Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e38332e302f32342d3234203d3e203233383438.roa
File:                     3132342e3139362e38332e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier:          PFJ7fHbPkbUBNOTk9PjLuzXpgmV5EbxiWkvM12UrRSE=
Subject key identifier:   F8:B7:4C:48:B3:EB:2C:41:43:C6:3F:BA:A7:5D:7D:C7:BD:5B:7F:69
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       6D2901CCA8E8C48D421EF5D2B53458E50BA8E27C
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e38332e302f32342d3234203d3e203233383438.roa
Signing time:             Thu 30 Apr 2026 06:44:53 +0000
ROA not before:           Thu 30 Apr 2026 06:39:53 +0000
ROA not after:            Thu 29 Apr 2027 06:44:53 +0000
asID:                     23848
IP address blocks:        124.196.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:29:01:cc:a8:e8:c4:8d:42:1e:f5:d2:b5:34:58:e5:0b:a8:e2:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 30 06:39:53 2026 GMT
            Not After : Apr 29 06:44:53 2027 GMT
        Subject: CN=F8B74C48B3EB2C4143C63FBAA75D7DC7BD5B7F69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:21:da:63:71:df:63:75:f5:bd:7e:df:16:43:
                    58:7c:61:f8:9e:df:62:4d:4e:08:e6:e2:32:58:fc:
                    3b:a2:12:f0:e3:ec:84:6e:52:b2:0c:b3:c0:3f:41:
                    d0:19:24:45:6a:00:05:a4:0e:51:69:73:8a:ab:f7:
                    03:b5:60:b9:ad:97:e2:fa:b6:c9:f9:20:5d:b8:b2:
                    10:59:06:3e:40:5a:de:13:15:7c:78:a3:1f:46:07:
                    ed:4a:a1:41:fc:8f:39:7d:a4:ec:ab:40:80:16:bc:
                    e3:4a:79:2a:a0:bc:2d:4f:a3:32:b4:19:7a:31:d8:
                    e0:a5:29:f9:01:d3:f8:92:d1:a2:d3:44:f3:63:e1:
                    8f:d5:1e:81:cb:5f:57:ca:e4:78:6e:b2:3f:13:30:
                    87:ca:e2:bb:9f:46:5a:5e:32:ac:60:78:52:ef:bc:
                    4b:85:ff:c2:f0:41:7e:13:f3:07:f4:cf:97:23:df:
                    e6:53:34:a2:41:7f:7d:52:a8:93:86:f5:99:10:bc:
                    bd:90:b7:c2:6c:5a:85:a7:ae:73:35:3f:6f:22:60:
                    30:f7:3a:45:f8:ff:f6:b8:29:79:05:8d:66:25:54:
                    71:91:e6:e2:73:5e:c4:01:12:c9:56:5a:d4:0a:8a:
                    17:b2:c8:bb:f2:a3:7a:60:86:a4:f6:60:77:55:31:
                    44:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B7:4C:48:B3:EB:2C:41:43:C6:3F:BA:A7:5D:7D:C7:BD:5B:7F:69
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e38332e302f32342d3234203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.196.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:5f:e7:d8:8b:a7:2d:a4:fb:8e:cd:70:4c:cd:9d:6a:aa:50:
         88:b8:7c:01:db:d7:d7:6e:55:d5:bd:a0:6c:f5:8b:49:97:32:
         cc:14:68:b3:9e:ce:17:c3:05:1c:d3:ec:a0:09:53:d1:f1:3a:
         31:50:75:d7:d7:c3:80:e7:e4:53:49:4e:7c:e3:af:64:ae:f9:
         48:a0:98:ba:63:70:c7:fb:4d:8c:87:16:f1:5d:dd:08:84:b7:
         63:10:f5:75:17:89:04:9f:77:84:11:f4:59:54:bd:8f:0f:98:
         fa:2d:40:8d:05:01:59:72:df:b0:d8:c7:67:e6:fb:06:dc:ac:
         eb:31:41:79:4f:7b:f1:bc:b0:88:46:14:7a:98:25:c2:dc:4c:
         a1:5a:09:89:8a:33:97:35:eb:4d:94:58:db:16:fd:9f:0c:e8:
         5a:69:05:c0:fa:9f:50:69:44:5a:1d:1f:fc:f6:22:82:10:e4:
         36:77:c1:7f:b0:c1:af:7a:16:02:c9:e7:81:73:79:6d:fe:5e:
         a9:aa:3f:4e:dc:a3:96:3e:58:7c:4a:bf:4e:f5:74:28:06:f0:
         c0:99:b7:f8:61:88:ad:98:a1:52:54:89:29:da:af:14:ba:f1:
         a6:60:6c:e2:f5:1b:69:23:54:a0:04:df:64:ae:94:94:f4:20:
         c8:16:c9:19
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUbSkBzKjoxI1CHvXStTRY5Quo4nwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEw
RTI3MDQyRDAeFw0yNjA0MzAwNjM5NTNaFw0yNzA0MjkwNjQ0NTNaMDMxMTAvBgNV
BAMTKEY4Qjc0QzQ4QjNFQjJDNDE0M0M2M0ZCQUE3NUQ3REM3QkQ1QjdGNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIIdpjcd9jdfW9ft8WQ1h8Yfie
32JNTgjm4jJY/DuiEvDj7IRuUrIMs8A/QdAZJEVqAAWkDlFpc4qr9wO1YLmtl+L6
tsn5IF24shBZBj5AWt4TFXx4ox9GB+1KoUH8jzl9pOyrQIAWvONKeSqgvC1PozK0
GXox2OClKfkB0/iS0aLTRPNj4Y/VHoHLX1fK5Hhusj8TMIfK4rufRlpeMqxgeFLv
vEuF/8LwQX4T8wf0z5cj3+ZTNKJBf31SqJOG9ZkQvL2Qt8JsWoWnrnM1P28iYDD3
OkX4//a4KXkFjWYlVHGR5uJzXsQBEslWWtQKiheyyLvyo3pghqT2YHdVMUQFAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU+LdMSLPrLEFDxj+6p119x71bf2kwHwYDVR0j
BBgwFoAU7aiEp5dI1X60k2ZwTLaoEQ4nBC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA4MzUzMjM1NTgyOTc2My8wL0VEQTg4NEE3OTc0OEQ1N0VCNDkzNjY3MDRDQjZB
ODExMEUyNzA0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEwRTI3MDQyRC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NzA4MzUzMjM1NTgyOTc2My8wLzMxMzIzNDJlMzEz
OTM2MmUzODMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM4MzQzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAHzEUzANBgkqhkiG9w0BAQsFAAOCAQEAAl/n2IunLaT7js1wTM2daqpQ
iLh8AdvX125V1b2gbPWLSZcyzBRos57OF8MFHNPsoAlT0fE6MVB119fDgOfkU0lO
fOOvZK75SKCYumNwx/tNjIcW8V3dCIS3YxD1dReJBJ93hBH0WVS9jw+Y+i1AjQUB
WXLfsNjHZ+b7Btys6zFBeU978bywiEYUepglwtxMoVoJiYozlzXrTZRY2xb9nwzo
WmkFwPqfUGlEWh0f/PYighDkNnfBf7DBr3oWAsnngXN5bf5eqao/Ttyjlj5YfEq/
TvV0KAbwwJm3+GGIrZihUlSJKdqvFLrxpmBs4vUbaSNUoATfZK6UlPQgyBbJGQ==
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:09 2026 by rpki-client