Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3137362e302f32322d3234203d3e203139323131.roa
File:                     3132342e34322e3137362e302f32322d3234203d3e203139323131.roa (raw, json)
Hash identifier:          nSA8zA1oKcH1JzZ2l4eNuUKmgJv3TkoAgW60B7O1tUI=
Subject key identifier:   27:2F:7E:78:15:F2:DB:30:9E:74:D2:E8:BF:47:6A:C2:DD:BF:8C:9D
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       11570E35E09140BDD74860363B999EC8D99ED27B
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3137362e302f32322d3234203d3e203139323131.roa
Signing time:             Thu 14 May 2026 06:34:12 +0000
ROA not before:           Thu 14 May 2026 06:29:12 +0000
ROA not after:            Thu 13 May 2027 06:34:12 +0000
asID:                     19211
IP address blocks:        124.42.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 May 2026 08:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:57:0e:35:e0:91:40:bd:d7:48:60:36:3b:99:9e:c8:d9:9e:d2:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: May 14 06:29:12 2026 GMT
            Not After : May 13 06:34:12 2027 GMT
        Subject: CN=272F7E7815F2DB309E74D2E8BF476AC2DDBF8C9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fb:66:a4:53:a1:97:40:23:fe:ef:fc:ac:c6:
                    c1:cd:66:8c:42:fe:b3:f9:20:d9:0d:ca:42:30:26:
                    a8:c0:55:d2:c9:64:d0:96:05:a7:16:56:36:d1:70:
                    9a:e7:5f:88:14:af:28:cf:75:01:d7:6f:23:77:7f:
                    ab:6a:a6:e1:15:0d:c3:38:d8:ac:1e:b6:96:25:d2:
                    a7:36:d6:e2:81:8c:e3:1a:c4:26:9f:0f:7f:1b:a1:
                    ce:bf:a1:35:e9:98:cb:79:50:9e:bb:55:4b:54:03:
                    44:d9:3d:2e:c8:4b:70:be:22:b8:59:db:6e:bd:1e:
                    b8:10:d0:50:9d:f0:1c:e9:30:74:92:23:ad:8d:08:
                    82:fa:ed:95:a1:3a:d7:99:f3:86:f0:ae:04:ff:6f:
                    e6:97:57:07:6d:66:24:8d:e2:c6:b6:ce:8d:0b:c2:
                    ec:b0:fe:50:b7:07:dc:9f:4e:af:c5:d7:46:a0:50:
                    6c:3c:7b:d2:88:35:f1:23:38:4d:df:8a:03:ba:84:
                    f8:40:32:8c:b6:74:76:0e:35:0d:bd:60:fd:0d:d8:
                    3b:40:8a:0e:a0:0c:5e:29:ad:82:a4:d6:e8:63:4b:
                    d2:a9:3f:4a:98:a8:a5:7e:d9:c4:ae:19:36:ee:c7:
                    17:10:c9:14:24:87:ff:9f:f3:fc:4e:3a:8d:34:c1:
                    40:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2F:7E:78:15:F2:DB:30:9E:74:D2:E8:BF:47:6A:C2:DD:BF:8C:9D
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3137362e302f32322d3234203d3e203139323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.42.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:40:9f:81:8d:70:28:4d:55:ad:15:1b:80:e3:54:10:40:d2:
         b7:23:60:0a:3d:b1:33:e8:4e:77:b3:3b:13:b1:8f:fa:af:08:
         d6:63:77:54:45:e5:32:10:96:6a:16:31:15:2e:85:66:d9:0d:
         cf:a2:f3:27:bd:8c:26:c3:1c:86:4e:93:a9:68:4d:b5:1a:05:
         a5:f8:6a:3a:ac:5f:40:ec:98:46:b0:79:64:c3:5f:72:df:44:
         f8:f6:1c:04:f2:b9:9c:d0:e5:33:49:fb:e3:ee:ec:2b:43:c4:
         01:a0:1c:f7:3b:b6:c2:8c:b6:10:7c:a7:e8:12:8c:7d:72:7d:
         05:af:0f:fe:21:27:01:ea:03:64:16:f4:2c:3f:03:12:33:a5:
         1e:b3:c5:be:d3:ba:7f:8c:ab:1b:a7:72:0c:09:96:c5:25:0c:
         80:0c:1d:81:ab:c3:f8:4b:4b:27:0a:70:fd:6e:b4:da:6a:2a:
         42:63:8e:ba:f1:5d:04:12:65:bf:0a:08:c6:bf:3c:64:73:f2:
         c5:a9:3b:d0:a0:b3:e1:f8:91:06:5f:75:39:94:28:51:cc:b3:
         ca:8c:a3:3c:83:54:2b:fb:43:10:c5:91:4d:a5:5a:a8:f1:5b:
         b0:e2:9e:28:9b:9a:40:b7:b0:6a:a7:74:3e:a6:39:1c:68:23:
         b7:b6:51:19
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 30 13:47:11 2026 by rpki-client