Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3231322e302f32342d3234203d3e203633363431.roa
File:                     3132332e34392e3231322e302f32342d3234203d3e203633363431.roa (raw, json)
Hash identifier:          hluS2YHlrAouJjWMCLwiaOG5fWQG0a1fbf9rMpiv4Ao=
Subject key identifier:   78:FC:C3:9C:53:8C:DC:E0:D2:54:F5:27:F5:02:71:C4:66:A4:D3:A5
Certificate issuer:       /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial:       1E906EF317308CB2F0F24C5F454B4C577D1198B1
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3231322e302f32342d3234203d3e203633363431.roa
Signing time:             Wed 22 Apr 2026 14:17:52 +0000
ROA not before:           Wed 22 Apr 2026 14:12:52 +0000
ROA not after:            Wed 21 Apr 2027 14:17:52 +0000
asID:                     63641
IP address blocks:        123.49.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 10:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:90:6e:f3:17:30:8c:b2:f0:f2:4c:5f:45:4b:4c:57:7d:11:98:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
        Validity
            Not Before: Apr 22 14:12:52 2026 GMT
            Not After : Apr 21 14:17:52 2027 GMT
        Subject: CN=78FCC39C538CDCE0D254F527F50271C466A4D3A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:99:12:89:4b:ce:4e:c5:a9:5e:a7:c7:41:4b:
                    39:37:4d:a5:2e:b9:78:3b:17:80:9d:5e:78:82:f9:
                    c5:83:a6:c1:a9:50:ee:f4:c5:6b:ad:47:ca:be:38:
                    d4:d7:6f:80:dd:cd:fc:db:ee:29:5a:bf:bb:8a:57:
                    46:cd:1e:42:44:9f:28:58:c0:98:6b:2b:37:0a:e1:
                    07:eb:1d:50:69:d8:52:b7:10:f7:a3:b3:89:64:55:
                    cc:7d:bd:08:d0:37:12:4e:4a:f1:f7:72:24:aa:fd:
                    21:73:61:f0:1b:03:88:98:d8:f0:68:3c:dd:e2:48:
                    c2:39:65:a8:e1:d8:0f:e3:29:0b:4e:93:ed:c9:ea:
                    96:64:f2:c0:60:71:30:07:b5:8c:70:65:21:e2:22:
                    38:5f:31:a3:cb:81:6a:55:37:a7:06:e7:f0:d3:36:
                    4c:3d:ac:35:d8:ae:74:5d:60:c3:12:2f:f5:2d:ab:
                    9a:37:31:34:02:b3:13:8e:82:a4:8e:64:12:a0:79:
                    32:41:60:e1:f7:6f:e6:f7:bf:64:07:49:de:7c:a5:
                    b2:be:fe:ec:90:b0:41:08:69:7f:43:58:ad:e3:de:
                    14:b4:fc:e6:21:15:04:17:79:b8:e0:6e:7a:ed:6b:
                    6c:cf:33:f3:85:8d:c7:43:d6:ce:ed:78:25:f9:23:
                    03:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FC:C3:9C:53:8C:DC:E0:D2:54:F5:27:F5:02:71:C4:66:A4:D3:A5
            X509v3 Authority Key Identifier:
                keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3231322e302f32342d3234203d3e203633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.49.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e1:75:6b:9a:b0:ad:c5:5e:f7:07:51:d1:c4:61:41:fc:af:33:
         82:b6:d1:53:64:cf:ce:92:1b:68:13:ae:87:da:75:67:ea:24:
         a5:84:6a:30:0c:8e:fd:4c:cd:93:55:ba:bf:ce:4b:f5:79:e1:
         f2:af:8a:fa:3c:64:7f:ce:57:c9:17:38:e1:ea:38:1c:82:56:
         9c:6b:de:5c:c7:80:db:12:4f:7b:a3:df:d9:d2:b8:f2:18:a8:
         f4:0f:38:5a:10:e5:43:a0:a2:0c:b7:74:56:6c:ea:72:04:87:
         b1:55:62:96:ae:54:d5:5e:e4:28:ab:4e:57:fe:da:62:db:78:
         63:a3:42:14:4d:a7:3f:25:98:24:7d:d4:51:03:f7:8b:44:b8:
         bf:f2:6d:fb:5b:35:fa:ac:f2:f2:49:31:54:78:83:9c:37:3e:
         b2:1d:4c:de:d1:4f:29:7c:1f:1c:3d:d4:40:4c:39:a1:9c:0b:
         fe:e4:25:f1:53:b8:d3:2b:5d:6d:12:b3:46:7b:6e:c7:7d:20:
         c1:c1:87:68:09:5a:76:5d:67:fc:89:04:4d:84:da:24:dd:52:
         30:55:6e:da:df:86:86:3a:91:86:fe:9a:30:a2:0f:31:f1:02:
         f0:62:6f:e3:49:1b:5c:67:14:15:41:43:95:23:d3:d9:19:64:
         b1:bf:65:e7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:06:44 2026 by rpki-client