Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e37322e302f32322d3234203d3e20323034373635.roa
File:                     3132332e39382e37322e302f32322d3234203d3e20323034373635.roa (raw, json)
Hash identifier:          Qkg4kzLqXJpl9AlRgGYYWDYCEXD8tTlCHo/iHTmDv+M=
Subject key identifier:   3E:9B:E3:39:96:36:90:26:E3:4C:48:21:6B:6E:4C:BE:1F:01:C0:4E
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       20DDACAC361DFD6CB9E31654631CC7D28130A23F
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e37322e302f32322d3234203d3e20323034373635.roa
Signing time:             Mon 13 Jul 2026 03:46:39 +0000
ROA not before:           Mon 13 Jul 2026 03:41:39 +0000
ROA not after:            Mon 12 Jul 2027 03:46:39 +0000
asID:                     204765
IP address blocks:        123.98.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 03:41:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:dd:ac:ac:36:1d:fd:6c:b9:e3:16:54:63:1c:c7:d2:81:30:a2:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Jul 13 03:41:39 2026 GMT
            Not After : Jul 12 03:46:39 2027 GMT
        Subject: CN=3E9BE33996369026E34C48216B6E4CBE1F01C04E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b2:f8:da:79:48:d0:4d:3f:2b:9f:fe:67:90:
                    eb:6a:ae:53:24:91:80:71:f0:6f:96:fe:43:74:7e:
                    07:ed:d7:4f:08:99:81:ef:aa:08:00:8b:4c:7a:e8:
                    09:09:43:e1:72:75:6e:db:9c:65:25:98:6c:ef:a8:
                    7d:c4:05:78:4f:b0:85:ed:ae:15:8f:bd:c1:bc:63:
                    40:c3:59:13:73:bc:c7:03:a5:11:18:63:46:fe:3c:
                    76:a6:9c:b8:c9:fb:0d:81:52:d6:62:31:c2:85:c7:
                    fb:97:09:45:97:c2:6d:50:35:2e:24:00:80:7e:e6:
                    5c:1a:31:3e:9b:3e:da:6d:51:2f:3e:f4:a5:4d:f0:
                    d7:af:c1:0b:f1:2f:9d:30:da:8f:45:e6:d9:16:1e:
                    b6:08:c0:4c:a0:2c:06:fa:14:67:d1:b7:45:2d:27:
                    ab:cb:75:02:99:3c:5d:9b:1b:8d:60:19:bf:8c:18:
                    9c:7e:7d:b5:2a:8c:5f:56:01:b0:21:d8:96:9c:7e:
                    20:e7:9d:e9:15:a2:53:16:e0:a9:c3:84:76:33:d6:
                    e5:3b:99:02:07:dc:55:e3:ac:c6:67:9f:7d:22:b4:
                    ce:19:a8:8c:a7:80:7d:0f:5a:7d:f6:fa:be:c6:1f:
                    41:8a:ba:aa:57:60:69:19:8d:4b:46:9f:77:72:f6:
                    9f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9B:E3:39:96:36:90:26:E3:4C:48:21:6B:6E:4C:BE:1F:01:C0:4E
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e37322e302f32322d3234203d3e20323034373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.98.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:8c:4b:95:30:9f:b5:93:63:19:20:ff:e2:28:ce:92:de:94:
         12:55:5e:cc:b7:3a:e5:4b:75:f8:d0:85:7b:a6:44:c2:02:0a:
         01:2f:a5:ad:8d:54:79:08:6a:30:3d:31:87:23:12:b9:44:0a:
         f3:35:2c:a4:9a:d5:20:05:ce:37:d1:61:9e:91:15:eb:8a:38:
         9a:a9:e2:64:6e:c3:1f:a3:c0:67:36:ea:ab:4c:e1:3b:74:a0:
         81:96:19:3c:ec:29:af:f0:da:df:11:2b:8e:46:4a:fc:95:86:
         42:7b:c3:9a:41:b9:90:bf:2d:c1:39:ed:2d:c0:62:5a:b0:14:
         c0:31:65:64:8f:01:77:73:fc:96:47:90:ea:f3:a6:d8:26:da:
         55:6a:98:1b:4b:e3:b6:5d:19:da:c4:8e:09:03:ba:f5:e1:cd:
         f9:87:d2:ed:1a:19:70:c1:58:fa:a7:da:90:62:f4:75:0a:fb:
         11:40:d5:7f:de:33:8b:ed:1f:9d:a3:58:61:5e:7b:17:61:cd:
         c6:69:92:72:e2:39:a8:1a:01:d6:8c:3b:c8:3f:8d:c2:aa:90:
         4d:1e:19:75:0c:85:e4:4b:75:ed:93:04:a8:07:9e:91:bc:3c:
         15:ef:ce:28:1d:b2:48:cf:40:26:e4:64:7e:ec:c0:72:30:2a:
         27:3c:a4:ae
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:34:27 2026 by rpki-client