Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e38322e302f32342d3234203d3e203233383438.roa
File:                     3132342e3139362e38322e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier:          LEpsaCTGVAGfOf6pkT/XoEcG0hsG725ybJ6T7XeIsCY=
Subject key identifier:   E7:BD:58:D4:6E:37:24:5B:93:BC:C5:9E:AD:30:03:59:30:12:55:0F
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       5D187A243AF5DFDFAE5083A3DB4280ED51733823
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e38322e302f32342d3234203d3e203233383438.roa
Signing time:             Thu 30 Apr 2026 06:44:53 +0000
ROA not before:           Thu 30 Apr 2026 06:39:53 +0000
ROA not after:            Thu 29 Apr 2027 06:44:53 +0000
asID:                     23848
IP address blocks:        124.196.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:18:7a:24:3a:f5:df:df:ae:50:83:a3:db:42:80:ed:51:73:38:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 30 06:39:53 2026 GMT
            Not After : Apr 29 06:44:53 2027 GMT
        Subject: CN=E7BD58D46E37245B93BCC59EAD3003593012550F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c7:40:c5:0e:a3:3d:21:ed:8c:66:23:ae:c9:
                    9a:1f:e0:34:8a:52:9b:25:b7:c7:3e:66:0c:3e:7a:
                    a8:d7:42:ec:d5:1b:ad:a9:9c:b3:6d:22:12:0e:11:
                    91:85:27:af:7e:13:12:88:4d:47:d9:21:e2:ec:e1:
                    6c:34:82:25:0f:1b:ec:53:fa:f2:74:de:21:28:fa:
                    91:24:cd:71:3a:e8:5b:60:6f:6a:14:96:1c:d7:f8:
                    eb:d8:a1:3e:35:a7:fd:0b:04:a5:49:0e:1c:d9:fe:
                    02:56:9d:c3:ff:3d:40:ae:3c:65:f5:b6:9e:51:ce:
                    cc:62:20:5d:c9:53:e3:a8:d1:82:b6:b5:e1:33:0a:
                    07:67:ad:b4:0f:49:45:ea:80:81:e6:15:53:93:8e:
                    ed:88:92:e3:fe:96:df:db:3a:3e:0e:47:6a:43:a4:
                    4d:02:91:ff:43:6d:1c:47:4e:da:e5:f4:54:4b:86:
                    1f:0e:0f:ba:b5:f7:41:fd:0c:2b:1e:bc:03:d8:c7:
                    ff:4b:87:89:b5:50:50:b4:8b:8c:8a:8f:55:9c:9b:
                    02:90:8b:6d:08:e5:6e:fe:2c:a9:4b:c0:70:b7:f0:
                    d0:76:8f:f4:2e:58:2e:05:5b:70:5a:8c:43:4f:f4:
                    b7:ca:21:b4:a5:f5:37:ac:de:e5:9f:44:29:34:24:
                    1e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BD:58:D4:6E:37:24:5B:93:BC:C5:9E:AD:30:03:59:30:12:55:0F
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e38322e302f32342d3234203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.196.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:75:6a:80:bd:2f:4a:f5:0b:4b:c5:32:a9:a2:4a:e9:2f:19:
         b3:97:94:0b:fb:fc:1e:50:29:7e:2a:e3:fd:b8:b1:50:c7:6a:
         cd:32:ca:0d:32:e8:dc:a7:f0:35:71:d2:0c:a3:0a:7a:13:2a:
         e8:cc:03:26:28:84:82:93:e3:ac:5a:4f:2c:2a:71:b9:48:b8:
         51:ce:1e:48:f0:6d:9f:30:e9:e1:1a:cc:b8:b2:4f:59:84:f6:
         68:6a:7a:9d:3d:49:e2:c1:2e:64:e1:9a:67:d7:7b:45:c9:a2:
         e2:08:5b:21:f0:0d:17:bf:eb:47:4d:bc:e2:68:91:4f:b6:cb:
         7c:87:13:07:7a:4d:26:d2:ee:55:a3:c2:8d:77:3d:44:7b:65:
         00:d0:be:29:12:10:c2:14:c7:c8:75:79:d3:be:21:9c:3c:03:
         0e:14:4d:04:7f:8d:87:b0:56:f7:b9:2d:89:6c:8b:f2:da:cb:
         ba:f4:62:43:a9:6d:92:14:79:9c:41:0e:f8:e3:5a:9a:7b:a4:
         97:91:ab:44:7f:e8:70:4a:65:7a:68:26:5a:8b:5d:29:f8:b6:
         3d:81:14:39:c5:38:89:5c:bc:04:1b:ab:80:76:c9:d6:b0:ae:
         b2:b5:65:74:01:70:25:df:87:01:39:58:00:0c:9e:6e:3b:67:
         c0:6a:20:a8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:27 2026 by rpki-client