Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3132382e302f32322d3234203d3e20333939313338.roa
File:                     3132342e34322e3132382e302f32322d3234203d3e20333939313338.roa (raw, json)
Hash identifier:          zjpd/tXPlhSoBD+EsuzQxFkwFjAk2Sc5iB2V56ublH0=
Subject key identifier:   25:CF:EC:71:74:F4:98:49:CF:1E:9A:14:1E:CB:40:23:69:01:C7:F5
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       2CCB0790573139089C78CA138D301342E3514598
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3132382e302f32322d3234203d3e20333939313338.roa
Signing time:             Mon 13 Jul 2026 03:46:31 +0000
ROA not before:           Mon 13 Jul 2026 03:41:31 +0000
ROA not after:            Mon 12 Jul 2027 03:46:31 +0000
asID:                     399138
IP address blocks:        124.42.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 19:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:cb:07:90:57:31:39:08:9c:78:ca:13:8d:30:13:42:e3:51:45:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Jul 13 03:41:31 2026 GMT
            Not After : Jul 12 03:46:31 2027 GMT
        Subject: CN=25CFEC7174F49849CF1E9A141ECB40236901C7F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4d:20:1b:2d:ec:f4:ee:db:af:c0:77:21:ff:
                    73:5f:c0:64:88:2e:76:b5:16:1e:22:1e:7a:d7:bc:
                    c6:d8:3b:b6:c7:28:0b:d3:fc:28:1d:99:ad:6c:53:
                    f6:d1:a2:4c:5a:e1:d7:1d:2f:a6:6c:bb:38:73:b7:
                    66:4d:11:5a:6d:fd:ce:0d:d9:ed:46:b0:3d:ac:01:
                    1c:05:4e:04:bf:63:aa:6c:33:da:d6:ac:de:9c:a7:
                    9f:71:b6:59:a2:ee:3e:26:a4:ec:8c:5a:aa:63:0e:
                    a9:76:af:80:36:b2:e8:97:ab:c9:1c:ae:a6:91:00:
                    5c:43:07:19:7d:f5:b5:78:39:6d:a5:bc:fa:4c:ab:
                    11:b5:b3:3d:42:1d:cd:a9:aa:c2:5f:58:67:ae:5f:
                    89:28:e7:ac:c8:df:1c:56:4e:dc:11:15:77:0b:11:
                    ec:88:b7:c4:37:4c:f9:38:15:e8:63:e7:77:92:ff:
                    71:1f:d1:e8:af:e2:c9:f0:d4:71:fb:9d:3c:f5:6e:
                    9a:30:68:9e:7a:44:da:48:db:03:5e:7f:df:7d:41:
                    28:7b:83:03:a1:0d:7e:48:76:83:dc:7b:71:01:d0:
                    c0:05:16:45:4c:95:da:ba:bf:19:77:86:0d:15:d7:
                    26:bf:55:91:a1:c3:78:8f:5b:52:20:d7:fb:b8:ea:
                    5c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CF:EC:71:74:F4:98:49:CF:1E:9A:14:1E:CB:40:23:69:01:C7:F5
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3132382e302f32322d3234203d3e20333939313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.42.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:2f:02:4c:fb:21:19:07:80:7d:f7:a5:6c:34:db:8b:d1:3d:
         92:89:79:e5:e7:a4:1d:f8:49:c4:6b:c8:b6:05:b9:b3:e6:6b:
         64:49:9e:5a:ce:cf:b7:33:42:f8:02:7e:2c:18:75:6c:d6:31:
         36:43:3f:ec:9c:2d:4c:dc:31:f6:e3:5c:2a:d4:9e:51:a0:93:
         2c:25:98:e7:92:e7:a2:58:b1:61:be:94:d3:2e:6b:f6:3b:f8:
         d1:0f:ef:2f:66:d0:90:30:c9:bc:c1:24:ff:5b:4f:4c:63:11:
         95:65:7c:5f:7f:cf:d5:25:d2:44:d7:e2:b3:b0:4a:ce:81:2f:
         25:97:24:d2:82:8a:1b:d2:62:ed:17:6e:85:12:2c:e2:7e:2f:
         48:fc:d6:23:01:0d:9c:7e:19:ed:ac:59:69:bf:36:bf:96:af:
         88:db:36:40:f7:fe:d0:f7:02:8d:fa:3f:f1:ac:6f:46:48:db:
         9a:de:59:7a:03:1a:90:c2:73:cf:60:9c:77:c7:21:5a:d8:4c:
         33:80:6c:f7:98:fb:d0:c1:23:2b:94:f9:81:8d:d1:3c:d1:d8:
         b5:dd:67:a6:df:35:7a:9d:43:d1:b5:29:df:5d:a7:ae:40:a2:
         2d:e1:56:c0:44:9a:eb:2b:b4:2c:b0:08:0b:71:42:7b:50:f1:
         36:88:8f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:51:44 2026 by rpki-client