Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e38302e302f32342d3234203d3e203233383438.roa
File:                     3132342e3139362e38302e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier:          lcA57cFFCExBZmKuI9rjz5jawmIrDiF9X64Fn5OwYPY=
Subject key identifier:   52:58:55:74:7D:66:49:C7:49:1E:52:0E:A6:43:5B:A4:25:E9:1F:01
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       5516E5616BC4A4EB564A1853751E5C74D8DDE371
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e38302e302f32342d3234203d3e203233383438.roa
Signing time:             Thu 30 Apr 2026 06:44:53 +0000
ROA not before:           Thu 30 Apr 2026 06:39:53 +0000
ROA not after:            Thu 29 Apr 2027 06:44:53 +0000
asID:                     23848
IP address blocks:        124.196.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:16:e5:61:6b:c4:a4:eb:56:4a:18:53:75:1e:5c:74:d8:dd:e3:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 30 06:39:53 2026 GMT
            Not After : Apr 29 06:44:53 2027 GMT
        Subject: CN=525855747D6649C7491E520EA6435BA425E91F01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4a:ab:71:db:fb:1b:f5:bf:17:39:90:8e:6b:
                    62:34:09:6d:22:0f:ad:66:fc:38:cb:1d:22:35:a1:
                    14:8c:5f:85:cc:45:a6:11:17:7c:05:dc:bd:71:4a:
                    b1:08:a7:2c:12:d5:76:93:0c:36:4f:73:12:ee:83:
                    11:34:ca:f3:df:8b:f1:63:93:86:2d:d7:4a:b2:66:
                    d4:c2:af:af:4a:d8:00:b6:4d:89:24:66:5e:63:fd:
                    76:3a:f3:02:8b:a9:b6:b8:3e:92:47:30:62:33:07:
                    15:1f:88:8e:fa:af:66:63:c0:c7:9c:2d:d9:18:c0:
                    b6:de:ea:77:c4:73:84:e9:15:73:15:16:b3:fa:5a:
                    e3:66:bb:f8:f2:49:cc:17:4b:78:5f:9c:69:14:57:
                    cf:1c:93:39:c8:c2:eb:67:7a:5d:d9:b9:1a:30:41:
                    6c:9b:b4:62:f4:c0:aa:0f:f2:b3:55:39:44:b3:98:
                    cb:38:db:e1:80:6c:09:b2:2a:90:b3:35:c8:44:f7:
                    d4:c8:16:16:92:88:da:e1:1d:20:6f:e6:22:bc:19:
                    f9:ea:97:c0:44:73:13:e2:06:18:3d:d4:1c:9f:43:
                    ad:2b:9e:1c:89:37:06:a6:a4:4a:bc:8e:9d:a4:b4:
                    ae:5a:b7:e3:3b:d7:ab:d0:17:12:5f:d3:d2:38:23:
                    21:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:58:55:74:7D:66:49:C7:49:1E:52:0E:A6:43:5B:A4:25:E9:1F:01
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e38302e302f32342d3234203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.196.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:47:88:80:77:f5:21:22:36:93:60:a6:20:a2:7b:e1:2f:08:
         74:33:24:a2:1f:0e:aa:5d:1d:cc:2d:59:c3:b9:6d:ff:5d:fe:
         ef:d8:ea:41:24:7b:2f:5c:95:82:0d:01:47:ea:58:64:9c:65:
         ab:da:4a:a9:d0:d0:cc:02:02:b3:1e:c3:70:7a:77:59:bc:b3:
         41:10:01:8c:9d:b6:85:98:77:35:2a:95:80:21:27:e7:e3:cb:
         ec:8b:7a:61:5b:b3:55:99:a7:34:2d:bc:7f:74:d6:30:ff:75:
         e6:5c:d6:80:08:19:b5:54:70:30:6f:e5:4a:67:2a:40:66:4b:
         b9:fe:31:64:b2:17:fa:9b:af:03:8b:e8:c5:34:10:b4:88:c7:
         f6:98:50:76:02:6e:bc:80:e8:fa:4f:86:2e:fa:41:ca:18:55:
         92:07:a7:0a:fd:b9:38:e0:bf:42:0a:be:cb:df:b8:40:cb:5b:
         2f:44:ac:de:92:6a:26:1b:e8:35:d3:da:0c:de:3e:a1:01:9a:
         ed:7b:68:e2:f4:73:10:4e:6e:bf:5f:2d:5c:8e:f9:73:ba:48:
         0b:6d:36:57:7a:18:ab:a7:bd:8d:d2:56:b4:04:be:96:06:ae:
         0e:4a:95:36:b7:30:2f:49:18:9c:ac:ff:52:24:e9:fd:6d:ba:
         b2:97:9f:4b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:10 2026 by rpki-client