Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3232302e302f32322d3234203d3e20333939343631.roa
File:                     3132342e34322e3232302e302f32322d3234203d3e20333939343631.roa (raw, json)
Hash identifier:          FOr1fS1RYkaces4dbNLuxIvfU87Oj0u39XrZ+ON8Jn8=
Subject key identifier:   A8:02:DB:50:24:74:0E:0F:AD:16:08:22:F2:5E:73:D0:B6:B9:99:19
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       7879FCC42E9DBC00C844F3A62747901C3B73378E
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3232302e302f32322d3234203d3e20333939343631.roa
Signing time:             Mon 13 Jul 2026 03:46:32 +0000
ROA not before:           Mon 13 Jul 2026 03:41:32 +0000
ROA not after:            Mon 12 Jul 2027 03:46:32 +0000
asID:                     399461
IP address blocks:        124.42.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:79:fc:c4:2e:9d:bc:00:c8:44:f3:a6:27:47:90:1c:3b:73:37:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Jul 13 03:41:32 2026 GMT
            Not After : Jul 12 03:46:32 2027 GMT
        Subject: CN=A802DB5024740E0FAD160822F25E73D0B6B99919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c9:d7:df:78:00:58:5c:9b:87:76:f3:e7:3d:
                    8a:a8:f5:e9:6b:07:9d:cd:46:14:20:af:bd:b0:20:
                    4d:b0:75:75:27:1a:51:17:88:87:33:6b:cd:a0:d6:
                    9f:6f:ff:50:3f:82:89:6d:a7:df:be:00:a8:aa:a4:
                    82:15:f0:a3:bd:2f:a0:12:62:f6:4e:a9:91:00:5f:
                    16:06:29:21:c6:65:cc:e1:c3:94:36:c5:c1:80:91:
                    ea:8f:c0:92:31:05:b9:59:4c:19:02:3f:07:c3:cc:
                    09:96:4e:f6:c1:27:d6:79:32:1e:ec:92:32:32:e6:
                    c5:38:1e:67:b3:f7:e7:5d:d4:f4:02:94:77:bc:f1:
                    30:1a:d6:b6:06:af:65:b9:98:3a:d7:7e:83:67:3e:
                    1d:c4:b7:bf:a3:b3:b4:22:a4:c3:ad:4c:87:c0:c2:
                    d0:67:97:67:c2:1a:68:d0:42:fd:6b:2f:69:02:3f:
                    91:5a:e3:7e:cd:d1:71:55:80:db:3f:40:a2:a6:d6:
                    81:71:f4:f4:ee:ab:22:78:0f:f3:9b:da:f6:55:e9:
                    f8:0e:f7:6a:93:16:13:c9:d9:27:5b:a8:76:ed:c7:
                    d8:58:4c:de:79:62:88:39:db:b5:64:3b:dc:71:63:
                    85:ee:42:58:ac:7c:b2:31:8f:66:c3:b0:d3:2e:c3:
                    d9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:02:DB:50:24:74:0E:0F:AD:16:08:22:F2:5E:73:D0:B6:B9:99:19
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3232302e302f32322d3234203d3e20333939343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.42.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:3b:4d:30:4f:94:52:05:56:43:b6:b6:5d:35:99:dd:ec:5f:
         14:09:02:45:86:67:95:73:43:b7:b1:9e:ec:03:32:9b:5b:e5:
         18:c8:cc:61:ba:69:50:8c:42:da:9c:85:60:a4:c8:41:af:09:
         e3:10:63:42:eb:2e:81:fe:fe:22:39:ca:0f:69:80:1d:c5:1c:
         c9:fe:4c:ba:ce:1e:8d:16:91:b1:a1:56:3e:84:43:a4:63:41:
         41:22:88:7b:58:be:d3:8a:b9:f5:86:98:31:d0:3f:9e:dd:c6:
         b6:b1:09:a5:c0:e1:9c:bf:c7:02:17:27:d6:56:9a:a9:65:02:
         5e:c5:a0:c3:91:55:b3:1c:1e:0a:a8:83:11:cf:65:df:01:0a:
         81:4c:17:dd:34:40:53:3e:c9:ae:67:09:d4:fc:ef:60:e3:aa:
         6a:6a:2e:04:4e:28:2f:a2:08:b9:85:a1:7f:d6:f6:c5:3a:fb:
         ea:de:7b:de:55:05:81:10:8c:7a:61:c8:83:f5:ef:64:63:2d:
         8e:26:0a:af:2d:93:eb:71:59:22:ab:34:e0:7b:e3:9a:a6:f5:
         76:60:cf:37:fb:88:cc:75:da:56:40:5d:fb:c3:7e:1d:2e:2f:
         f2:12:d6:ac:99:d1:d4:4e:2d:43:d3:5d:78:9b:1f:67:44:fb:
         53:c8:92:b3
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUeHn8xC6dvADIRPOmJ0eQHDtzN44wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0
NEM5RUY4RTAeFw0yNjA3MTMwMzQxMzJaFw0yNzA3MTIwMzQ2MzJaMDMxMTAvBgNV
BAMTKEE4MDJEQjUwMjQ3NDBFMEZBRDE2MDgyMkYyNUU3M0QwQjZCOTk5MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQydffeABYXJuHdvPnPYqo9elr
B53NRhQgr72wIE2wdXUnGlEXiIcza82g1p9v/1A/goltp9++AKiqpIIV8KO9L6AS
YvZOqZEAXxYGKSHGZczhw5Q2xcGAkeqPwJIxBblZTBkCPwfDzAmWTvbBJ9Z5Mh7s
kjIy5sU4Hmez9+dd1PQClHe88TAa1rYGr2W5mDrXfoNnPh3Et7+js7QipMOtTIfA
wtBnl2fCGmjQQv1rL2kCP5Fa437N0XFVgNs/QKKm1oFx9PTuqyJ4D/Ob2vZV6fgO
92qTFhPJ2SdbqHbtx9hYTN55Yog527VkO9xxY4XuQlisfLIxj2bDsNMuw9ldAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUqALbUCR0Dg+tFggi8l5z0La5mRkwHwYDVR0j
BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2
NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMTMyMzQyZTM0
MzIyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMzMzkzOTM0MzYzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAnwq3DANBgkqhkiG9w0BAQsFAAOCAQEAVjtNME+UUgVWQ7a2XTWZ
3exfFAkCRYZnlXNDt7Ge7AMym1vlGMjMYbppUIxC2pyFYKTIQa8J4xBjQusugf7+
IjnKD2mAHcUcyf5Mus4ejRaRsaFWPoRDpGNBQSKIe1i+04q59YaYMdA/nt3GtrEJ
pcDhnL/HAhcn1laaqWUCXsWgw5FVsxweCqiDEc9l3wEKgUwX3TRAUz7JrmcJ1Pzv
YOOqamouBE4oL6IIuYWhf9b2xTr76t573lUFgRCMemHIg/XvZGMtjiYKry2T63FZ
Iqs04Hvjmqb1dmDPN/uIzHXaVkBd+8N+HS4v8hLWrJnR1E4tQ9NdeJsfZ0T7U8iS
sw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:48 2026 by rpki-client