Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3132342e31342e3139322e302f31392d3139203d3e2030.roa
File:                     3132342e31342e3139322e302f31392d3139203d3e2030.roa (raw, json)
Hash identifier:          hP3M6+Dsetkj2eY2IFcW+ouVWJDV7GphPSyFIaQLaJY=
Subject key identifier:   91:CD:03:E1:5B:F4:28:39:E0:9E:DD:98:D1:F6:F2:B2:C6:ED:D2:7E
Certificate issuer:       /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Certificate serial:       3653AFFDDA617FFE84180F20556FF592C47C6ADA
Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3132342e31342e3139322e302f31392d3139203d3e2030.roa
Signing time:             Fri 10 Apr 2026 03:40:28 +0000
ROA not before:           Fri 10 Apr 2026 03:35:28 +0000
ROA not after:            Fri 09 Apr 2027 03:40:28 +0000
asID:                     0
IP address blocks:        124.14.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 08:13:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:53:af:fd:da:61:7f:fe:84:18:0f:20:55:6f:f5:92:c4:7c:6a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
        Validity
            Not Before: Apr 10 03:35:28 2026 GMT
            Not After : Apr  9 03:40:28 2027 GMT
        Subject: CN=91CD03E15BF42839E09EDD98D1F6F2B2C6EDD27E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e3:8a:70:fd:41:24:cc:1c:f2:5a:e2:0f:f7:
                    a0:97:ef:97:78:ce:22:60:e1:e6:70:d2:87:db:f8:
                    c5:79:e8:6b:1f:ee:79:40:30:8c:49:e5:0f:86:32:
                    9f:74:36:d6:ae:3f:49:af:e9:75:01:8b:0b:5d:4d:
                    00:7e:ae:c3:3b:29:42:38:cb:4e:6b:4f:98:bb:33:
                    25:fa:55:c9:8a:37:69:6b:c3:6c:4b:c1:8b:4b:f6:
                    ff:98:77:0d:2c:81:bd:14:57:f4:0b:bf:68:47:7a:
                    36:89:b5:7d:2b:fc:74:54:70:48:84:55:bb:06:c3:
                    8e:75:df:40:6a:ef:2b:ae:50:a7:51:47:2f:16:4d:
                    92:48:d4:96:3a:7f:37:5d:58:77:eb:5a:6f:64:f5:
                    81:a5:96:58:b4:c7:e6:3a:68:39:7f:31:26:7e:13:
                    66:62:ff:a9:9c:c7:e1:e7:0f:c9:c0:88:c3:48:e9:
                    62:f9:9a:11:4c:44:5e:7a:33:b9:24:1a:c2:34:28:
                    b7:07:b1:b6:f7:a1:1a:fa:16:02:48:ea:e4:53:c8:
                    e3:08:a5:f2:79:45:8f:07:36:58:78:c8:cd:d1:b2:
                    5f:a7:55:40:5b:2a:12:d7:a2:44:2a:72:c9:38:45:
                    ec:7d:c8:cd:1b:21:e5:93:a9:07:56:37:b5:01:43:
                    30:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CD:03:E1:5B:F4:28:39:E0:9E:DD:98:D1:F6:F2:B2:C6:ED:D2:7E
            X509v3 Authority Key Identifier:
                keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3132342e31342e3139322e302f31392d3139203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.14.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         80:4f:46:bc:68:3b:95:b4:80:f0:cc:b2:1f:49:21:a0:60:60:
         69:a0:c6:23:99:29:7a:0f:fe:e8:d0:88:f3:37:8b:94:53:34:
         e5:16:5f:ed:4b:4a:23:c9:e9:a5:34:56:99:84:f8:5b:cd:e7:
         ec:64:71:95:7c:5b:9e:19:38:8b:56:b7:fe:54:2c:21:8c:0c:
         3f:24:fc:56:cb:d0:b1:d4:f9:3c:25:53:6d:79:61:e7:81:b3:
         b3:02:43:c3:77:1b:f5:0f:3e:fe:8c:ee:8b:a4:7f:12:f6:2f:
         17:51:a1:a9:e9:be:56:cd:02:b5:03:98:b6:d7:4b:de:a6:55:
         b5:70:1f:0b:8c:28:58:3e:0c:61:ce:dd:88:00:0b:89:64:e1:
         d6:7f:26:27:a1:18:a6:af:b4:c7:ea:8a:dc:e4:cb:4d:25:85:
         ea:f6:f6:3d:6e:86:e7:68:28:e0:cf:a4:6a:3a:d8:fa:df:48:
         50:d6:a0:a1:21:a5:17:a4:48:80:77:68:af:c0:7c:e2:86:39:
         8c:c8:5e:8a:19:31:14:a1:f2:06:35:b5:a9:1c:ae:66:4b:6a:
         aa:5c:22:7b:ac:ce:36:4a:b5:6d:3d:84:21:a9:29:d6:f6:16:
         01:b9:b4:49:32:a4:23:ae:3b:aa:ab:00:7c:de:c3:1a:fa:f9:
         2b:1d:10:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:23:33 2026 by rpki-client