Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3234342e302f32322d3234203d3e2033353033.roa
File:                     3132342e34322e3234342e302f32322d3234203d3e2033353033.roa (raw, json)
Hash identifier:          a35Jwvz2MXKpmc7fNJzRh1ZE2p1PSuo713kyE0R3FM8=
Subject key identifier:   7F:B4:DA:53:55:77:90:C5:30:A0:A9:4E:1F:97:C2:37:AA:6E:E7:38
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       7C391F47C603C1E14739E3271C65E67754856A01
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3234342e302f32322d3234203d3e2033353033.roa
Signing time:             Mon 13 Jul 2026 03:46:38 +0000
ROA not before:           Mon 13 Jul 2026 03:41:38 +0000
ROA not after:            Mon 12 Jul 2027 03:46:38 +0000
asID:                     3503
IP address blocks:        124.42.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 03:41:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:39:1f:47:c6:03:c1:e1:47:39:e3:27:1c:65:e6:77:54:85:6a:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Jul 13 03:41:38 2026 GMT
            Not After : Jul 12 03:46:38 2027 GMT
        Subject: CN=7FB4DA53557790C530A0A94E1F97C237AA6EE738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ca:b0:30:c1:04:45:61:b4:e2:49:76:a8:fb:
                    47:8c:c9:6d:c5:4c:c4:5d:7e:d0:cd:b7:50:e6:42:
                    50:8f:9e:dd:26:3f:25:7e:9f:1c:f0:c1:af:29:20:
                    ef:28:db:7d:ee:57:45:e0:2d:e8:29:68:0b:0a:22:
                    98:f2:54:40:ff:5f:73:e4:f8:30:a3:0f:03:b5:94:
                    d5:46:cc:97:6d:7d:00:ea:a1:f9:91:17:a4:95:6d:
                    3d:77:1f:d0:a1:65:bf:d2:f7:66:2c:f0:9b:61:65:
                    0d:4a:28:e8:60:2b:f4:ac:c7:64:56:a9:0d:52:fa:
                    98:de:a5:0e:ed:1b:2a:03:da:16:3b:a9:87:a9:97:
                    30:31:eb:17:ef:6a:b6:ac:3b:20:2f:4a:14:23:ff:
                    7b:88:26:7d:84:f9:00:e2:94:28:51:e0:09:35:1b:
                    85:98:42:26:e2:a4:b8:8e:a2:17:75:41:1c:8a:38:
                    ff:af:17:74:08:9c:97:bf:e9:02:7b:a7:69:6d:63:
                    0c:13:39:4b:eb:6b:ce:cc:f1:26:19:dd:d4:ae:43:
                    11:d9:95:a0:9d:a7:44:97:d3:9e:d3:75:bd:36:61:
                    f5:5c:05:3b:76:e9:00:18:4b:64:38:a3:36:ba:3f:
                    39:2c:6d:8f:81:e3:79:9d:cf:7a:a3:4e:be:e0:2c:
                    ac:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B4:DA:53:55:77:90:C5:30:A0:A9:4E:1F:97:C2:37:AA:6E:E7:38
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3234342e302f32322d3234203d3e2033353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.42.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:53:61:2c:78:03:2b:b7:44:f5:55:7b:26:f6:ee:f6:4b:d3:
         6d:9e:85:e9:7d:be:35:f4:3d:51:69:c8:b7:09:e0:65:e1:9f:
         43:07:4e:0e:5b:a8:ac:eb:6e:96:6f:0f:ca:92:b9:ae:49:4e:
         86:55:a6:4b:7f:4f:2b:31:b6:95:5e:6d:f1:c2:24:58:da:4b:
         8b:18:6b:24:67:67:09:e7:dd:87:1c:45:b4:59:c4:1a:82:b1:
         83:72:27:34:29:40:c4:a8:06:02:9d:42:8e:e1:0d:c6:b8:7e:
         4e:5c:9d:b4:a4:e6:07:89:3b:85:61:31:bc:c8:89:c8:98:14:
         fc:26:9a:16:8e:45:d7:b6:e1:aa:09:24:d3:d2:d0:41:66:dc:
         5c:5c:54:96:e5:d4:46:da:1e:ea:99:57:4f:1a:3b:bf:52:2c:
         dc:65:f1:93:7d:f3:a0:f4:9d:53:d2:5e:82:be:14:6d:53:aa:
         5d:5b:72:c5:18:bf:17:04:dd:3c:c6:24:3b:51:3c:af:5e:71:
         e4:a8:6d:fd:56:1f:e2:3a:35:76:26:33:1b:98:14:00:97:ba:
         86:e2:92:41:99:68:c4:4d:5e:80:e9:d4:b3:24:cd:a5:ee:41:
         8c:21:6c:d3:95:a8:6d:85:aa:dc:cf:a9:64:d8:83:9f:5d:fc:
         45:ae:56:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:51 2026 by rpki-client