Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3132342e3234332e3139322e302f31382d3138203d3e203233373234.roa
File:                     3132342e3234332e3139322e302f31382d3138203d3e203233373234.roa (raw, json)
Hash identifier:          WHs6UMzJzk3Va9Hgo+d34cbk5tIb2qcxcVkVLl03Ug0=
Subject key identifier:   8F:29:C9:DB:D6:96:30:4F:F7:BF:18:45:7F:54:79:41:05:6C:60:F6
Certificate issuer:       /CN=51110140697A5E791546E594A2208042F4C4C6DB
Certificate serial:       7994F99348AB34C224440FAF02180F350983A571
Authority key identifier: 51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3132342e3234332e3139322e302f31382d3138203d3e203233373234.roa
Signing time:             Mon 20 Apr 2026 07:21:10 +0000
ROA not before:           Mon 20 Apr 2026 07:16:10 +0000
ROA not after:            Mon 19 Apr 2027 07:21:10 +0000
asID:                     23724
IP address blocks:        124.243.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:58:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:94:f9:93:48:ab:34:c2:24:44:0f:af:02:18:0f:35:09:83:a5:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51110140697A5E791546E594A2208042F4C4C6DB
        Validity
            Not Before: Apr 20 07:16:10 2026 GMT
            Not After : Apr 19 07:21:10 2027 GMT
        Subject: CN=8F29C9DBD696304FF7BF18457F547941056C60F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f0:ba:d8:1e:34:2f:72:da:3f:09:8a:0a:bb:
                    6d:26:95:94:bf:e4:d6:a7:06:b7:30:8a:5e:f7:b7:
                    ed:cf:65:24:91:15:9e:df:3e:17:77:c1:1e:f8:d5:
                    fc:70:a4:90:34:6a:f7:52:e8:4f:fc:ed:35:3e:5a:
                    b1:94:0d:e8:59:de:33:6b:87:f1:71:5f:4b:89:fc:
                    70:98:47:d5:f4:e1:11:df:fd:af:60:44:3b:dc:ac:
                    48:c0:7c:a3:58:ef:d8:cf:bb:8c:3d:89:0e:ad:c3:
                    56:e7:09:81:54:cf:d7:64:d9:33:01:82:78:bf:f8:
                    31:58:ef:b8:a4:f4:75:f9:29:f4:c3:3c:c4:6d:50:
                    6d:7f:55:8a:11:37:ba:c3:19:ac:7e:31:18:4a:3c:
                    3e:0d:dc:88:6b:5a:18:a8:64:b7:18:1d:ef:fc:0a:
                    80:76:90:93:c5:fb:2e:5a:b6:d1:29:b7:4e:fe:05:
                    f5:79:ff:3d:c8:69:3b:44:7b:17:85:93:b2:a1:b1:
                    fd:65:8f:e6:a4:61:cd:3f:16:25:26:39:9b:e6:f6:
                    61:28:cd:5a:fe:30:c5:4f:3d:d9:62:c9:3a:68:8d:
                    ec:da:b2:94:0d:a9:ed:26:2d:9e:15:e1:d5:5e:68:
                    c5:8b:03:f4:c6:23:c4:fe:74:36:01:80:af:7b:00:
                    00:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:29:C9:DB:D6:96:30:4F:F7:BF:18:45:7F:54:79:41:05:6C:60:F6
            X509v3 Authority Key Identifier:
                keyid:51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3132342e3234332e3139322e302f31382d3138203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.243.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a1:e7:d4:17:54:dc:05:d2:db:5f:b0:69:6b:3b:49:9e:3b:94:
         50:f9:ed:ae:22:ac:79:5d:f7:28:06:20:32:21:93:61:c4:ea:
         56:a2:87:69:7f:82:70:e4:bc:e3:1d:06:24:03:9b:2f:1b:b1:
         3d:5e:78:c4:76:0d:7b:40:7b:4d:0b:e9:82:40:b3:f4:01:03:
         f9:f6:c8:ae:e9:b1:af:7c:47:9e:6d:84:28:0c:e9:52:f8:b8:
         d5:b1:c6:1a:80:e5:9d:ce:41:c3:9d:c9:05:e6:6d:7d:d4:fc:
         85:ed:3b:db:12:0a:c6:05:c3:c3:19:01:8f:ee:2d:a2:40:db:
         8e:7e:83:c7:7e:5b:b7:95:2c:c7:62:ee:3c:e9:6f:18:ca:e9:
         0e:37:4c:e5:57:ea:3a:03:d5:3a:65:99:e7:12:66:46:66:e7:
         ea:9b:d5:23:3f:98:96:8f:35:af:3d:a8:ca:19:8b:9d:fc:0c:
         bf:e8:67:23:1c:0a:5a:c6:58:21:08:ea:fa:9a:fe:30:48:a8:
         ca:46:b4:ce:54:3e:df:1f:08:e4:21:ac:f5:e4:6b:5f:aa:45:
         a7:72:19:07:c7:bf:65:c3:f2:03:c1:14:e9:c0:af:f1:e7:63:
         6a:a2:f6:d0:00:21:38:c9:cd:7a:25:1b:ef:0b:cc:d9:9c:27:
         df:75:59:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:06:06 2026 by rpki-client