Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e32392e36342e302f31382d3138203d3e20313334373733.roa
File:                     3132342e32392e36342e302f31382d3138203d3e20313334373733.roa (raw, json)
Hash identifier:          6LLnRVQLX5O0h+J7+6qBharv/4apuz7+ZeiGM5De7dA=
Subject key identifier:   8A:CF:A9:36:8A:1B:5F:5C:9E:4C:40:0F:F0:1D:EA:4C:FE:F2:10:32
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       4B5C02003C61AC8E1DC8A95F64794966838428F9
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e32392e36342e302f31382d3138203d3e20313334373733.roa
Signing time:             Fri 29 May 2026 08:04:08 +0000
ROA not before:           Fri 29 May 2026 07:59:08 +0000
ROA not after:            Fri 28 May 2027 08:04:08 +0000
asID:                     134773
IP address blocks:        124.29.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:5c:02:00:3c:61:ac:8e:1d:c8:a9:5f:64:79:49:66:83:84:28:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: May 29 07:59:08 2026 GMT
            Not After : May 28 08:04:08 2027 GMT
        Subject: CN=8ACFA9368A1B5F5C9E4C400FF01DEA4CFEF21032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:cc:6a:27:1a:a7:0c:64:2e:f4:43:89:32:ae:
                    cb:51:06:5e:9c:7d:f9:cc:c0:40:da:c5:0a:a1:55:
                    82:8c:ff:c6:39:bf:23:4d:11:5e:dc:dc:a0:ff:11:
                    40:ab:bc:67:1d:35:dc:6b:df:32:12:79:dd:cc:b9:
                    f6:04:92:c6:93:d6:76:6d:be:aa:7b:25:83:71:80:
                    79:ec:9a:bf:f0:0e:5a:d1:99:41:53:d7:0e:0c:86:
                    c0:b9:94:0a:0f:8f:e0:3a:76:89:22:fd:5a:9b:14:
                    5f:13:b2:c5:2a:cb:0f:c1:e9:a9:1b:03:86:1e:21:
                    01:14:88:25:6b:b5:3c:c6:92:30:6f:07:fe:ae:e8:
                    ab:20:15:02:bf:a7:48:c2:c5:99:90:01:eb:87:75:
                    6a:ca:a2:7c:6a:fc:37:c3:8e:90:00:7a:49:06:42:
                    3f:38:1b:84:27:14:c0:51:a0:9c:36:89:d8:f3:8d:
                    f9:05:35:81:fd:71:c7:1a:dc:4d:81:3f:9f:f3:0b:
                    49:be:d7:43:de:90:68:ee:a3:e8:df:e2:82:67:28:
                    7d:7a:21:f6:5f:1d:88:da:44:3d:68:ae:3b:ed:35:
                    d5:e5:2b:58:e5:36:8f:5e:ac:c4:e8:f2:d4:8f:7d:
                    ef:2f:a4:c4:d8:92:01:2b:e0:0f:6e:3e:7e:09:d8:
                    29:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:CF:A9:36:8A:1B:5F:5C:9E:4C:40:0F:F0:1D:EA:4C:FE:F2:10:32
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e32392e36342e302f31382d3138203d3e20313334373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.29.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9e:3e:55:63:c8:94:e8:94:52:8e:90:a3:7c:14:01:45:fc:59:
         f1:0a:a0:7e:1a:b1:0c:2d:c3:cc:b2:68:b2:18:d3:28:ba:4a:
         20:b3:96:e0:ad:8e:42:b5:1d:3c:19:a2:a8:1f:71:81:2c:f2:
         ca:c3:33:5d:f6:58:4f:0a:4e:bb:94:ed:c9:0a:6d:6a:a1:36:
         f6:b8:12:9e:94:e2:a9:e0:dd:4d:1e:ee:70:cb:6b:1f:86:d0:
         f2:57:aa:73:ee:10:fd:52:ec:8b:2d:7d:6f:7e:8f:f2:a0:cf:
         c0:03:b1:c8:5e:90:2e:08:07:32:2a:06:fb:73:7d:2c:2a:0b:
         fe:2a:f8:94:fc:26:81:29:71:69:54:9a:71:84:00:d1:e6:43:
         fd:47:37:c4:32:50:c9:18:b4:a6:cd:c6:bd:6b:04:62:f0:a2:
         47:57:fe:21:26:77:ce:8a:e0:96:29:f7:6d:15:71:a2:fc:74:
         57:ab:17:15:7e:03:c5:c9:08:39:d0:d8:ff:94:d2:64:8c:30:
         91:14:73:c1:9d:79:0a:a1:ba:4d:25:d0:a9:82:63:da:de:26:
         cc:c6:00:ac:7e:19:06:f7:9d:87:74:c7:64:0a:3c:85:cd:84:
         b4:0b:32:99:29:50:58:1e:87:e5:61:5d:05:26:32:43:c9:c7:
         94:10:cf:7f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:55:59 2026 by rpki-client