Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3136342e302f32322d3234203d3e203139373933.roa
File:                     3132342e34322e3136342e302f32322d3234203d3e203139373933.roa (raw, json)
Hash identifier:          u8LX/gi8Fqc//eyc72h9RhdaiFWIpfkCmcAvoMuLhcQ=
Subject key identifier:   2D:D5:8C:75:CB:19:49:82:D9:B6:53:0A:B0:1E:35:E0:DD:13:73:E4
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       4359961837CA2ADA48D7B0B7872D5F59775DC897
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3136342e302f32322d3234203d3e203139373933.roa
Signing time:             Thu 05 Mar 2026 12:05:51 +0000
ROA not before:           Thu 05 Mar 2026 12:00:51 +0000
ROA not after:            Thu 04 Mar 2027 12:05:51 +0000
asID:                     19793
IP address blocks:        124.42.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Mar 2026 04:52:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:59:96:18:37:ca:2a:da:48:d7:b0:b7:87:2d:5f:59:77:5d:c8:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Mar  5 12:00:51 2026 GMT
            Not After : Mar  4 12:05:51 2027 GMT
        Subject: CN=2DD58C75CB194982D9B6530AB01E35E0DD1373E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b2:da:db:52:9c:96:d7:8f:28:9e:e4:af:87:
                    37:6c:69:86:e6:b3:01:26:3f:a2:ce:c4:e7:9a:64:
                    86:02:e4:b7:64:fe:da:41:b1:55:9a:ce:ce:da:ae:
                    67:b7:68:e6:16:59:9a:68:4e:29:63:15:db:b9:aa:
                    88:3f:be:05:bd:4d:17:41:05:14:1f:fd:c5:af:f1:
                    35:c9:c6:af:52:0b:e4:cf:ab:7a:08:ac:9c:2e:80:
                    e9:06:06:ad:c5:2a:0c:d4:ff:ef:fb:52:7b:bd:9e:
                    1c:db:95:9a:13:a4:50:01:75:13:31:b1:49:5a:e0:
                    c8:68:c3:76:a0:18:95:14:e1:2d:55:f3:fc:99:30:
                    d6:51:2d:3b:50:d2:40:cc:f8:ef:64:05:46:a9:af:
                    72:b3:eb:a1:2e:69:98:5c:d0:7e:8a:d9:ee:0b:35:
                    4d:6d:c0:b9:3c:8a:7e:60:1b:d5:f2:9a:3d:fb:6b:
                    5b:9b:e4:14:0f:9b:e3:4d:26:bb:c4:a5:91:9d:8c:
                    07:89:e7:76:c5:3b:36:96:a7:9d:b4:11:b2:54:98:
                    4e:4e:79:c3:44:ba:6e:00:14:06:96:7e:7e:1f:0b:
                    1c:e6:22:16:f8:1b:75:bc:7a:de:76:9b:7f:e4:2d:
                    12:5d:42:5f:6b:b7:a2:7a:0a:cb:12:c9:68:be:3f:
                    53:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D5:8C:75:CB:19:49:82:D9:B6:53:0A:B0:1E:35:E0:DD:13:73:E4
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3136342e302f32322d3234203d3e203139373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.42.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:70:7c:78:87:14:bb:7e:ef:9e:81:96:b5:97:b5:74:78:c9:
         e0:c2:0e:21:64:ab:d9:b6:64:31:4f:e6:c7:5f:4c:26:b8:2e:
         75:0f:53:f0:a5:68:c4:fd:79:54:aa:b0:42:f1:1d:b6:e3:ca:
         cd:fc:b0:79:c3:2d:3c:48:e1:ca:81:ab:aa:5c:7d:ec:d9:44:
         8e:b7:6e:7f:76:66:20:1d:7e:92:ff:d0:b2:f7:fc:8e:03:00:
         08:9f:85:d8:26:b5:b5:99:12:aa:91:d1:b4:c1:01:87:e9:f4:
         fb:d9:23:6f:a8:28:ee:cf:29:d0:6f:5a:58:ab:64:05:d2:4c:
         97:70:19:15:ff:d1:9b:9f:63:7e:56:50:ef:09:c1:63:86:d6:
         e7:77:cd:39:71:e2:7a:ac:4a:d1:3c:9d:f3:90:33:c1:c4:53:
         16:0b:e3:03:4f:58:93:74:56:9c:bf:1c:9c:a7:e1:08:c1:5e:
         6d:37:44:0c:9b:61:f8:7a:1f:70:19:2a:34:84:01:20:64:18:
         c6:ff:cf:8c:09:0a:64:e7:25:5c:dd:99:36:8c:85:a2:e5:6b:
         20:d3:1a:8d:0b:52:c2:96:70:91:08:e3:61:69:13:b5:1e:8d:
         a2:7a:06:84:24:a9:6d:c3:7f:96:4a:f3:b6:99:75:bb:6d:09:
         d1:f0:a6:35
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Mar 10 14:14:21 2026 by rpki-client