Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3132342e34302e3132382e302f31382d3138203d3e203538343636.roa
File:                     3132342e34302e3132382e302f31382d3138203d3e203538343636.roa (raw, json)
Hash identifier:          gEd7xpgMtNDRVKEso3Cg/VgGhJsmy0tACMyeZ6RUHBM=
Subject key identifier:   FE:25:5F:AB:80:73:7B:17:C7:5F:A5:F7:0D:AB:4C:CE:2A:EA:25:BD
Certificate issuer:       /CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Certificate serial:       7EF2879B157C33980D6A9C4796F0EAC0B5C98CC0
Authority key identifier: FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3132342e34302e3132382e302f31382d3138203d3e203538343636.roa
Signing time:             Fri 29 May 2026 08:08:28 +0000
ROA not before:           Fri 29 May 2026 08:03:28 +0000
ROA not after:            Fri 28 May 2027 08:08:28 +0000
asID:                     58466
IP address blocks:        124.40.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:53:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f2:87:9b:15:7c:33:98:0d:6a:9c:47:96:f0:ea:c0:b5:c9:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
        Validity
            Not Before: May 29 08:03:28 2026 GMT
            Not After : May 28 08:08:28 2027 GMT
        Subject: CN=FE255FAB80737B17C75FA5F70DAB4CCE2AEA25BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d5:30:12:c0:8f:5b:08:43:8d:df:d6:b3:ec:
                    5c:be:37:0f:a7:fb:0e:73:49:bf:09:0b:a4:98:d5:
                    c7:94:e6:1e:e5:61:e0:f1:a5:e8:14:d3:9d:98:a4:
                    ee:96:6f:17:9a:5c:3e:b9:b5:66:f9:d7:9d:27:3f:
                    33:2b:ff:c5:a1:7e:ec:d0:73:f1:5d:31:82:59:39:
                    0f:8e:3a:80:f9:0e:27:4a:2e:09:df:1c:99:93:06:
                    d0:3f:0f:10:bc:a9:62:ae:b3:18:f6:9a:6f:df:a8:
                    78:f0:04:f8:60:17:44:be:11:32:24:c4:09:cf:49:
                    a6:39:84:07:9f:ed:13:c5:9a:37:db:c9:b0:58:6f:
                    95:b2:5e:40:16:4b:ce:43:37:17:39:72:4b:b8:a0:
                    c7:e0:8a:f5:61:78:03:80:92:20:00:03:0c:53:4e:
                    a9:0a:e3:76:b9:44:9a:61:88:93:8a:1e:0f:37:08:
                    3c:c3:8c:ec:3e:9c:7c:e0:a0:55:88:3d:e3:65:c9:
                    b8:ed:0b:44:e1:a2:42:d6:31:ea:06:ad:52:59:a9:
                    55:40:cf:ac:be:48:c4:f4:e9:1b:ee:00:9a:b2:4b:
                    e5:b1:e1:83:1a:1c:58:84:d3:e3:d2:52:f5:f8:1b:
                    b5:60:cc:5a:8a:c0:0d:19:3e:7a:42:ee:f8:f0:c8:
                    87:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:25:5F:AB:80:73:7B:17:C7:5F:A5:F7:0D:AB:4C:CE:2A:EA:25:BD
            X509v3 Authority Key Identifier:
                keyid:FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3132342e34302e3132382e302f31382d3138203d3e203538343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.40.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         87:ec:33:3c:30:87:57:bc:74:4f:8e:07:63:66:56:e8:44:33:
         25:d6:0f:12:0a:2d:dd:84:55:eb:dd:f9:a5:c1:05:1b:ff:e8:
         61:d2:b8:23:d2:91:6a:a7:11:4c:cc:38:33:f8:f7:54:c2:a6:
         09:54:ee:2e:d3:71:df:a4:19:3c:68:27:f6:ed:99:28:07:d8:
         69:a4:b9:0c:62:76:bf:f5:26:d0:3d:df:ce:da:0a:8d:c0:9a:
         d8:0a:d5:3b:56:6e:3c:8e:f9:93:e7:07:26:29:34:5c:ec:8c:
         53:99:db:f5:47:0b:03:16:2d:b0:75:68:eb:d0:d8:e5:3d:26:
         a3:be:3e:e5:47:30:a4:41:a7:a4:b6:0b:8d:d7:c5:80:4b:4f:
         ac:5d:a5:0e:85:41:dd:99:6c:da:85:e5:87:c0:f1:15:19:2b:
         ea:aa:4d:e2:e0:fe:32:6a:db:b4:2f:47:bd:a4:bc:a5:8d:cc:
         32:01:ed:07:a4:c2:2a:06:ea:89:4b:2c:b3:6a:75:2d:47:cf:
         3e:e9:46:f8:07:e7:a4:21:36:54:d4:8f:cc:49:4d:ec:41:88:
         f1:5f:5d:34:ab:5a:5e:08:7a:e9:d0:a3:a6:e5:3d:41:8b:32:
         fc:a6:7a:5c:40:23:75:0f:a1:a2:71:1b:6c:dd:bf:e6:8c:11:
         cf:dc:6a:ff
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:49:59 2026 by rpki-client