Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3139332e302e302f31362d3136203d3e2034383437.roa
File:                     3132342e3139332e302e302f31362d3136203d3e2034383437.roa (raw, json)
Hash identifier:          QZILAK079ijqABz0TBqQDZgBWTA6eHvzh8prCTuxo80=
Subject key identifier:   30:78:48:B0:2D:7A:44:91:ED:B3:48:A3:93:F0:C9:C8:ED:79:6F:8D
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       11793DE30F5ED477745726AFE95BB08BDCAD9249
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3139332e302e302f31362d3136203d3e2034383437.roa
Signing time:             Mon 18 May 2026 02:40:15 +0000
ROA not before:           Mon 18 May 2026 02:35:15 +0000
ROA not after:            Mon 17 May 2027 02:40:15 +0000
asID:                     4847
IP address blocks:        124.193.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:79:3d:e3:0f:5e:d4:77:74:57:26:af:e9:5b:b0:8b:dc:ad:92:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: May 18 02:35:15 2026 GMT
            Not After : May 17 02:40:15 2027 GMT
        Subject: CN=307848B02D7A4491EDB348A393F0C9C8ED796F8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e6:07:f0:e0:2b:67:84:64:64:eb:ea:10:5c:
                    a7:b2:ab:7e:65:d8:56:2f:c0:24:67:92:59:a9:4c:
                    4d:d6:14:d7:0b:c1:e6:cd:aa:8b:91:17:61:77:b8:
                    4c:08:9f:c2:1b:8c:c5:d7:6b:db:54:44:9e:9e:b2:
                    6f:bd:9e:50:78:46:90:84:65:74:e1:48:7c:b4:80:
                    90:68:8e:14:d3:54:6a:97:ce:c8:10:bf:48:6a:af:
                    38:7f:92:1a:09:32:ba:bc:9e:bd:12:6b:77:96:72:
                    e6:f3:c8:bb:0f:40:60:4a:98:f9:0c:ac:89:df:3a:
                    87:a6:e1:00:d9:4a:f2:3f:9b:8b:70:92:1c:98:19:
                    7b:02:c2:80:2d:24:39:8f:af:f2:22:5c:cd:dc:37:
                    50:a0:d4:c4:15:5f:ff:09:a6:08:fb:2b:a0:38:b2:
                    8b:1c:36:45:0a:7b:94:a0:75:8a:f1:f4:28:fa:3a:
                    05:69:b4:6b:13:30:a7:c8:07:d3:c7:74:60:99:9f:
                    df:91:4a:3b:c0:00:70:68:44:11:7c:28:6b:bb:b1:
                    cd:74:a4:dc:c1:e6:53:ed:d8:da:0e:a7:1a:5e:4f:
                    06:be:59:eb:d1:7c:f7:48:f5:85:f7:51:57:82:eb:
                    87:d9:87:29:72:bc:f5:9d:e3:1d:88:60:f3:a8:48:
                    f8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:78:48:B0:2D:7A:44:91:ED:B3:48:A3:93:F0:C9:C8:ED:79:6F:8D
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3139332e302e302f31362d3136203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.193.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7c:eb:b1:6a:69:be:ba:1f:b4:7e:0a:83:4e:8e:aa:64:ff:2a:
         21:b0:84:97:27:c9:32:1c:1d:cb:36:7b:e9:fb:99:1f:17:97:
         ed:47:50:0b:cc:43:e8:75:f9:20:5b:d9:a4:db:1f:c2:4b:fe:
         9a:f8:dc:f3:5f:c7:a5:d3:da:d4:c7:2e:b3:7c:06:0a:e3:f8:
         58:5a:6b:52:57:ee:97:2e:37:ae:8e:2d:54:92:ca:c6:00:8c:
         ad:59:6e:9d:ca:2a:fe:5c:57:b5:8e:f9:ec:2d:b3:97:ae:db:
         0f:7a:21:ed:3d:ef:0a:d3:ce:c9:dc:6a:9c:2e:f9:b3:f1:4f:
         0f:a2:50:6e:d2:35:92:91:50:70:58:d2:39:03:36:46:79:49:
         fe:f1:a4:12:a2:c9:08:ab:fe:85:a2:01:12:46:c8:15:79:75:
         8f:8e:8a:f2:41:73:ae:2b:aa:c3:f6:c7:fb:87:27:73:b1:2f:
         dc:65:43:40:1a:8f:26:14:ff:f2:8e:3a:92:d6:1c:80:08:e8:
         1c:e2:2e:42:db:9d:82:4a:c2:b6:de:20:6b:c3:3e:ca:9e:a3:
         2c:0c:ae:95:dc:86:c6:ef:7f:d2:bc:72:cd:f3:5d:c2:94:a5:
         82:c2:69:86:0d:ee:57:96:8c:6e:a0:dd:41:d4:91:87:4c:fd:
         72:9d:71:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:33 2026 by rpki-client