Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e2039333034.roa
File:                     3132342e3137332e302e302f31382d3234203d3e2039333034.roa (raw, json)
Hash identifier:          VeTnhbeQG+gh+xmdtbL0azq+4X3B5Fk7lOPCdSpovd0=
Subject key identifier:   C9:A8:4F:CC:8F:FB:8E:E4:C1:C7:E4:40:3E:22:90:E6:82:AF:CD:B3
Certificate issuer:       /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial:       0347CE7A538FC0C1283BA2A8E8FDCB859868AF42
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e2039333034.roa
Signing time:             Fri 11 Sep 2026 12:25:24 +0000
ROA not before:           Fri 11 Sep 2026 12:20:24 +0000
ROA not after:            Fri 10 Sep 2027 12:25:24 +0000
asID:                     9304
IP address blocks:        124.173.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 00:27:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:47:ce:7a:53:8f:c0:c1:28:3b:a2:a8:e8:fd:cb:85:98:68:af:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
        Validity
            Not Before: Sep 11 12:20:24 2026 GMT
            Not After : Sep 10 12:25:24 2027 GMT
        Subject: CN=C9A84FCC8FFB8EE4C1C7E4403E2290E682AFCDB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c5:fd:75:a6:a5:f7:4d:b6:79:0c:8b:99:b1:
                    e0:71:70:11:b7:15:24:77:51:80:81:af:3b:7c:0f:
                    de:34:7b:82:ff:72:cd:66:e0:d7:6a:37:95:6d:c5:
                    db:2b:14:2d:9e:e1:a1:7d:e5:9c:aa:fd:5e:e3:51:
                    e3:af:a5:01:21:47:be:dc:db:72:15:b0:85:b2:2e:
                    2c:ba:6f:cd:65:98:b7:c5:35:ad:5b:ad:54:87:95:
                    ca:e0:53:13:f1:a5:52:b4:6d:cf:c8:45:79:f4:70:
                    64:60:0a:fb:ee:d1:ad:6a:57:b2:c4:86:e3:bc:19:
                    9b:bb:e1:60:5a:3f:d2:9e:1d:bc:3f:4f:2d:5b:ac:
                    fa:6c:08:8b:2e:c5:af:eb:f7:94:51:cf:7b:db:fb:
                    c3:9d:73:6a:ee:66:fb:0d:c3:20:b3:fb:cc:0e:43:
                    ad:38:d4:99:48:6f:f9:22:9d:59:29:48:af:2d:bb:
                    ff:0c:de:46:de:44:ce:47:ee:1c:c4:48:26:16:d4:
                    61:4f:4e:e7:c3:a9:73:9a:12:c3:0b:75:ea:05:4a:
                    52:85:79:c0:77:03:5b:c3:8f:f5:3e:81:9b:48:42:
                    a3:ba:61:69:c9:d2:21:98:b1:57:21:8f:f9:07:b3:
                    10:28:81:c2:d3:fa:bd:19:0b:ab:8b:75:0c:7f:47:
                    ee:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A8:4F:CC:8F:FB:8E:E4:C1:C7:E4:40:3E:22:90:E6:82:AF:CD:B3
            X509v3 Authority Key Identifier:
                keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.173.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4a:21:64:78:50:52:1e:2a:68:89:cf:66:2d:92:fc:64:56:7a:
         80:52:8b:9b:d4:ac:d3:f2:7c:da:9c:1e:22:9a:10:65:9d:b0:
         be:4c:75:f1:b5:a9:ec:c5:9d:4a:a9:50:bc:7d:41:d1:25:e1:
         1e:83:bc:45:e5:f6:c3:03:01:96:e8:d4:8d:e4:13:e8:95:9a:
         c5:49:f1:70:94:62:d6:98:ce:e7:2d:b7:12:25:3b:86:c0:dd:
         02:33:29:bb:d0:04:1a:c2:e8:d7:01:f6:ef:b9:5a:fb:df:bd:
         d1:1c:05:d9:3c:bf:f6:1d:0f:09:18:e7:51:5f:6c:6c:10:1f:
         cb:ea:62:95:72:2a:8b:d2:6b:08:7d:2a:9b:a7:0c:7f:f1:1f:
         46:24:2b:da:58:ed:64:41:df:25:c5:6f:f2:a0:36:79:d0:b7:
         de:a9:ee:8a:6a:25:44:f2:63:a0:29:05:05:c0:73:0c:e6:8d:
         92:02:fb:75:8e:07:d1:39:37:d3:ab:14:0f:7b:8f:37:b0:b5:
         7f:aa:91:ad:61:7e:c7:e5:02:40:90:7b:b1:a8:0f:38:fb:26:
         6f:91:54:9e:40:6e:c3:0f:f3:94:be:0f:96:10:ee:d7:d6:bd:
         23:ee:69:52:4a:23:1b:f3:03:4c:eb:c2:d6:9c:a3:f6:49:37:
         e8:9f:3c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:44:29 2026 by rpki-client