Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139332e302f32342d3234203d3e203633363431.roa
File:                     3132332e34392e3139332e302f32342d3234203d3e203633363431.roa (raw, json)
Hash identifier:          7GuWWC6TeGbnaSkQZf3XPm7zXQVKR8It9F05zVH4dTw=
Subject key identifier:   51:82:0F:0D:3D:03:4D:11:4B:71:9C:04:B7:1E:36:84:82:25:95:F3
Certificate issuer:       /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial:       4F6F70AECFDF03F2B9521D7A3FF747136E4EDE0C
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139332e302f32342d3234203d3e203633363431.roa
Signing time:             Wed 22 Apr 2026 14:11:39 +0000
ROA not before:           Wed 22 Apr 2026 14:06:39 +0000
ROA not after:            Wed 21 Apr 2027 14:11:39 +0000
asID:                     63641
IP address blocks:        123.49.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 10:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:6f:70:ae:cf:df:03:f2:b9:52:1d:7a:3f:f7:47:13:6e:4e:de:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
        Validity
            Not Before: Apr 22 14:06:39 2026 GMT
            Not After : Apr 21 14:11:39 2027 GMT
        Subject: CN=51820F0D3D034D114B719C04B71E3684822595F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a9:aa:74:98:41:44:26:05:28:5e:ed:04:e3:
                    ad:bf:4e:87:54:ef:2d:3c:26:20:bf:65:f0:a9:a6:
                    12:b7:24:c2:24:5f:8b:6f:26:33:b0:c0:5e:41:80:
                    34:35:f4:ca:c5:c5:ba:33:24:00:00:7c:6e:bf:df:
                    a7:68:98:f2:37:90:d0:a6:3f:4e:a6:25:e1:ca:2f:
                    c3:22:82:a4:02:c6:ca:64:0c:f1:ff:7e:af:86:d7:
                    63:e8:b1:5c:43:ed:7f:23:53:8d:f4:01:5d:6f:f1:
                    b9:a0:79:5d:a2:e7:cb:4c:fa:2a:dd:4c:76:0e:65:
                    cc:47:f4:1c:bc:8a:24:a4:fc:b9:79:e5:4c:d5:85:
                    d4:13:78:68:5f:5b:17:6a:5f:0c:55:e9:10:06:c1:
                    89:34:ea:e1:e9:c9:45:f0:1e:e4:15:94:3f:3e:74:
                    2b:34:48:dc:a3:cd:02:26:f0:c0:66:33:b6:16:28:
                    a3:45:04:bf:f6:04:82:a3:fc:af:ba:55:6c:04:d2:
                    35:0c:7d:17:96:4e:58:48:a8:b2:02:26:b8:70:d7:
                    58:d5:fd:6f:57:bd:0c:bf:1a:3c:87:65:10:2d:cd:
                    fd:19:c5:fe:ad:89:4e:da:c1:95:a4:65:70:e9:30:
                    ad:1f:a8:cc:7a:c2:2a:d2:95:4a:ac:26:1b:1f:81:
                    7c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:82:0F:0D:3D:03:4D:11:4B:71:9C:04:B7:1E:36:84:82:25:95:F3
            X509v3 Authority Key Identifier:
                keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139332e302f32342d3234203d3e203633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.49.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:cf:c5:26:28:8a:81:8c:6c:88:60:cf:ab:7a:22:14:d1:33:
         c4:49:2b:de:ca:64:b4:b5:9a:39:5d:f5:7f:d6:fd:d0:e7:00:
         7d:01:85:f2:d3:88:95:cb:1c:fa:1a:21:61:3e:d7:dd:4a:31:
         1c:a3:fe:20:cb:3e:dd:e3:fa:13:12:24:1d:bd:f5:fe:a8:15:
         fd:95:fa:ad:10:1b:45:7a:86:8d:d2:e6:23:f6:b2:29:04:1d:
         c7:ac:81:df:07:77:4b:82:f7:af:1d:da:f1:b6:21:7e:e7:96:
         27:af:81:dd:c2:42:4d:a6:91:fd:b6:fa:76:aa:ab:2d:7c:19:
         2a:5b:94:15:85:e3:da:00:cf:ee:19:25:b8:48:ef:8f:7d:b4:
         63:64:f5:1f:95:5d:82:72:39:16:8b:db:0d:06:a8:b6:fa:c8:
         c5:d1:a5:b1:a3:53:00:27:af:d9:ef:77:8e:a0:5a:80:79:95:
         01:52:50:f2:e4:a6:96:6d:2a:14:5b:ed:19:ef:f7:e3:4a:f1:
         fe:89:97:d2:e5:97:c4:50:bc:db:be:32:23:4a:7a:af:52:da:
         b9:7f:6b:09:06:a9:b1:4e:ef:d0:53:7f:34:7f:2b:8b:9c:5a:
         c9:19:26:1c:5e:c1:bf:74:ec:d2:f4:92:07:96:51:d4:03:43:
         99:39:8d:04
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:07:23 2026 by rpki-client