44:7b:81:2f:44:9f:cb:b2:d1:ba:cc:f1:
         aa:7a:f1:ed:98:79:50:57:fe:04:61:e3:39:18:c9:53:8d:44:
         37:b6:09:00:34:1e:0f:95:30:0b:7e:eb:f9:d7:06:81:b6:d7:
         73:6c:44:7d:80:7b:c5:52:d5:85:f1:cc:8b:6c:3a:e4:86:da:
         24:99:ce:46:bd:85:c2:d8:aa:9c:0f:5f:3b:4e:7f:5a:3a:5c:
         78:ea:ea:73:96:96:b3:a5:0e:e6:d3:09:fc:d2:92:93:1f:dc:
         1e:e9:37:71:8f:7d:c0:aa:de:7f:35:3f:d3:e1:f7:7b:e6:54:
         e5:fb:38:3d:28:7b:f0:dc:de:21:bc:89:f6:ce:2c:c4:c5:d2:
         ce:b1:1e:f9:f1:b1:66:b8:6a:28:c3:a2:33:c6:2d:af:b8:3b:
         fa:6b:94:71:a5:22:5a:d5:c6:a4:ef:2a:86:3a:43:8e:7b:8e:
         70:7b:e8:1d:91:c7:fb:af:49:c3:74:61:0f:0a:5f:89:13:ee:
         2e:f9:b5:da:61:d6:96:8f:23:2f:74:91:9e:ac:46:d2:93:0d:
         8a:ad:87:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:00 2026 by rpki-client