Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3232362e302f32342d3234203d3e203633363431.roa
File:                     3132332e34392e3232362e302f32342d3234203d3e203633363431.roa (raw, json)
Hash identifier:          c0SwRhNglIfttkQWz/s0xuIoNu1vmya+zZZxRn4a7dc=
Subject key identifier:   32:71:E1:FD:7F:DE:66:33:75:0D:A2:09:46:4F:9B:A4:B0:B1:70:D4
Certificate issuer:       /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial:       2EE3182F8FC1B8BE5EF724A91E8BFCBEE3D0724F
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3232362e302f32342d3234203d3e203633363431.roa
Signing time:             Wed 22 Apr 2026 14:07:04 +0000
ROA not before:           Wed 22 Apr 2026 14:02:04 +0000
ROA not after:            Wed 21 Apr 2027 14:07:04 +0000
asID:                     63641
IP address blocks:        123.49.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 10:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e3:18:2f:8f:c1:b8:be:5e:f7:24:a9:1e:8b:fc:be:e3:d0:72:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
        Validity
            Not Before: Apr 22 14:02:04 2026 GMT
            Not After : Apr 21 14:07:04 2027 GMT
        Subject: CN=3271E1FD7FDE6633750DA209464F9BA4B0B170D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f1:4a:10:87:16:d5:85:94:1b:cc:81:25:87:
                    c8:b1:e8:cb:0c:6a:a4:b4:a3:f4:c2:7e:e5:fc:62:
                    5d:d2:e8:de:89:02:41:2e:b3:69:43:bf:1e:68:8f:
                    42:f2:38:34:4f:01:ec:d5:30:ae:d7:fb:1c:49:c4:
                    b9:d8:5e:d3:2c:70:2a:6e:6b:d5:a1:0a:23:84:0f:
                    90:e5:df:e9:77:99:2c:21:9f:0d:df:98:2c:20:34:
                    d8:92:57:7f:a2:54:62:09:87:d7:50:04:e6:86:ed:
                    0e:b5:9a:8e:e0:0f:01:81:ec:c6:23:0f:0b:22:11:
                    c8:92:64:6a:34:c8:71:35:63:9d:f3:5a:1c:60:2e:
                    a6:46:6d:9a:90:6f:04:5a:af:f3:49:12:ff:90:4a:
                    71:a0:94:f1:ab:8e:f5:3c:ce:6c:f5:bb:c0:d4:d0:
                    d9:1a:cc:90:0c:23:e9:e7:b1:78:c7:33:ef:95:a5:
                    8e:99:b4:c0:5b:a5:9a:b2:2c:81:59:70:3d:fb:10:
                    d0:c7:fa:9d:c2:d6:c7:5f:4f:37:40:01:88:0d:16:
                    9f:b5:93:6f:aa:c9:16:01:bf:d4:85:a2:d7:60:b1:
                    c0:1f:f2:9c:ef:59:bf:a1:3a:85:d9:78:28:23:cd:
                    9a:36:42:ec:cd:48:90:1c:b1:5b:77:c3:33:a6:e9:
                    6b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:71:E1:FD:7F:DE:66:33:75:0D:A2:09:46:4F:9B:A4:B0:B1:70:D4
            X509v3 Authority Key Identifier:
                keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3232362e302f32342d3234203d3e203633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.49.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:2e:7b:aa:8f:a6:40:6f:d7:a1:e5:82:b6:ce:ac:e1:a4:f4:
         76:2d:9e:d5:1e:8c:da:ae:7d:a1:c8:b3:3c:be:9c:29:ef:3d:
         4a:ab:9a:f8:8f:9b:d9:67:07:d3:8e:f4:b9:c9:e4:7e:29:2c:
         26:a4:05:70:ff:38:01:b9:13:cc:c7:b7:06:22:73:6c:d5:c8:
         cd:3d:60:fc:63:08:1a:ba:80:23:48:fa:93:2b:2e:10:53:35:
         1a:0a:5a:c8:53:a3:34:b8:88:4b:62:dd:67:a9:69:ac:86:de:
         c7:4f:d4:9a:c0:61:91:f1:a4:c2:13:76:e6:1f:b2:11:53:e4:
         09:dc:67:d0:2a:12:6a:d2:11:5d:88:c6:42:0b:fb:ed:6d:3f:
         6f:25:c7:21:b3:3a:1e:53:5d:ef:cb:f8:b2:6d:95:a2:77:1c:
         c8:1c:61:7b:7e:44:a0:a3:5f:ff:0f:99:bc:c0:cc:e9:84:9c:
         9f:21:4a:96:e2:90:3b:1a:57:28:98:18:1b:01:6d:2c:18:13:
         aa:e2:b5:35:4f:cd:85:38:a3:b4:ea:21:7b:dc:ff:4f:a6:ec:
         c6:28:a2:0c:f3:b0:1d:6b:ba:57:e1:e6:f4:2b:fb:f8:c6:f0:
         eb:65:1e:6e:82:8b:4b:74:43:92:c1:82:9d:29:6e:ff:dc:18:
         93:5d:ac:f5
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIULuMYL4/BuL5e9ySpHov8vuPQck8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF
OEUxMjgwQTAeFw0yNjA0MjIxNDAyMDRaFw0yNzA0MjExNDA3MDRaMDMxMTAvBgNV
BAMTKDMyNzFFMUZEN0ZERTY2MzM3NTBEQTIwOTQ2NEY5QkE0QjBCMTcwRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD8UoQhxbVhZQbzIElh8ix6MsM
aqS0o/TCfuX8Yl3S6N6JAkEus2lDvx5oj0LyODRPAezVMK7X+xxJxLnYXtMscCpu
a9WhCiOED5Dl3+l3mSwhnw3fmCwgNNiSV3+iVGIJh9dQBOaG7Q61mo7gDwGB7MYj
DwsiEciSZGo0yHE1Y53zWhxgLqZGbZqQbwRar/NJEv+QSnGglPGrjvU8zmz1u8DU
0NkazJAMI+nnsXjHM++VpY6ZtMBbpZqyLIFZcD37ENDH+p3C1sdfTzdAAYgNFp+1
k2+qyRYBv9SFotdgscAf8pzvWb+hOoXZeCgjzZo2QuzNSJAcsVt3wzOm6WthAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUMnHh/X/eZjN1DaIJRk+bpLCxcNQwHwYDVR0j
BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE
MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzMxMzIzMzJlMzQz
OTJlMzIzMjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzQzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAHsx4jANBgkqhkiG9w0BAQsFAAOCAQEAJS57qo+mQG/XoeWCts6s4aT0
di2e1R6M2q59ocizPL6cKe89Squa+I+b2WcH0470ucnkfiksJqQFcP84AbkTzMe3
BiJzbNXIzT1g/GMIGrqAI0j6kysuEFM1GgpayFOjNLiIS2LdZ6lprIbex0/UmsBh
kfGkwhN25h+yEVPkCdxn0CoSatIRXYjGQgv77W0/byXHIbM6HlNd78v4sm2Voncc
yBxhe35EoKNf/w+ZvMDM6YScnyFKluKQOxpXKJgYGwFtLBgTquK1NU/NhTijtOoh
e9z/T6bsxiiiDPOwHWu6V+Hm9Cv7+Mbw62UeboKLS3RDksGCnSlu/9wYk12s9Q==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:06:43 2026 by rpki-client