Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230342e3132382e302f31372d3137203d3e2034383038.roa
File:                     3132342e3230342e3132382e302f31372d3137203d3e2034383038.roa (raw, json)
Hash identifier:          o0TMnJF/nDjwYjEts93ozQKKrC8nDDUw1UfUimzJguU=
Subject key identifier:   A2:F4:15:A1:E1:1D:5C:F9:76:64:13:22:6E:40:D5:A5:91:6F:C1:A8
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       50882D1C3F5CD1F675BADE168735FBC38225EB2E
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230342e3132382e302f31372d3137203d3e2034383038.roa
Signing time:             Fri 05 Jun 2026 05:58:20 +0000
ROA not before:           Fri 05 Jun 2026 05:53:20 +0000
ROA not after:            Fri 04 Jun 2027 05:58:20 +0000
asID:                     4808
IP address blocks:        124.204.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:88:2d:1c:3f:5c:d1:f6:75:ba:de:16:87:35:fb:c3:82:25:eb:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: Jun  5 05:53:20 2026 GMT
            Not After : Jun  4 05:58:20 2027 GMT
        Subject: CN=A2F415A1E11D5CF9766413226E40D5A5916FC1A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7d:9a:12:20:4f:ad:c3:1b:e2:28:40:61:b4:
                    2e:02:b1:b0:3e:4a:2e:30:86:19:27:e7:3d:f1:af:
                    60:dc:7a:e7:63:e1:4f:86:50:94:59:a3:05:a3:42:
                    a3:b6:57:31:31:b8:47:ac:90:cb:44:16:4d:82:0e:
                    b6:17:25:fd:0e:30:2b:b6:e8:47:b1:61:28:a2:d4:
                    1e:1a:af:5b:c4:47:0b:23:82:dd:5a:4f:0a:cc:ef:
                    35:92:2f:fe:2a:a2:ee:20:94:2e:14:ca:9f:a5:a7:
                    d1:44:f3:e0:cc:14:7e:89:2e:b4:e1:55:9f:3f:09:
                    fe:e8:73:66:42:ab:51:9b:5f:e3:74:02:b7:00:0d:
                    b4:f5:21:ed:c7:32:3e:f8:86:cc:1a:cb:a1:25:10:
                    62:ef:b2:a2:71:dd:75:d3:a1:1c:24:1b:55:8c:80:
                    dd:46:84:f2:e7:24:fa:05:c5:14:21:a0:ec:9c:b1:
                    02:a3:4c:1f:a7:38:de:9c:e7:c6:55:8e:22:91:0d:
                    d2:59:8c:29:89:1e:11:87:25:33:88:83:65:6e:57:
                    d6:3d:2e:1d:4d:6c:f3:ab:df:79:98:5a:9a:d8:7c:
                    e5:cf:4d:1d:58:c5:ca:e5:85:ae:01:51:1c:82:36:
                    eb:27:ff:18:7f:14:76:fa:83:23:76:f3:e0:25:08:
                    da:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F4:15:A1:E1:1D:5C:F9:76:64:13:22:6E:40:D5:A5:91:6F:C1:A8
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230342e3132382e302f31372d3137203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.204.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         14:75:56:c0:43:87:25:bc:00:13:d2:ff:0a:54:0d:65:6b:7c:
         e7:72:05:91:ab:86:83:ed:4f:52:8b:86:ae:81:d7:fe:ac:a7:
         42:f7:34:47:2c:95:ce:6c:4a:51:bd:f6:e2:1f:03:7d:65:ca:
         15:08:96:ea:4a:ad:15:68:90:ea:02:f5:da:65:4b:14:0c:3e:
         84:32:6b:b7:1e:84:cc:01:cd:6b:dd:db:54:95:8d:c2:bb:25:
         06:ef:00:18:d3:af:54:c0:ef:bc:e0:41:17:81:ef:52:88:9f:
         cc:9b:b0:29:8e:1b:a1:40:90:e8:a4:89:7c:96:77:17:f8:43:
         47:c9:6e:7c:3e:0b:63:b0:e2:de:cf:8e:f2:e8:53:75:67:21:
         be:e2:b1:9c:91:ab:36:7a:a6:ca:9a:23:12:bc:04:8d:0a:24:
         27:cb:68:0d:8e:c9:0e:db:24:e2:52:b1:14:f0:f9:2b:c1:cb:
         75:bb:4f:7f:ca:2a:38:51:6e:e5:39:c0:82:e5:64:ae:aa:9e:
         69:90:1a:51:a0:03:cd:4a:20:98:04:d3:b4:54:2b:8b:d6:fb:
         55:53:33:3e:99:40:8e:a6:2a:54:a2:38:c4:b4:20:a9:74:b6:
         1f:83:6a:f8:f5:3f:78:6a:72:71:c1:62:46:54:6c:d4:6d:1a:
         0d:b9:cd:08
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:53 2026 by rpki-client