Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e38342e302f32342d3234203d3e203233383438.roa
File:                     3132342e3139362e38342e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier:          iOAQTfTjvOWzddmjAQ5ET/CStaheNlvOZamexCsZKyc=
Subject key identifier:   27:2C:1D:2C:46:04:10:F6:0C:18:AB:B8:CA:4B:09:C8:C6:DE:58:F4
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       2063C284A02E0A93C674F3C4F0EE756CC0B7D0FF
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e38342e302f32342d3234203d3e203233383438.roa
Signing time:             Thu 30 Apr 2026 06:44:53 +0000
ROA not before:           Thu 30 Apr 2026 06:39:53 +0000
ROA not after:            Thu 29 Apr 2027 06:44:53 +0000
asID:                     23848
IP address blocks:        124.196.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:63:c2:84:a0:2e:0a:93:c6:74:f3:c4:f0:ee:75:6c:c0:b7:d0:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 30 06:39:53 2026 GMT
            Not After : Apr 29 06:44:53 2027 GMT
        Subject: CN=272C1D2C460410F60C18ABB8CA4B09C8C6DE58F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ef:fe:0c:da:ba:80:e1:b6:ca:33:72:33:56:
                    74:e9:0b:cf:43:30:69:b9:20:03:47:70:c1:4a:47:
                    12:6d:0f:18:71:d4:17:ea:44:9b:92:bc:78:07:f6:
                    ed:48:b9:d4:b2:90:ed:3a:e8:7c:3f:bc:24:ba:1e:
                    67:bc:5a:77:4f:b1:1f:d7:2a:1c:bb:f2:c3:51:01:
                    da:fd:34:14:f0:25:17:3f:60:cc:80:44:6c:b8:88:
                    3f:74:ce:47:74:d6:63:e2:26:07:45:cd:65:78:52:
                    ab:af:58:83:23:65:b7:4b:c7:74:da:ee:cb:1e:43:
                    7c:03:25:c8:8a:85:51:ef:e4:b8:a7:ab:0f:c8:ac:
                    59:b8:c9:fc:40:6e:53:5e:a5:2a:5a:e0:f3:82:a7:
                    53:cd:2a:a2:62:24:08:5c:49:90:28:8a:06:b4:96:
                    b4:2f:56:41:cf:51:0f:68:ee:76:cc:57:be:ca:9f:
                    81:03:15:22:8c:9c:bd:84:92:43:56:a6:94:21:2f:
                    90:cc:c9:4f:54:0c:f8:7b:0c:c7:4d:82:c1:7e:ea:
                    81:6b:45:f1:98:0a:9c:cd:71:11:99:78:6f:88:e4:
                    70:e8:ba:3c:f9:d3:b5:51:8e:78:1c:61:ad:7d:34:
                    3b:6c:81:db:e7:69:38:48:f4:bb:e5:93:04:a5:dc:
                    56:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2C:1D:2C:46:04:10:F6:0C:18:AB:B8:CA:4B:09:C8:C6:DE:58:F4
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e38342e302f32342d3234203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.196.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:28:74:70:08:66:ed:9e:e7:8d:dc:62:4d:11:04:ce:10:fd:
         38:db:95:73:67:b0:8c:e9:30:9e:73:cf:02:8c:5c:82:a7:88:
         62:ba:bc:ff:4c:b4:86:3e:4e:90:55:4f:93:63:42:fc:bc:bb:
         af:98:6a:df:43:fa:85:da:19:3e:a3:86:3c:48:d0:76:6b:9a:
         75:77:2d:81:62:3e:e3:12:bd:a6:b1:b5:99:e8:93:69:19:72:
         56:1d:81:95:3a:1f:47:45:55:d0:20:4e:dc:29:32:ef:41:fc:
         c2:66:51:7f:3f:be:77:06:3d:4b:89:d9:bc:0e:51:91:bc:6a:
         cb:9e:63:63:9a:ed:2b:15:6c:c2:8b:21:9d:43:a2:93:d4:51:
         65:2f:ca:83:c6:d4:90:7b:28:2d:c1:0d:96:49:b2:a3:aa:4d:
         b1:7c:67:a6:bd:af:f7:b6:0b:60:ca:5b:50:ef:a2:3e:ee:b3:
         3e:65:13:4e:4c:b7:51:b4:e1:84:a1:43:92:20:86:d8:23:f0:
         eb:20:b3:54:9b:3b:de:13:cd:07:2a:5f:58:89:dc:1f:5a:aa:
         bf:0b:05:aa:76:f6:15:74:28:4d:cf:49:73:1f:7e:9f:c3:74:
         7a:3f:1b:d4:5a:c2:c4:e1:bf:ae:c7:87:19:29:cb:38:9c:9d:
         66:88:8e:52
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUIGPChKAuCpPGdPPE8O51bMC30P8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEw
RTI3MDQyRDAeFw0yNjA0MzAwNjM5NTNaFw0yNzA0MjkwNjQ0NTNaMDMxMTAvBgNV
BAMTKDI3MkMxRDJDNDYwNDEwRjYwQzE4QUJCOENBNEIwOUM4QzZERTU4RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN7/4M2rqA4bbKM3IzVnTpC89D
MGm5IANHcMFKRxJtDxhx1BfqRJuSvHgH9u1IudSykO066Hw/vCS6Hme8WndPsR/X
Khy78sNRAdr9NBTwJRc/YMyARGy4iD90zkd01mPiJgdFzWV4UquvWIMjZbdLx3Ta
7sseQ3wDJciKhVHv5Linqw/IrFm4yfxAblNepSpa4POCp1PNKqJiJAhcSZAoiga0
lrQvVkHPUQ9o7nbMV77Kn4EDFSKMnL2EkkNWppQhL5DMyU9UDPh7DMdNgsF+6oFr
RfGYCpzNcRGZeG+I5HDoujz507VRjngcYa19NDtsgdvnaThI9LvlkwSl3FZ9AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUJywdLEYEEPYMGKu4yksJyMbeWPQwHwYDVR0j
BBgwFoAU7aiEp5dI1X60k2ZwTLaoEQ4nBC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA4MzUzMjM1NTgyOTc2My8wL0VEQTg4NEE3OTc0OEQ1N0VCNDkzNjY3MDRDQjZB
ODExMEUyNzA0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEwRTI3MDQyRC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NzA4MzUzMjM1NTgyOTc2My8wLzMxMzIzNDJlMzEz
OTM2MmUzODM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM4MzQzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAHzEVDANBgkqhkiG9w0BAQsFAAOCAQEAfCh0cAhm7Z7njdxiTREEzhD9
ONuVc2ewjOkwnnPPAoxcgqeIYrq8/0y0hj5OkFVPk2NC/Ly7r5hq30P6hdoZPqOG
PEjQdmuadXctgWI+4xK9prG1meiTaRlyVh2BlTofR0VV0CBO3Cky70H8wmZRfz++
dwY9S4nZvA5Rkbxqy55jY5rtKxVswoshnUOik9RRZS/Kg8bUkHsoLcENlkmyo6pN
sXxnpr2v97YLYMpbUO+iPu6zPmUTTky3UbThhKFDkiCG2CPw6yCzVJs73hPNBypf
WIncH1qqvwsFqnb2FXQoTc9Jcx9+n8N0ej8b1FrCxOG/rseHGSnLOJydZoiOUg==
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:09 2026 by rpki-client