Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e302e302f31372d3234203d3e2039333034.roa
File:                     3132342e3137322e302e302f31372d3234203d3e2039333034.roa (raw, json)
Hash identifier:          wocpl3Tnv8dIsMbES2nIlUUl5pFueWfyjQ1D0QsAisg=
Subject key identifier:   7C:78:B8:AC:6E:FC:76:E7:78:F4:DF:38:CC:6C:C8:A7:22:6E:B4:B8
Certificate issuer:       /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial:       0B7676843DE94F6E8DFC8FEC0818AF74410E9DF3
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e302e302f31372d3234203d3e2039333034.roa
Signing time:             Fri 11 Sep 2026 12:25:25 +0000
ROA not before:           Fri 11 Sep 2026 12:20:25 +0000
ROA not after:            Fri 10 Sep 2027 12:25:25 +0000
asID:                     9304
IP address blocks:        124.172.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 00:27:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:76:76:84:3d:e9:4f:6e:8d:fc:8f:ec:08:18:af:74:41:0e:9d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
        Validity
            Not Before: Sep 11 12:20:25 2026 GMT
            Not After : Sep 10 12:25:25 2027 GMT
        Subject: CN=7C78B8AC6EFC76E778F4DF38CC6CC8A7226EB4B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8e:de:bc:62:ea:6a:64:b8:6a:5d:86:5d:38:
                    20:cf:40:6e:64:04:11:6c:ec:f8:cc:52:b0:8f:a4:
                    f7:e9:23:ad:74:8b:7f:a5:66:03:aa:1a:37:8f:e0:
                    27:f8:19:f6:92:3d:b6:7d:57:d8:94:23:5d:55:f6:
                    f6:cb:02:5f:9f:b3:31:64:7b:85:d8:5d:5e:ae:1d:
                    13:ce:2c:13:4b:a2:92:be:fe:a2:ce:5b:45:b2:56:
                    bb:20:57:f9:10:17:55:c1:b4:a1:55:93:30:4f:f1:
                    5e:2a:2c:58:b9:a0:c1:38:d6:76:b9:e5:6b:52:4e:
                    c9:b2:9e:5e:ab:02:c2:56:d6:3d:9d:e2:94:93:de:
                    a8:f1:78:ab:75:a4:e4:a4:91:e9:b1:59:83:96:f9:
                    00:93:0f:28:c4:7e:dc:28:1e:a6:bc:09:b3:76:24:
                    65:c3:ef:fb:51:3a:98:39:1d:53:e2:30:e5:70:52:
                    4f:e8:e0:c7:d7:6b:a5:31:8a:ab:45:e8:27:0f:2c:
                    ef:fe:9c:0d:5f:b5:d9:77:bf:f1:29:36:fe:10:59:
                    88:c2:e7:ae:ff:4a:86:41:48:70:04:fc:12:05:e6:
                    32:af:5f:d5:c1:10:42:0b:f9:01:97:b4:ad:09:4d:
                    e0:6b:37:48:90:29:8a:2e:01:2a:19:00:e7:d0:fa:
                    a5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:78:B8:AC:6E:FC:76:E7:78:F4:DF:38:CC:6C:C8:A7:22:6E:B4:B8
            X509v3 Authority Key Identifier:
                keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e302e302f31372d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.172.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8e:b4:50:66:11:88:82:4e:d7:64:47:a6:ed:79:84:a3:b3:d0:
         ef:9c:da:b4:33:2a:93:6e:e4:78:2a:5c:42:10:71:19:ed:e4:
         b8:55:db:b6:a5:52:57:4c:1b:ab:ad:a1:d8:72:e0:11:f0:07:
         17:d0:48:91:10:cf:b4:65:ed:7c:f7:c2:8c:bf:4e:f3:18:a8:
         c3:8a:1d:77:c8:bd:eb:f4:21:e2:4e:39:02:1a:dd:24:25:c3:
         b2:94:12:83:53:02:9f:46:ff:d7:c7:fe:6d:9c:8c:1a:85:03:
         76:e5:4a:bb:42:1b:37:41:e3:36:fb:90:ae:86:6a:34:6b:e4:
         49:65:8f:a7:74:e6:c0:a0:4b:22:85:0c:c1:6f:cc:18:e0:b1:
         ac:3f:46:14:d5:e4:e6:2c:51:fe:d8:fa:89:66:27:12:0f:7c:
         97:07:76:cf:39:ca:50:64:f3:13:4c:1a:f7:73:a7:75:08:36:
         6e:07:e9:dc:38:01:93:c5:a6:52:b9:d3:04:62:e6:15:e1:16:
         2a:91:1d:95:83:a3:ab:cf:05:1f:10:66:f3:ae:d7:11:88:b4:
         2d:e9:b7:46:93:36:ab:43:43:6f:c2:14:84:75:d8:8a:da:39:
         df:a0:f3:0f:2e:79:99:b1:bb:7f:c4:c6:e7:16:ec:fc:b6:e2:
         3d:91:53:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:41:50 2026 by rpki-client