Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e2039333034.roa
File:                     3132342e3137332e302e302f31382d3234203d3e2039333034.roa (raw, json)
Hash identifier:          ZGXO+n5sutjMsYxHE6o8kMFvdGE3SokpmalL39RcquA=
Subject key identifier:   25:0F:FB:59:2C:D6:DB:73:E0:37:00:8C:2E:8B:79:50:7E:9C:50:CA
Certificate issuer:       /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial:       3DD5E683BFB4F6D9D852B1093F96356D583038C6
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e2039333034.roa
Signing time:             Fri 05 Jun 2026 10:22:55 +0000
ROA not before:           Fri 05 Jun 2026 10:17:55 +0000
ROA not after:            Fri 04 Jun 2027 10:22:55 +0000
asID:                     9304
IP address blocks:        124.173.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 23:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d5:e6:83:bf:b4:f6:d9:d8:52:b1:09:3f:96:35:6d:58:30:38:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
        Validity
            Not Before: Jun  5 10:17:55 2026 GMT
            Not After : Jun  4 10:22:55 2027 GMT
        Subject: CN=250FFB592CD6DB73E037008C2E8B79507E9C50CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:20:7c:7c:b9:2f:d9:69:79:c5:bd:92:6c:dd:
                    bd:78:d5:b2:84:3b:c4:44:00:71:6e:97:7b:3d:e9:
                    3a:f6:ab:44:9f:60:cc:c5:35:b6:75:6e:90:4c:69:
                    d5:98:4e:04:12:86:b3:ea:9a:3a:f1:e4:db:cb:f2:
                    da:15:28:c0:66:e0:20:8f:92:4b:71:04:69:9a:5d:
                    11:b4:f7:b7:b2:e9:15:36:fd:7f:e1:c5:e7:19:4b:
                    98:a0:47:e1:4a:f0:e8:10:6c:a1:4f:14:13:10:0d:
                    4f:4c:0c:3e:4d:d7:27:6c:ad:c9:27:9b:68:08:ef:
                    9e:94:4b:e3:10:5c:b0:02:1c:f7:90:34:f4:70:ba:
                    3f:14:a4:f6:67:b2:6e:e3:2b:f8:d4:8c:e3:73:7a:
                    2b:82:79:28:bb:02:63:0f:1f:e9:6a:29:ac:79:5d:
                    03:87:67:fe:07:66:4e:74:a2:fd:9a:f9:8c:7d:57:
                    db:e8:cb:c8:ba:a7:31:e8:13:9d:be:d4:45:06:f2:
                    c9:fa:d5:2a:71:b9:fe:cf:87:b3:53:e3:5a:08:95:
                    62:8c:8f:e4:3d:2a:24:05:d6:dd:fc:21:45:0b:07:
                    6c:b0:50:d8:8e:3a:38:57:42:08:25:da:e1:3c:6f:
                    69:99:d3:27:15:61:21:30:a3:d4:a7:1b:59:a9:ba:
                    1f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0F:FB:59:2C:D6:DB:73:E0:37:00:8C:2E:8B:79:50:7E:9C:50:CA
            X509v3 Authority Key Identifier:
                keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.173.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8f:ad:27:4b:d5:4b:0f:96:b3:c1:b0:12:0f:38:59:79:98:bf:
         f4:0a:ad:d2:31:45:01:bf:e6:85:dc:ec:8a:ba:f7:8d:56:5a:
         f7:d4:1b:de:85:21:c9:98:d9:bc:26:40:d2:1c:2c:2b:1f:28:
         2c:f7:fb:9e:7e:80:2d:bb:7e:cc:40:e3:e8:54:ac:69:58:e1:
         d9:d2:41:fa:8a:58:64:86:8c:be:3a:0c:7f:c2:5a:80:89:c9:
         d7:4b:ff:d6:fb:a8:59:06:c5:c5:62:59:02:6b:aa:6f:29:38:
         25:5b:f5:c8:61:29:c4:8e:92:f6:74:c1:7a:e3:0f:55:ee:a5:
         f2:0b:a4:7a:76:14:b5:17:b7:22:85:d3:07:c7:1f:0a:4b:42:
         f0:a9:72:85:42:c4:b8:e4:3b:a0:1d:b6:09:0a:a0:cd:36:d5:
         e1:35:bb:df:06:52:bd:06:ef:90:f2:6b:a3:ad:14:c6:d1:f1:
         00:2a:a2:47:47:a3:da:72:12:aa:1c:1f:92:77:d8:66:dc:03:
         3a:8c:d1:af:96:72:28:a9:bf:b6:ea:f5:c2:95:4e:15:dc:9c:
         22:71:fe:b4:48:e4:20:47:48:67:a9:33:d0:24:44:99:f6:35:
         1d:ab:1a:c9:79:cd:ef:a2:c5:40:8b:0a:1a:98:f1:5b:6c:55:
         6f:ef:4c:f5
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUPdXmg7+09tnYUrEJP5Y1bVgwOMYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2
QkY0MjQzRDAeFw0yNjA2MDUxMDE3NTVaFw0yNzA2MDQxMDIyNTVaMDMxMTAvBgNV
BAMTKDI1MEZGQjU5MkNENkRCNzNFMDM3MDA4QzJFOEI3OTUwN0U5QzUwQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4IHx8uS/ZaXnFvZJs3b141bKE
O8REAHFul3s96Tr2q0SfYMzFNbZ1bpBMadWYTgQShrPqmjrx5NvL8toVKMBm4CCP
kktxBGmaXRG097ey6RU2/X/hxecZS5igR+FK8OgQbKFPFBMQDU9MDD5N1ydsrckn
m2gI756US+MQXLACHPeQNPRwuj8UpPZnsm7jK/jUjONzeiuCeSi7AmMPH+lqKax5
XQOHZ/4HZk50ov2a+Yx9V9voy8i6pzHoE52+1EUG8sn61Spxuf7Ph7NT41oIlWKM
j+Q9KiQF1t38IUULB2ywUNiOOjhXQggl2uE8b2mZ0ycVYSEwo9SnG1mpuh+NAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUJQ/7WSzW23PgNwCMLot5UH6cUMowHwYDVR0j
BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD
QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODEyODY3LzAvMzEzMjM0MmUzMTM3
MzMyZTMwMmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzkzMzMwMzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAZ8rQAwDQYJKoZIhvcNAQELBQADggEBAI+tJ0vVSw+Ws8GwEg84WXmYv/QKrdIx
RQG/5oXc7Iq6941WWvfUG96FIcmY2bwmQNIcLCsfKCz3+55+gC27fsxA4+hUrGlY
4dnSQfqKWGSGjL46DH/CWoCJyddL/9b7qFkGxcViWQJrqm8pOCVb9chhKcSOkvZ0
wXrjD1XupfILpHp2FLUXtyKF0wfHHwpLQvCpcoVCxLjkO6AdtgkKoM021eE1u98G
Ur0G75Dya6OtFMbR8QAqokdHo9pyEqocH5J32GbcAzqM0a+Wciipv7bq9cKVThXc
nCJx/rRI5CBHSGepM9AkRJn2NR2rGsl5ze+ixUCLChqY8VtsVW/vTPU=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:08:50 2026 by rpki-client