Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e372e302f32342d3234203d3e20313938343836.roa
File:                     3132332e39382e372e302f32342d3234203d3e20313938343836.roa (raw, json)
Hash identifier:          jYHcbYl02JXnkcd3TLLlgMViu1/LOBwHTqCQF19DtSA=
Subject key identifier:   C2:16:5D:46:0B:3A:99:C8:7F:EB:34:5E:4E:4C:20:A7:2A:80:BD:FB
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       36D46E8DE4329C9751944CD276987EBD66460718
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e372e302f32342d3234203d3e20313938343836.roa
Signing time:             Mon 13 Jul 2026 03:46:36 +0000
ROA not before:           Mon 13 Jul 2026 03:41:36 +0000
ROA not after:            Mon 12 Jul 2027 03:46:36 +0000
asID:                     198486
IP address blocks:        123.98.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d4:6e:8d:e4:32:9c:97:51:94:4c:d2:76:98:7e:bd:66:46:07:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Jul 13 03:41:36 2026 GMT
            Not After : Jul 12 03:46:36 2027 GMT
        Subject: CN=C2165D460B3A99C87FEB345E4E4C20A72A80BDFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fc:27:ad:83:44:93:6f:ae:76:ab:50:e9:eb:
                    54:5f:26:c8:32:8a:f9:83:6d:a2:41:32:af:64:9b:
                    f5:52:4b:3c:a9:09:d0:41:b3:23:fa:b1:25:0f:7d:
                    83:ae:b4:5e:d4:1a:c6:b0:dd:ce:91:52:b3:34:d0:
                    b6:5a:6e:46:6d:be:14:51:18:51:4f:0a:78:27:9d:
                    92:ad:88:36:48:30:3c:49:ed:d7:4c:85:66:50:e3:
                    ae:ce:46:07:5a:70:06:b8:57:04:af:e4:7d:32:4c:
                    7e:f8:e1:75:0c:8a:cb:a0:9e:79:1b:69:52:1b:79:
                    33:e7:42:05:30:25:28:90:0a:c1:4d:52:47:70:2e:
                    1e:e4:4a:a9:9c:6f:e1:56:33:0a:65:ab:1f:e6:5b:
                    81:7f:3f:aa:87:93:c2:f0:90:81:20:b6:f8:24:f3:
                    6b:b3:a2:2b:7b:d8:16:3f:81:75:db:81:14:78:26:
                    48:52:43:68:e4:a4:d5:3e:bb:4b:07:af:f9:78:b6:
                    ce:75:d6:9e:4f:da:00:af:64:05:69:eb:34:6e:e2:
                    27:b5:99:68:9e:cb:ca:71:7c:a6:96:d5:09:08:fa:
                    7d:95:30:90:43:61:07:5a:e7:bc:ff:7d:08:63:48:
                    0a:e0:7b:51:d9:bc:93:dd:45:d9:b7:0f:90:b0:8d:
                    4d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:16:5D:46:0B:3A:99:C8:7F:EB:34:5E:4E:4C:20:A7:2A:80:BD:FB
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e372e302f32342d3234203d3e20313938343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.98.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:d4:4c:55:0c:37:52:31:3e:93:29:4b:2c:3b:11:f3:9b:95:
         e4:de:74:bd:15:82:33:5a:7b:74:0b:bb:27:fb:12:75:e2:5c:
         80:ec:b1:49:dc:d1:ab:8d:f7:e6:d4:41:3e:23:70:89:fe:40:
         7a:8a:09:59:b5:86:56:aa:85:24:4f:94:cb:3d:6e:34:ce:83:
         ed:25:aa:b0:7d:bc:91:77:54:ce:9e:72:3c:c7:75:a9:ae:d1:
         17:07:cf:f5:5b:8b:7e:12:5c:09:67:7c:c2:00:5b:e5:3e:32:
         bb:42:b9:67:f5:04:73:4c:1c:cb:d2:4a:3f:88:0a:00:f9:b7:
         04:08:57:3b:97:41:fd:94:14:c5:71:05:15:f7:dd:e4:90:33:
         d3:76:c9:20:29:52:29:9c:55:1c:02:ae:7a:37:1f:77:6f:12:
         6a:fd:6c:65:61:26:aa:6a:91:51:a9:03:ed:cb:bd:55:ea:64:
         13:b2:a9:cb:37:c8:4e:36:a0:0b:d2:f1:b7:cd:36:d0:ee:c3:
         98:28:ff:b1:a5:62:69:83:9c:c6:a0:47:94:23:29:c2:11:d9:
         ad:9a:32:65:2d:88:de:5f:f9:16:f2:49:7a:fc:99:d0:83:af:
         0e:8f:e3:ef:db:a2:82:1b:32:7b:3d:25:27:d5:7d:02:f8:16:
         c5:2b:e1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:46:53 2026 by rpki-client