Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3230342e302f32322d3234203d3e20333939343631.roa
File:                     3132342e34322e3230342e302f32322d3234203d3e20333939343631.roa (raw, json)
Hash identifier:          LsnbFkQ1Za/EdCHNYvRF+IAFeBDss6aKg69VvrrrfkM=
Subject key identifier:   CE:B6:C3:99:52:F5:BD:13:CD:0E:9C:6D:67:7F:50:2C:C1:66:2D:E3
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       64CC88B8677E0F7A927ACB6C3A7F834209CAC2B7
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3230342e302f32322d3234203d3e20333939343631.roa
Signing time:             Mon 13 Jul 2026 03:46:37 +0000
ROA not before:           Mon 13 Jul 2026 03:41:37 +0000
ROA not after:            Mon 12 Jul 2027 03:46:37 +0000
asID:                     399461
IP address blocks:        124.42.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:cc:88:b8:67:7e:0f:7a:92:7a:cb:6c:3a:7f:83:42:09:ca:c2:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Jul 13 03:41:37 2026 GMT
            Not After : Jul 12 03:46:37 2027 GMT
        Subject: CN=CEB6C39952F5BD13CD0E9C6D677F502CC1662DE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:55:14:80:93:b4:fc:1e:d4:83:87:e9:0f:3f:
                    2e:a7:f7:61:7c:e3:43:85:c6:2e:37:27:09:6e:a7:
                    cd:12:67:e4:41:99:47:22:9c:01:7b:80:9b:93:a9:
                    8c:1b:15:2b:63:0d:14:81:fc:74:17:dc:8b:ce:b7:
                    0d:62:b3:15:53:00:87:3b:6f:f0:29:b9:1c:b9:e0:
                    d2:8a:7a:ef:dd:01:8d:2a:1a:8b:65:99:7a:22:8b:
                    99:d8:64:cb:f1:00:f9:4b:fe:10:a9:78:fd:52:e3:
                    83:4a:35:a3:05:7c:f1:44:86:9b:90:f3:db:01:17:
                    fb:a3:03:f7:24:af:7e:ad:0f:60:6c:c2:e1:15:fc:
                    f3:5e:39:28:ac:1d:94:2e:dc:b1:d6:31:49:3c:38:
                    6f:c2:31:f1:0f:2b:c3:01:e8:df:f6:11:2a:dc:3b:
                    b5:f7:b8:a2:ab:68:7f:b0:db:5d:ae:40:dc:1c:39:
                    0a:b0:ff:2e:8a:a7:80:5b:c4:b6:d4:6c:8f:8c:9b:
                    e2:b5:e2:44:d7:ae:56:19:fb:03:33:84:44:3e:4f:
                    42:46:c4:14:f9:e5:ee:08:9e:a7:98:cb:30:79:df:
                    66:a6:bf:f7:0d:89:05:a5:93:ba:9e:b6:05:72:8f:
                    f9:0c:0b:29:f1:f8:75:fd:cb:45:f8:34:2f:fb:08:
                    34:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B6:C3:99:52:F5:BD:13:CD:0E:9C:6D:67:7F:50:2C:C1:66:2D:E3
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3230342e302f32322d3234203d3e20333939343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.42.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:82:5b:f0:00:8f:dc:57:9c:1f:1f:70:1d:e3:75:e7:84:ad:
         82:d8:b5:61:22:9c:e9:f0:00:d3:1a:13:ac:d2:69:61:cd:3c:
         b2:48:c5:10:16:c1:58:af:46:fd:88:df:69:de:01:eb:4d:dc:
         da:53:a1:c4:54:1c:f5:53:86:92:24:25:dd:1e:a5:6a:87:49:
         74:ea:06:3f:c1:f9:2a:69:49:41:f6:f6:09:dc:c4:cb:62:6d:
         13:df:86:90:0d:1c:ba:61:f9:52:47:3a:b8:af:ce:a9:bb:32:
         04:27:6a:dd:27:d8:d5:89:26:29:e8:73:bc:f6:b9:52:bd:c0:
         15:70:ea:da:63:0b:56:ec:c1:18:7d:18:3d:8a:38:06:a0:88:
         dc:e6:62:ed:b8:7a:fe:08:c3:4d:79:14:47:b8:c3:8a:36:5d:
         a6:ec:cc:66:3a:bc:58:4e:b5:a0:b4:aa:73:ad:0a:c5:52:e1:
         37:d0:1b:9f:0a:b4:af:0d:24:e7:9e:d8:05:52:b2:6b:0e:9d:
         2a:33:57:77:be:57:31:f8:14:86:16:b4:43:e2:50:11:df:3b:
         c1:a5:75:40:72:08:a2:69:68:76:02:ff:bd:fa:0a:47:7e:6e:
         ab:72:2e:d6:a9:fb:d3:3f:74:78:81:37:d8:bc:e2:ea:f7:d3:
         28:70:35:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:00:09 2026 by rpki-client