Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e32392e302e302f31382d3138203d3e20313334373733.roa
File:                     3132342e32392e302e302f31382d3138203d3e20313334373733.roa (raw, json)
Hash identifier:          7oUfjMNfbzaGfF7r5lXhjP0u4p03fvifNarZlJUC9vs=
Subject key identifier:   26:DC:F7:51:95:92:E9:A5:36:D4:9C:AB:2D:BD:C4:47:1D:4A:23:A2
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       3145BA9728448E0100D7C1DFD76A5D91701AEBB9
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e32392e302e302f31382d3138203d3e20313334373733.roa
Signing time:             Fri 29 May 2026 08:04:08 +0000
ROA not before:           Fri 29 May 2026 07:59:08 +0000
ROA not after:            Fri 28 May 2027 08:04:08 +0000
asID:                     134773
IP address blocks:        124.29.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:45:ba:97:28:44:8e:01:00:d7:c1:df:d7:6a:5d:91:70:1a:eb:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: May 29 07:59:08 2026 GMT
            Not After : May 28 08:04:08 2027 GMT
        Subject: CN=26DCF7519592E9A536D49CAB2DBDC4471D4A23A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a7:06:23:99:0e:df:03:38:c6:34:00:ef:3f:
                    6e:08:1a:9e:3e:8c:b0:a4:bd:b7:7e:8b:de:7c:5e:
                    9a:c6:3a:37:8a:54:16:3e:00:27:85:17:74:e0:11:
                    85:6b:05:e1:6d:6e:94:4d:37:8b:c4:c0:9b:52:8f:
                    d3:eb:44:a7:c8:81:05:3b:88:1e:65:d2:8b:67:48:
                    87:12:26:ce:cd:f9:3b:8f:fe:90:c3:97:1d:cf:e1:
                    53:1d:00:c1:6e:96:d9:63:8f:65:e5:93:85:07:97:
                    d4:69:e8:b8:c1:7c:7c:07:97:7e:fe:6c:1d:00:c7:
                    b4:3c:f8:0a:14:e1:07:42:d5:ae:ea:ba:65:04:51:
                    14:5a:a6:e4:06:72:23:a3:ad:59:cd:45:73:45:78:
                    3d:e4:da:a3:6e:ab:dc:ea:50:4d:cb:73:fd:41:80:
                    04:b4:31:f7:73:aa:a1:e1:ba:9a:ac:af:14:0d:86:
                    93:f2:53:e3:88:7e:4d:81:e4:a2:69:52:c1:e2:eb:
                    c0:ac:2d:ea:7c:95:7f:a5:ff:77:ef:70:22:99:8a:
                    1f:b2:13:6a:d7:3e:cf:ac:de:52:46:26:80:e2:7d:
                    ea:78:c4:a0:6a:a7:0a:2f:04:6b:41:08:3c:49:29:
                    5a:d1:7d:5a:de:f9:1a:2c:bb:eb:fd:ba:4d:90:01:
                    ac:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DC:F7:51:95:92:E9:A5:36:D4:9C:AB:2D:BD:C4:47:1D:4A:23:A2
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e32392e302e302f31382d3138203d3e20313334373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.29.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         70:4e:b0:d3:ff:c9:b1:52:df:11:fd:8f:d3:ca:f7:49:f2:75:
         d4:ad:55:d2:29:64:be:22:f8:ce:12:24:c4:bc:12:e8:10:ed:
         cb:98:99:49:3e:2d:a8:b3:f6:2e:0b:ce:3e:fb:b9:3b:ad:2b:
         a6:5b:5a:de:83:7f:32:f2:47:1d:11:8a:b8:1b:25:ec:ab:96:
         0f:41:ce:ba:c4:13:8b:46:a5:26:45:a6:8b:6f:23:2f:c9:ce:
         ab:64:7e:c4:50:bd:ec:df:e3:2e:d1:0f:e1:98:c0:e0:8a:30:
         28:3e:a8:32:b9:64:0c:60:6e:26:55:fe:c7:6c:42:36:38:2e:
         f0:35:d4:1b:46:ab:77:ee:50:1b:40:a7:a6:bc:76:1a:13:7b:
         99:2e:5a:ef:24:53:94:c2:ff:5f:e8:30:51:83:1b:8e:f2:25:
         ec:f1:fb:dc:89:3c:b0:3c:91:58:93:7e:e6:95:07:c1:13:f8:
         19:f3:b3:14:4d:3b:93:51:64:ef:4a:2f:79:13:7b:c7:b0:f6:
         ea:c3:40:f5:d7:4e:28:40:e4:98:10:cb:8f:3a:80:4d:8e:33:
         10:6d:4f:57:1c:97:68:78:4c:f1:cd:5a:0a:cc:b2:19:68:4e:
         a7:cd:c4:f0:3b:45:b2:24:13:5f:90:f6:15:d3:4b:2c:db:6a:
         a6:90:b0:55
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUMUW6lyhEjgEA18Hf12pdkXAa67kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3
OTBBOUUwRTAeFw0yNjA1MjkwNzU5MDhaFw0yNzA1MjgwODA0MDhaMDMxMTAvBgNV
BAMTKDI2RENGNzUxOTU5MkU5QTUzNkQ0OUNBQjJEQkRDNDQ3MUQ0QTIzQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKpwYjmQ7fAzjGNADvP24IGp4+
jLCkvbd+i958XprGOjeKVBY+ACeFF3TgEYVrBeFtbpRNN4vEwJtSj9PrRKfIgQU7
iB5l0otnSIcSJs7N+TuP/pDDlx3P4VMdAMFultljj2Xlk4UHl9Rp6LjBfHwHl37+
bB0Ax7Q8+AoU4QdC1a7qumUEURRapuQGciOjrVnNRXNFeD3k2qNuq9zqUE3Lc/1B
gAS0MfdzqqHhupqsrxQNhpPyU+OIfk2B5KJpUsHi68CsLep8lX+l/3fvcCKZih+y
E2rXPs+s3lJGJoDifep4xKBqpwovBGtBCDxJKVrRfVre+Rosu+v9uk2QAaxNAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUJtz3UZWS6aU21JyrLb3ERx1KI6IwHwYDVR0j
BBgwFoAU+xS2GlNcSQAO7S3ZFlAKJnkKng4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDU1MzM0NS8wL0ZCMTRCNjFBNTM1QzQ5MDAwRUVEMkREOTE2NTAw
QTI2NzkwQTlFMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3OTBBOUUwRS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0NTUzMzQ1LzAvMzEzMjM0MmUzMjM5
MmUzMDJlMzAyZjMxMzgyZDMxMzgyMDNkM2UyMDMxMzMzNDM3MzczMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBnwdADANBgkqhkiG9w0BAQsFAAOCAQEAcE6w0//JsVLfEf2P08r3SfJ11K1V
0ilkviL4zhIkxLwS6BDty5iZST4tqLP2LgvOPvu5O60rplta3oN/MvJHHRGKuBsl
7KuWD0HOusQTi0alJkWmi28jL8nOq2R+xFC97N/jLtEP4ZjA4IowKD6oMrlkDGBu
JlX+x2xCNjgu8DXUG0ard+5QG0Cnprx2GhN7mS5a7yRTlML/X+gwUYMbjvIl7PH7
3Ik8sDyRWJN+5pUHwRP4GfOzFE07k1Fk70oveRN7x7D26sNA9ddOKEDkmBDLjzqA
TY4zEG1PVxyXaHhM8c1aCsyyGWhOp83E8DtFsiQTX5D2FdNLLNtqppCwVQ==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:01 2026 by rpki-client