Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e38312e302f32342d3234203d3e203233383438.roa
File:                     3132342e3139362e38312e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier:          k7Ad+32DeUSdfSXEjofKWMflYvhIsCCIDa9VeOtPjgc=
Subject key identifier:   6A:D5:B5:F9:B3:8F:D6:65:BE:4D:04:1F:E0:62:06:B3:38:C6:B7:DF
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       69FC44EC54E75FEA5ED3F4AAA5475F4C7B32EEBC
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e38312e302f32342d3234203d3e203233383438.roa
Signing time:             Thu 30 Apr 2026 06:44:53 +0000
ROA not before:           Thu 30 Apr 2026 06:39:53 +0000
ROA not after:            Thu 29 Apr 2027 06:44:53 +0000
asID:                     23848
IP address blocks:        124.196.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:fc:44:ec:54:e7:5f:ea:5e:d3:f4:aa:a5:47:5f:4c:7b:32:ee:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 30 06:39:53 2026 GMT
            Not After : Apr 29 06:44:53 2027 GMT
        Subject: CN=6AD5B5F9B38FD665BE4D041FE06206B338C6B7DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:73:c5:3e:35:d1:f4:cf:67:b5:69:52:e0:b7:
                    a9:d9:a2:1a:0d:9b:f6:4e:60:5b:99:cc:fc:17:8c:
                    f1:94:79:dd:fd:65:97:1e:e5:b2:d2:0d:c8:c9:b8:
                    6a:f9:eb:de:31:4d:3e:04:71:97:c2:0f:07:c3:23:
                    85:54:59:87:d0:9e:b3:27:6a:1a:86:f5:5b:8a:48:
                    25:86:3d:99:27:72:c6:22:94:9d:ff:68:1f:42:34:
                    c5:18:f1:85:fb:37:9c:b7:a5:9b:07:39:81:d1:3f:
                    6b:94:0f:04:ae:ca:70:5a:18:5f:dc:c4:b9:ee:bd:
                    2c:5f:a1:03:ed:9e:97:6c:25:82:d8:f2:e7:4e:11:
                    1c:18:b9:32:82:a2:4a:53:6e:63:53:20:ff:11:1f:
                    52:48:15:8b:12:1f:6f:0e:bc:bd:72:d9:63:94:3e:
                    c7:a4:60:ee:3b:b1:d5:51:37:4b:4e:ee:8f:fd:d6:
                    75:66:ee:bd:a5:fe:0b:15:04:fa:23:af:45:c4:67:
                    89:e7:32:b1:e4:e6:ad:ca:c4:e4:67:83:bd:28:a9:
                    8f:5e:73:88:d4:69:eb:36:9a:26:71:8e:74:08:22:
                    d3:bd:c3:c3:49:ae:b6:f4:f6:38:21:da:80:09:9a:
                    04:9a:1a:aa:e7:b3:13:63:12:7c:b0:d3:bf:2f:87:
                    8d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D5:B5:F9:B3:8F:D6:65:BE:4D:04:1F:E0:62:06:B3:38:C6:B7:DF
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e38312e302f32342d3234203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.196.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:22:6b:92:eb:86:be:ac:98:8c:ff:40:95:19:aa:51:4f:88:
         63:81:c9:27:d0:47:a8:b3:99:0c:94:fe:cd:37:d7:d4:f3:8b:
         d4:54:de:ab:97:9f:b9:ca:7e:c4:00:ee:a5:e5:f5:6b:e2:48:
         6c:b3:13:71:f8:ed:5f:85:a4:b3:b9:49:8c:5a:a4:ac:ea:99:
         2f:15:ce:50:4c:e5:14:6e:ec:26:50:19:4f:d0:7d:b3:eb:9b:
         b7:de:87:d5:9f:e2:73:42:dd:ca:57:d8:6a:4a:1c:3b:87:fa:
         0a:c9:bd:d1:5d:f9:87:d3:8c:ca:71:82:43:cc:7b:8e:e2:d1:
         54:67:8c:dd:10:f5:38:1e:39:87:49:86:7f:48:b9:c4:28:43:
         45:17:22:c7:86:16:d0:23:76:29:e4:e0:91:95:11:03:da:5b:
         73:e1:4d:dc:e3:13:e5:64:7f:54:72:21:2f:c9:e3:2d:41:8b:
         74:f2:a0:2d:e8:7d:48:c3:f6:a7:83:8a:ba:fc:e9:03:43:94:
         04:04:80:bf:ad:f6:ae:87:8f:88:80:b0:d9:fa:40:74:db:9d:
         6f:ad:0b:cd:98:15:a8:5b:88:82:76:e1:19:ba:48:26:1f:60:
         1d:3b:41:d1:58:9b:0d:71:0c:13:53:fa:4a:68:98:c7:28:b7:
         82:c8:5f:90
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUafxE7FTnX+pe0/SqpUdfTHsy7rwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEw
RTI3MDQyRDAeFw0yNjA0MzAwNjM5NTNaFw0yNzA0MjkwNjQ0NTNaMDMxMTAvBgNV
BAMTKDZBRDVCNUY5QjM4RkQ2NjVCRTREMDQxRkUwNjIwNkIzMzhDNkI3REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuc8U+NdH0z2e1aVLgt6nZohoN
m/ZOYFuZzPwXjPGUed39ZZce5bLSDcjJuGr5694xTT4EcZfCDwfDI4VUWYfQnrMn
ahqG9VuKSCWGPZkncsYilJ3/aB9CNMUY8YX7N5y3pZsHOYHRP2uUDwSuynBaGF/c
xLnuvSxfoQPtnpdsJYLY8udOERwYuTKCokpTbmNTIP8RH1JIFYsSH28OvL1y2WOU
PsekYO47sdVRN0tO7o/91nVm7r2l/gsVBPojr0XEZ4nnMrHk5q3KxORng70oqY9e
c4jUaes2miZxjnQIItO9w8NJrrb09jgh2oAJmgSaGqrnsxNjEnyw078vh42bAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUatW1+bOP1mW+TQQf4GIGszjGt98wHwYDVR0j
BBgwFoAU7aiEp5dI1X60k2ZwTLaoEQ4nBC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA4MzUzMjM1NTgyOTc2My8wL0VEQTg4NEE3OTc0OEQ1N0VCNDkzNjY3MDRDQjZB
ODExMEUyNzA0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEwRTI3MDQyRC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NzA4MzUzMjM1NTgyOTc2My8wLzMxMzIzNDJlMzEz
OTM2MmUzODMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM4MzQzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAHzEUTANBgkqhkiG9w0BAQsFAAOCAQEAvCJrkuuGvqyYjP9AlRmqUU+I
Y4HJJ9BHqLOZDJT+zTfX1POL1FTeq5efucp+xADupeX1a+JIbLMTcfjtX4Wks7lJ
jFqkrOqZLxXOUEzlFG7sJlAZT9B9s+ubt96H1Z/ic0LdylfYakocO4f6Csm90V35
h9OMynGCQ8x7juLRVGeM3RD1OB45h0mGf0i5xChDRRcix4YW0CN2KeTgkZURA9pb
c+FN3OMT5WR/VHIhL8njLUGLdPKgLeh9SMP2p4OKuvzpA0OUBASAv632roePiICw
2fpAdNudb60LzZgVqFuIgnbhGbpIJh9gHTtB0VibDXEME1P6SmiYxyi3gshfkA==
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:29 2026 by rpki-client