Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3133322e302f32322d3234203d3e203139373933.roa
File:                     3132342e34322e3133322e302f32322d3234203d3e203139373933.roa (raw, json)
Hash identifier:          u/BvBvpFRNJY5oWHM9iEpUFqP9KWRanUvBrgv6pmKLI=
Subject key identifier:   38:CF:CC:06:66:E8:96:70:95:1E:65:37:28:36:FE:06:C5:CE:B8:E6
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       59BBD20BD3D8147AA1D6BF7ADA54596035CACEAA
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3133322e302f32322d3234203d3e203139373933.roa
Signing time:             Thu 05 Mar 2026 12:05:18 +0000
ROA not before:           Thu 05 Mar 2026 12:00:18 +0000
ROA not after:            Thu 04 Mar 2027 12:05:18 +0000
asID:                     19793
IP address blocks:        124.42.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Mar 2026 04:52:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:bb:d2:0b:d3:d8:14:7a:a1:d6:bf:7a:da:54:59:60:35:ca:ce:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Mar  5 12:00:18 2026 GMT
            Not After : Mar  4 12:05:18 2027 GMT
        Subject: CN=38CFCC0666E89670951E65372836FE06C5CEB8E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b0:90:f2:97:1f:df:37:8b:6c:08:1a:20:c8:
                    0e:5f:17:7f:21:9e:12:67:36:d1:cf:9a:0c:41:71:
                    89:bf:26:b0:9b:0d:7c:8e:cd:8c:9c:38:5c:22:f0:
                    a6:0c:51:c7:4d:69:ae:92:4b:17:d1:f7:31:82:6b:
                    8d:9e:80:a3:39:55:79:1f:c9:97:e5:da:67:c8:3e:
                    5e:5d:dc:6a:c3:45:63:ce:66:38:ed:4a:dd:5f:f7:
                    70:f6:fc:f9:00:67:58:f6:c6:c4:eb:e2:47:6e:4c:
                    21:c0:b5:fb:f2:77:11:5b:47:6c:b2:50:b1:35:de:
                    25:b5:b7:2a:68:16:db:c7:55:a7:53:c5:a0:27:9d:
                    3a:d3:fd:5f:2a:46:05:75:15:19:98:d5:a1:3d:25:
                    23:fb:f6:75:20:57:b1:67:ef:6e:e7:c0:d0:2a:5b:
                    27:6a:ab:6c:b4:af:73:83:a8:64:50:26:04:fc:26:
                    36:c6:7c:8c:f2:f7:5a:c1:10:7b:4c:5e:d2:2f:05:
                    7e:3e:d9:39:2d:d1:d7:6a:50:73:b2:56:c8:0a:9a:
                    c9:09:48:2a:2d:8f:fc:aa:48:a1:b8:9d:5f:2c:10:
                    3f:f7:9e:14:ef:8a:9c:72:ce:7b:eb:e0:24:80:bf:
                    19:34:56:3c:97:c3:0a:a0:c2:60:1f:4a:95:07:3f:
                    82:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CF:CC:06:66:E8:96:70:95:1E:65:37:28:36:FE:06:C5:CE:B8:E6
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3133322e302f32322d3234203d3e203139373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.42.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:96:20:7e:77:8a:f8:5d:78:5a:4a:ce:b5:29:6b:fc:11:75:
         0d:1f:95:8d:35:e5:77:3a:fb:ce:1f:3d:1c:1a:44:1c:a8:6f:
         29:40:8d:80:f5:b6:5c:ef:2f:05:6e:b6:06:0c:5b:f9:e0:cb:
         bd:eb:b4:9b:c2:2a:23:c4:a1:99:07:ad:d5:cf:94:37:7a:32:
         09:f0:0b:b1:e7:79:5e:75:dc:6f:97:9a:ce:54:72:0a:b7:ed:
         cb:21:e4:38:5b:60:2a:06:a0:9b:70:4f:3a:63:22:43:20:5b:
         08:3e:4e:b6:69:66:b9:0e:4f:a7:43:cb:8d:71:35:4e:ac:dc:
         9f:55:d8:22:bf:2f:d2:e6:62:6a:aa:7c:6f:61:28:f8:8d:9c:
         8d:94:50:35:5a:7d:d9:13:7a:c9:b4:e7:a3:28:da:f1:0c:2b:
         e6:52:71:f9:ec:43:1b:ca:ab:60:9b:01:7f:8d:25:2d:46:62:
         37:b5:08:7f:48:6d:d9:98:51:bd:c4:b1:d0:a9:b1:ad:15:59:
         fe:59:b7:6c:25:c5:c9:2d:e2:3f:b7:3c:60:77:8f:5b:02:75:
         f1:df:9a:a8:13:85:e9:19:2e:39:5b:ea:cf:03:f3:98:d3:0d:
         51:75:7d:35:a0:4e:c4:98:4f:1a:54:59:c9:00:a6:97:ef:97:
         14:29:41:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Mar 10 14:14:22 2026 by rpki-client