Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e302e302f31392d3139203d3e203538383334.roa
File:                     3132342e3234302e302e302f31392d3139203d3e203538383334.roa (raw, json)
Hash identifier:          ADSwHNSbXS8pC/lk7fi6gCrIoe7AoXRxvOdx+o5NV2U=
Subject key identifier:   8B:3B:D5:EC:AA:7F:4D:A9:03:04:F0:3B:1C:AB:7E:7E:47:F6:E3:08
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       292E34D9015AE49516799C65C7077FF3713A81D3
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e302e302f31392d3139203d3e203538383334.roa
Signing time:             Fri 29 May 2026 08:04:08 +0000
ROA not before:           Fri 29 May 2026 07:59:08 +0000
ROA not after:            Fri 28 May 2027 08:04:08 +0000
asID:                     58834
IP address blocks:        124.240.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2e:34:d9:01:5a:e4:95:16:79:9c:65:c7:07:7f:f3:71:3a:81:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: May 29 07:59:08 2026 GMT
            Not After : May 28 08:04:08 2027 GMT
        Subject: CN=8B3BD5ECAA7F4DA90304F03B1CAB7E7E47F6E308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:36:31:08:fe:22:f0:93:25:c3:f2:ea:d0:12:
                    3d:ef:43:0a:21:fc:e2:1c:97:f7:ed:6d:d4:1e:a7:
                    af:4f:2c:c2:e9:5b:1b:60:4a:3b:d9:40:2d:de:f9:
                    03:54:e2:27:33:eb:26:05:ab:f7:33:0b:30:8b:be:
                    83:a4:4b:0e:4e:d5:4a:2c:97:3c:50:11:e8:15:13:
                    42:bb:62:1c:48:6a:8b:80:b0:64:32:3b:a7:30:ba:
                    ae:1c:fc:cd:89:77:51:37:da:a9:08:30:34:95:ec:
                    e4:5b:a8:93:cc:49:13:d7:61:08:0f:d8:77:57:6e:
                    f4:61:53:d5:89:06:5c:af:73:bc:ca:78:db:e0:68:
                    91:d5:d5:cd:81:50:38:36:fd:3b:44:69:33:13:bc:
                    6c:c2:be:0d:7a:42:c3:a7:10:bc:65:a7:45:87:89:
                    42:3d:02:fe:72:c9:8c:ca:91:1e:92:29:fd:52:f7:
                    55:57:5f:d1:59:e9:30:49:7a:e3:07:58:96:e5:96:
                    c7:07:5d:45:10:be:f7:35:cd:62:66:6e:1c:ad:39:
                    03:ea:7d:9b:9f:a7:c4:94:83:b4:a6:91:ae:43:fe:
                    cb:bf:76:b1:f8:0f:ac:90:f6:85:96:e2:32:30:d7:
                    27:ab:5a:5f:a3:c6:23:93:95:dd:4b:f4:c0:ae:57:
                    04:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3B:D5:EC:AA:7F:4D:A9:03:04:F0:3B:1C:AB:7E:7E:47:F6:E3:08
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e302e302f31392d3139203d3e203538383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.240.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         62:0a:2e:c9:3a:04:d8:ee:a7:e1:03:9b:b1:69:ea:1e:f6:b9:
         f9:3d:e7:d3:8e:21:d2:34:47:5b:42:6e:65:07:e6:ef:58:a8:
         46:d2:8a:3e:a0:9c:bb:d8:80:cc:25:3e:a6:f1:36:8b:25:09:
         28:fa:27:eb:7d:26:5a:8d:26:21:1e:46:b2:72:3e:0e:fc:86:
         bf:60:e8:62:df:2c:e7:51:42:f4:81:b0:4c:0a:f2:84:c8:32:
         6c:cd:0b:81:92:69:84:ee:61:81:73:ba:67:a0:e3:c0:e3:17:
         6e:63:de:65:bc:8c:c8:fe:69:02:23:dd:52:dd:35:75:03:74:
         88:c4:90:48:b5:a0:50:b3:06:b3:2f:33:e8:a2:24:8e:63:f5:
         27:a1:e9:db:cf:23:d2:71:fa:50:4f:9d:94:01:86:e9:1c:69:
         c1:8a:24:da:f1:f3:40:cf:ae:da:d6:db:0b:22:4b:87:9a:ea:
         ee:6c:04:9b:40:68:f3:0e:e7:8a:d1:1e:96:ef:55:12:47:ec:
         9d:1b:86:6d:7d:35:4d:d8:87:d8:e6:1d:30:a2:73:9b:8a:8d:
         8f:0d:a1:6d:4e:5e:ed:cc:01:38:3f:a4:04:49:e2:d4:eb:71:
         41:07:fd:16:ee:2b:f1:fd:4f:94:cc:1c:32:d8:e6:b0:b4:0f:
         b2:68:b1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:55:56 2026 by rpki-client