Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e3136302e302f31392d3139203d3e20313336323030.roa
File:                     3132342e3137322e3136302e302f31392d3139203d3e20313336323030.roa (raw, json)
Hash identifier:          vgV+KiCL7Jh1Hpz3MBlVM5eiO1wvYW4p4cVHC26reZc=
Subject key identifier:   26:80:58:A2:07:20:DF:AC:FF:DA:01:4C:3C:B6:36:49:AB:31:73:19
Certificate issuer:       /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial:       568881FB1EA9F50F2067BCEBF011C8BA79D757
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e3136302e302f31392d3139203d3e20313336323030.roa
Signing time:             Tue 14 Apr 2026 03:32:11 +0000
ROA not before:           Tue 14 Apr 2026 03:27:11 +0000
ROA not after:            Tue 13 Apr 2027 03:32:11 +0000
asID:                     136200
IP address blocks:        124.172.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 08:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:88:81:fb:1e:a9:f5:0f:20:67:bc:eb:f0:11:c8:ba:79:d7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
        Validity
            Not Before: Apr 14 03:27:11 2026 GMT
            Not After : Apr 13 03:32:11 2027 GMT
        Subject: CN=268058A20720DFACFFDA014C3CB63649AB317319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f8:fb:3c:df:74:46:54:a2:b2:d9:2f:8d:a3:
                    cc:17:16:d6:d2:74:8d:5f:6b:1a:b9:a8:e2:3b:fc:
                    eb:5c:3f:48:fd:b8:3a:ab:da:eb:1e:de:be:59:8c:
                    5b:33:7d:d9:cc:1b:e3:17:38:49:2f:ad:17:21:c2:
                    3d:75:13:4a:25:4f:4d:09:7e:79:60:aa:bb:eb:11:
                    ce:96:0c:69:06:81:ac:b2:7d:41:ed:8d:97:12:20:
                    03:3c:08:17:96:db:f6:65:45:2d:1d:66:ba:1d:00:
                    9e:6e:92:ea:cc:2d:66:48:ee:2b:78:d5:3b:c3:7b:
                    92:99:b1:e3:5e:e8:da:9b:70:b5:e2:fd:0a:17:66:
                    1a:af:c9:1a:93:34:f5:16:13:5c:b4:af:34:16:e7:
                    8c:0b:f7:ba:d8:e6:7d:48:a8:16:81:74:98:e1:e0:
                    43:76:4c:97:67:20:7a:da:cc:0c:74:5f:b7:08:53:
                    a8:e3:0e:34:37:12:b8:b7:92:3e:80:1f:de:d6:a9:
                    90:54:46:58:dd:71:0f:1c:a2:72:c3:bd:13:1f:30:
                    8d:d7:e5:b1:16:dd:07:13:53:93:34:da:7d:30:08:
                    02:e1:ab:93:7a:94:49:41:be:8c:ea:4e:ce:33:87:
                    8f:1b:79:e0:28:d9:08:6f:3c:8f:b7:55:02:0a:96:
                    a1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:80:58:A2:07:20:DF:AC:FF:DA:01:4C:3C:B6:36:49:AB:31:73:19
            X509v3 Authority Key Identifier:
                keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e3136302e302f31392d3139203d3e20313336323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.172.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         51:fa:65:40:c6:b9:e1:72:98:36:17:b2:00:ac:c8:86:3f:69:
         f0:19:10:e3:da:3d:b3:02:8a:82:a8:ea:d9:ac:f3:4d:43:40:
         3d:cf:b9:05:bd:8b:26:a7:df:0f:5b:7c:db:46:71:e2:7a:a8:
         b3:b6:3a:9d:cc:e6:03:00:82:c2:6f:67:fb:3e:d3:c2:38:ff:
         f0:4d:13:15:7c:da:b4:44:b2:d7:9f:29:95:56:18:70:03:de:
         8b:79:c8:c7:ca:03:a8:ca:d9:d0:6b:43:7c:5a:b2:25:0c:99:
         8e:3c:36:20:7d:9f:58:1a:7f:5a:d5:c9:29:39:62:96:28:35:
         6b:59:b4:7f:b3:a6:35:36:53:cc:fd:95:7a:24:03:32:ef:ec:
         0e:9f:ec:24:2b:c3:19:e9:a2:05:2d:44:9c:3d:9f:60:1c:07:
         50:e2:df:5e:7a:7c:89:4a:db:6b:24:28:ba:4e:22:b3:e6:8d:
         2b:1e:7f:b3:64:fa:8d:c3:d4:7d:e3:2b:2f:2e:1d:77:e6:3a:
         f8:83:c8:24:9b:17:73:dd:8f:68:1a:d2:46:e6:c8:c9:b8:d4:
         95:41:3e:28:bf:31:3b:ce:25:2e:26:0b:e0:c5:f4:5a:41:a0:
         45:e5:e7:c8:42:3c:16:12:f1:81:ce:a1:aa:2b:f4:ee:18:86:
         87:66:4f:6d
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgITVoiB+x6p9Q8gZ7zr8BHIunnXVzANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhGMzI5RjUxODcyNEZBQzY5NUUzM0Y1Qzc4NTMyQ0JGNTZC
RjQyNDNEMB4XDTI2MDQxNDAzMjcxMVoXDTI3MDQxMzAzMzIxMVowMzExMC8GA1UE
AxMoMjY4MDU4QTIwNzIwREZBQ0ZGREEwMTRDM0NCNjM2NDlBQjMxNzMxOTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALj4+zzfdEZUorLZL42jzBcW1tJ0
jV9rGrmo4jv861w/SP24Oqva6x7evlmMWzN92cwb4xc4SS+tFyHCPXUTSiVPTQl+
eWCqu+sRzpYMaQaBrLJ9Qe2NlxIgAzwIF5bb9mVFLR1muh0Anm6S6swtZkjuK3jV
O8N7kpmx417o2ptwteL9ChdmGq/JGpM09RYTXLSvNBbnjAv3utjmfUioFoF0mOHg
Q3ZMl2cgetrMDHRftwhTqOMONDcSuLeSPoAf3tapkFRGWN1xDxyicsO9Ex8wjdfl
sRbdBxNTkzTafTAIAuGrk3qUSUG+jOpOzjOHjxt54CjZCG88j7dVAgqWoR8CAwEA
AaOCAhowggIWMB0GA1UdDgQWBBQmgFiiByDfrP/aAUw8tjZJqzFzGTAfBgNVHSME
GDAWgBTzKfUYck+saV4z9ceFMsv1a/QkPTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0f
BGwwajBooGagZIZicnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1
NTc2MTk5OTQ3ODEyODY3LzAvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNC
RjU2QkY0MjQzRC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3lu
YzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUwOTA2NzU3MTUv
MS9GMzI5RjUxODcyNEZBQzY5NUUzM0Y1Qzc4NTMyQ0JGNTZCRjQyNDNELmNlcjCB
kwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc4MTI4NjcvMC8zMTMyMzQyZTMx
MzczMjJlMzEzNjMwMmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzEzMzM2MzIzMDMw
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQFfKygMA0GCSqGSIb3DQEBCwUAA4IBAQBR+mVAxrnhcpg2F7IA
rMiGP2nwGRDj2j2zAoqCqOrZrPNNQ0A9z7kFvYsmp98PW3zbRnHieqiztjqdzOYD
AILCb2f7PtPCOP/wTRMVfNq0RLLXnymVVhhwA96LecjHygOoytnQa0N8WrIlDJmO
PDYgfZ9YGn9a1ckpOWKWKDVrWbR/s6Y1NlPM/ZV6JAMy7+wOn+wkK8MZ6aIFLUSc
PZ9gHAdQ4t9eenyJSttrJCi6TiKz5o0rHn+zZPqNw9R94ysvLh135jr4g8gkmxdz
3Y9oGtJG5sjJuNSVQT4ovzE7ziUuJgvgxfRaQaBF5efIQjwWEvGBzqGqK/TuGIaH
Zk9t
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:34 2026 by rpki-client