Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e34382e302f32302d3230203d3e203538383334.roa
File:                     3132342e3234302e34382e302f32302d3230203d3e203538383334.roa (raw, json)
Hash identifier:          0SoM3qrWOtZ+njUiwUMdllZyHNafRUEizLFpN3wYU/A=
Subject key identifier:   39:09:0A:AE:3D:AC:5C:6F:17:4F:7D:A6:32:60:24:EE:3F:CC:C9:05
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       4271344A55ABA36AFDEAC8BBDE364BC55B0552F9
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e34382e302f32302d3230203d3e203538383334.roa
Signing time:             Mon 13 Apr 2026 03:17:58 +0000
ROA not before:           Mon 13 Apr 2026 03:12:58 +0000
ROA not after:            Mon 12 Apr 2027 03:17:58 +0000
asID:                     58834
IP address blocks:        124.240.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:71:34:4a:55:ab:a3:6a:fd:ea:c8:bb:de:36:4b:c5:5b:05:52:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Apr 13 03:12:58 2026 GMT
            Not After : Apr 12 03:17:58 2027 GMT
        Subject: CN=39090AAE3DAC5C6F174F7DA6326024EE3FCCC905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:aa:9e:33:55:88:cc:6c:73:29:05:f0:14:23:
                    41:3d:d0:51:e4:b8:11:63:1c:26:f6:20:41:85:c0:
                    6e:da:77:12:28:ee:c8:e0:bf:ac:d1:a7:2c:b5:97:
                    67:7d:01:d8:e5:e0:1f:3e:47:e0:b5:0c:8f:d5:21:
                    a1:76:dc:8a:24:64:0c:56:a3:ef:87:cb:b7:6c:19:
                    46:d5:06:2b:46:fa:a3:47:b5:0d:5a:d9:12:0b:bb:
                    55:75:e2:33:5d:b9:84:ef:8b:d6:78:fc:9d:1c:61:
                    af:eb:ff:88:c7:74:5b:b8:d6:86:8c:ab:79:ee:11:
                    c1:cf:2b:1e:61:d8:20:fb:16:19:7c:b9:66:ae:31:
                    58:c9:4b:69:99:d1:a9:bd:ab:46:b4:6f:23:b8:58:
                    0b:ba:93:cd:eb:6d:a9:d8:e8:e0:48:c2:d0:a3:3b:
                    98:af:2a:60:90:6d:dc:c2:fc:2d:d9:f9:60:f4:35:
                    32:5d:f8:7a:ca:3d:a0:4f:8f:6e:e2:d6:18:7f:92:
                    9f:4b:31:8b:a1:ed:8c:57:28:ec:5a:64:8e:ad:b5:
                    47:66:28:77:d7:cd:91:44:df:87:cf:99:d6:9f:ff:
                    01:a9:2b:b6:3b:fe:27:39:59:aa:c7:60:11:02:3c:
                    54:71:e1:40:c6:24:9a:02:d8:b5:ca:42:8f:6d:cb:
                    b6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:09:0A:AE:3D:AC:5C:6F:17:4F:7D:A6:32:60:24:EE:3F:CC:C9:05
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e34382e302f32302d3230203d3e203538383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.240.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cd:de:7a:01:c3:46:83:a6:44:82:15:35:45:f7:8d:9c:31:08:
         08:69:df:9a:ab:bb:27:1f:d1:95:d4:3a:a9:d5:f0:24:6a:d0:
         05:9e:f1:53:48:f2:d3:44:51:ab:86:ed:a6:49:85:be:ba:4c:
         6f:c9:89:69:fb:85:a2:8a:17:2b:37:4f:19:77:f4:bb:ff:14:
         70:58:5d:f7:48:e1:c9:5e:1b:7b:d1:9e:06:f9:9b:4d:3e:d4:
         87:06:9f:d8:2e:e5:c3:b7:cc:2b:cf:ca:9e:ab:dc:cf:c2:fd:
         44:9d:f6:99:80:8f:3b:d9:cb:c2:c0:54:be:87:b4:00:44:43:
         04:66:e1:16:3d:54:7f:f3:35:c1:52:77:e4:d8:d2:8a:d9:95:
         97:39:83:06:34:b6:73:21:9d:34:8c:fc:4b:71:6b:21:1c:63:
         3f:b1:e5:0a:ec:92:41:fc:a2:5c:06:fa:fb:6d:4f:a7:43:3b:
         de:0d:60:de:1c:f7:d3:38:10:4a:d9:8a:84:14:57:97:5f:88:
         79:42:1a:ec:fa:26:c8:0d:e5:82:3a:b9:e8:45:8d:ec:7d:95:
         28:24:1a:c3:ac:f7:7d:c2:d6:1e:45:c2:a1:b1:10:39:90:f9:
         f5:e2:6f:e7:1f:2d:ad:78:a7:1d:fe:b8:62:5e:ff:ed:91:67:
         81:70:44:84
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:51:39 2026 by rpki-client