Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e2030.roa
File:                     3132342e3137332e302e302f31382d3234203d3e2030.roa (raw, json)
Hash identifier:          RIKCM171CIY8W4bjdqWf1/b9TtuCfvea7/NQ1gyF5+Y=
Subject key identifier:   A2:15:3A:45:99:10:61:E6:0B:C6:DC:6D:79:AA:96:D9:D5:44:7A:1E
Certificate issuer:       /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial:       0B33BB34F8339FAE65E1A30B56C4C82ED5A500C5
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e2030.roa
Signing time:             Fri 16 Oct 2026 02:32:26 +0000
ROA not before:           Fri 16 Oct 2026 02:27:26 +0000
ROA not after:            Fri 15 Oct 2027 02:32:26 +0000
asID:                     0
IP address blocks:        124.173.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Nov 2026 19:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:33:bb:34:f8:33:9f:ae:65:e1:a3:0b:56:c4:c8:2e:d5:a5:00:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
        Validity
            Not Before: Oct 16 02:27:26 2026 GMT
            Not After : Oct 15 02:32:26 2027 GMT
        Subject: CN=A2153A45991061E60BC6DC6D79AA96D9D5447A1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:04:81:98:94:12:7d:18:3d:76:2a:f4:35:
                    28:90:e8:fa:52:84:f3:d1:ca:17:90:fd:30:4a:4d:
                    e3:f7:e5:39:4f:a8:74:3f:8b:b1:23:63:56:1e:af:
                    96:36:ee:7d:16:0d:83:c2:b0:d0:a4:5e:b4:8b:62:
                    36:8d:90:f4:3c:0a:cd:9d:19:ce:cf:61:fb:a2:4e:
                    16:cb:41:e7:68:58:fa:d8:e0:bb:b6:00:1a:02:f5:
                    c1:95:52:5c:fd:70:4e:8d:6a:43:5b:ee:f5:49:7d:
                    bc:24:74:47:6f:2b:8f:6e:81:44:6f:11:00:3f:61:
                    a3:c6:4e:15:ba:31:02:fd:b0:c1:5a:be:f7:f7:94:
                    83:c1:2c:79:67:11:74:97:d9:c7:14:2a:8e:10:df:
                    2d:63:e7:0c:e3:23:61:1f:7b:49:24:ba:8f:1e:5a:
                    61:c3:94:f0:fc:e7:ab:a6:c6:97:28:5a:8f:2c:fd:
                    37:cb:1d:59:5e:c8:20:f0:5d:43:4c:1f:3b:86:49:
                    46:78:1a:3b:b3:f4:fc:6d:96:aa:1c:26:83:be:a3:
                    fd:e1:f5:24:ab:82:5b:dd:9a:9f:4e:21:1f:20:a4:
                    86:e4:05:66:7f:2c:3a:e1:df:1f:c6:65:93:cd:0c:
                    4a:9a:b1:cb:80:b5:4e:99:5f:40:9e:99:1b:61:c6:
                    26:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:15:3A:45:99:10:61:E6:0B:C6:DC:6D:79:AA:96:D9:D5:44:7A:1E
            X509v3 Authority Key Identifier:
                keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.173.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9e:aa:b8:31:a0:d7:1b:74:40:2e:6b:14:69:7c:8e:c7:96:ab:
         93:18:d1:38:3a:8e:bd:4e:3c:14:ae:b2:0a:6d:ea:e9:20:0c:
         d5:4c:07:0d:7c:7a:77:e6:eb:79:05:7d:ce:2f:52:42:3d:d7:
         04:09:65:1f:dc:d9:38:4c:69:22:59:f7:e1:50:ff:38:14:00:
         6c:85:60:c9:28:5a:36:25:2e:2b:6b:17:74:a7:7f:ca:aa:bd:
         94:8b:d3:a4:9a:70:e4:b6:88:8b:1a:f2:e3:76:5b:de:6f:10:
         7d:db:d4:60:09:7b:98:60:76:ac:08:7f:60:dc:3d:d7:c3:c5:
         c3:7f:e7:01:1f:8a:b3:8f:52:21:ef:6d:11:27:90:f5:6f:85:
         6e:43:4a:ca:34:ed:82:38:e6:7a:2e:4c:66:d0:9b:b4:9f:88:
         88:d9:f1:f2:ed:2b:4d:34:c1:49:be:ec:34:b7:b1:0c:f6:20:
         21:32:37:1d:9e:ea:bd:be:1e:7b:b3:25:68:9b:50:71:05:c2:
         ab:fa:f9:07:78:3f:e7:13:59:68:d8:8a:5f:63:2f:ca:91:25:
         4f:84:1f:bd:ea:2b:30:36:5b:a5:23:8e:8b:77:b7:de:a9:c4:
         6a:1a:14:a9:be:db:e2:67:e0:71:cb:6c:b5:38:5d:0d:64:2d:
         26:2b:3e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:03:32 2026 by rpki-client