Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113606036054343699/0/3132322e302e3132342e302f32342d3234203d3e203234343232.roa
File:                     3132322e302e3132342e302f32342d3234203d3e203234343232.roa (raw, json)
Hash identifier:          8PgxQbJwnWj6d/MVr+J3Rd58a7g5hDpd/1pB4+5nU5E=
Subject key identifier:   57:A6:3B:C0:DF:BB:86:2A:B5:6A:EC:57:5E:A2:D2:44:C7:85:2C:A9
Certificate issuer:       /CN=644DEF11BE48198BC5CBDC05F25E712AB41AE3B6
Certificate serial:       78E5F09868E2A9509BF07F2C06698B31E92B9229
Authority key identifier: 64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/3132322e302e3132342e302f32342d3234203d3e203234343232.roa
Signing time:             Sun 31 May 2026 23:25:29 +0000
ROA not before:           Sun 31 May 2026 23:20:29 +0000
ROA not after:            Sun 30 May 2027 23:25:29 +0000
asID:                     24422
IP address blocks:        122.0.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 18:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e5:f0:98:68:e2:a9:50:9b:f0:7f:2c:06:69:8b:31:e9:2b:92:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644DEF11BE48198BC5CBDC05F25E712AB41AE3B6
        Validity
            Not Before: May 31 23:20:29 2026 GMT
            Not After : May 30 23:25:29 2027 GMT
        Subject: CN=57A63BC0DFBB862AB56AEC575EA2D244C7852CA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:11:a6:b8:ac:94:c9:a8:c5:95:9e:e3:27:ae:
                    98:1d:8a:93:d5:20:8b:5f:fa:17:62:f1:e0:62:d5:
                    0f:e1:32:3c:89:04:48:14:7f:71:4d:b5:67:ba:5c:
                    0d:c7:18:b8:fa:24:26:3c:78:7d:8b:da:34:b0:e9:
                    8b:b7:91:25:48:b8:dd:14:44:69:3a:b3:01:2f:1f:
                    4b:ba:1b:48:68:6b:a3:aa:31:f2:9f:2e:20:40:ae:
                    e6:71:83:b5:0e:f8:48:5d:1e:6c:3a:3a:3b:92:2c:
                    e9:51:6a:5d:c2:91:5f:ea:0e:93:c7:e8:0d:82:eb:
                    fe:99:c3:87:ec:43:65:3c:ce:fa:d4:bc:58:ea:f1:
                    f0:1b:d1:5c:15:53:78:e1:2d:c8:5e:12:25:dd:e7:
                    61:75:2d:24:54:ed:80:12:e5:ad:b2:21:c9:bb:46:
                    8d:81:fb:8a:da:17:08:bd:f5:ce:f9:0f:ff:d8:e3:
                    97:3a:62:39:e8:55:05:02:3a:35:be:c5:be:0b:76:
                    e8:2d:a8:f1:e1:1c:80:15:ce:4f:33:a8:7e:7e:20:
                    38:e4:bb:5c:fb:c8:03:ae:56:06:ea:2f:b3:fe:ff:
                    99:4f:5d:ee:5f:8f:44:87:a2:85:16:fc:34:58:98:
                    61:f9:21:45:38:2c:64:14:cb:c9:3f:e4:7b:10:fa:
                    bd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A6:3B:C0:DF:BB:86:2A:B5:6A:EC:57:5E:A2:D2:44:C7:85:2C:A9
            X509v3 Authority Key Identifier:
                keyid:64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/3132322e302e3132342e302f32342d3234203d3e203234343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.0.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:5b:c1:1a:4c:70:04:a9:a2:86:38:b4:72:2e:24:f3:ff:8f:
         fe:2b:83:d9:1c:96:07:56:c9:89:d7:3d:13:cf:b8:6d:2a:9a:
         97:e8:9f:d0:1e:2a:b0:0d:93:2b:ce:10:05:5f:f6:7f:a5:05:
         31:53:5d:e2:34:cb:08:f4:af:95:b7:22:75:89:bf:26:b7:57:
         04:4a:77:aa:46:3e:5d:d9:1f:25:0c:c2:20:ac:60:2c:de:00:
         3b:fe:b0:c0:4a:b8:76:e0:0d:d7:2a:53:37:d0:75:ff:9a:a8:
         44:42:59:55:1d:a2:b4:0b:fa:bf:36:80:22:60:a6:67:d6:e3:
         23:7c:4e:9a:7a:5c:5b:b1:9b:af:65:ce:6d:91:64:f2:fa:00:
         95:43:80:cc:fb:0f:1c:91:99:84:d9:77:d7:9f:b4:6f:12:1f:
         71:ec:73:bc:69:b0:de:35:0c:3a:52:b5:b9:b1:82:1a:60:87:
         eb:ef:21:0b:9c:7d:7d:e0:16:c9:d6:69:dd:78:f7:cd:8a:99:
         7e:aa:a1:4f:ce:a4:db:58:88:b8:46:a9:3d:2b:a3:35:a2:77:
         0d:b3:fe:af:25:cb:ce:11:8b:98:c5:89:c9:f4:01:e3:bf:bd:
         fc:c9:6a:13:b9:8a:3a:1b:5a:4b:8c:48:92:42:4a:96:7e:da:
         87:3e:54:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:04 2026 by rpki-client