Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e3139322e302f31382d3234203d3e2039333034.roa
File:                     3132342e3137332e3139322e302f31382d3234203d3e2039333034.roa (raw, json)
Hash identifier:          fzufEqtsV8bdGBF6/tFb4o1WZhdsE7ojmzEMiJfQ+AM=
Subject key identifier:   02:72:F2:B0:A3:C3:C2:A7:5C:DD:C3:B9:40:07:13:84:E9:59:67:53
Certificate issuer:       /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial:       7B153515FAAC920F61D03C3A3CE1546AF17E36B1
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e3139322e302f31382d3234203d3e2039333034.roa
Signing time:             Fri 05 Jun 2026 10:22:55 +0000
ROA not before:           Fri 05 Jun 2026 10:17:55 +0000
ROA not after:            Fri 04 Jun 2027 10:22:55 +0000
asID:                     9304
IP address blocks:        124.173.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 23:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:15:35:15:fa:ac:92:0f:61:d0:3c:3a:3c:e1:54:6a:f1:7e:36:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
        Validity
            Not Before: Jun  5 10:17:55 2026 GMT
            Not After : Jun  4 10:22:55 2027 GMT
        Subject: CN=0272F2B0A3C3C2A75CDDC3B940071384E9596753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:76:ea:f1:c0:b7:b0:66:10:e9:fd:29:ce:c0:
                    e9:d5:07:b7:7d:0a:dc:9d:39:32:70:57:f2:6d:ee:
                    27:75:dd:be:9e:8e:b6:6f:c1:f0:16:d4:ba:98:d1:
                    6b:06:45:3c:23:ac:1d:bb:c8:2d:26:d7:ee:a3:c6:
                    7d:6f:fc:cd:b5:7c:58:30:40:ed:61:4a:22:3f:83:
                    5f:60:d1:ad:19:b9:25:03:50:6a:d3:c6:09:3e:bd:
                    ea:26:5d:4a:74:5a:c2:28:e8:f3:e1:b7:9f:cd:2d:
                    bc:86:02:22:cb:88:f2:8f:bc:00:e7:ff:43:75:c7:
                    bc:1d:85:a1:35:31:83:cb:da:74:34:0c:24:26:3e:
                    80:00:8e:da:b9:f7:1d:c1:e1:bc:9b:ab:8d:aa:ff:
                    20:8b:76:a6:dc:1a:40:50:71:c2:25:31:80:e4:03:
                    e1:8e:e1:be:9d:3e:34:9f:93:38:47:b2:82:86:3d:
                    57:e8:12:e0:14:ba:53:24:27:0b:4b:62:0e:38:1a:
                    8b:07:43:3f:0d:bd:52:92:c5:c3:30:3a:be:c8:54:
                    b3:03:be:0d:d5:0d:c0:59:2e:bd:64:d1:3e:87:2a:
                    63:ea:fe:48:37:e4:73:b1:c5:15:04:d6:22:e0:96:
                    0f:7d:28:98:2f:49:db:48:50:2d:8f:25:24:59:c4:
                    b4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:72:F2:B0:A3:C3:C2:A7:5C:DD:C3:B9:40:07:13:84:E9:59:67:53
            X509v3 Authority Key Identifier:
                keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e3139322e302f31382d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.173.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         bb:55:32:a5:23:82:25:de:53:d5:e7:40:75:19:bd:e9:d1:af:
         6d:98:be:2f:1c:f2:f3:82:51:59:a1:88:89:6a:bb:17:c4:3e:
         fe:3c:45:2b:67:34:77:9c:16:44:bf:84:cc:da:61:a8:a3:a0:
         9b:e6:bc:ef:b7:30:96:21:21:c6:ee:38:c6:4a:4c:f2:ef:81:
         b1:01:fd:6c:65:9f:dc:82:04:5d:95:39:05:d5:91:58:ba:ef:
         a4:bb:dd:33:b0:98:86:1a:cf:65:43:33:ad:1a:b1:55:f2:04:
         c6:06:5e:a4:e7:3c:e7:06:8f:9a:e9:91:01:46:f3:a4:d9:fb:
         25:66:37:c4:66:b2:ee:57:8b:1e:ee:c2:8f:38:d5:e8:9d:20:
         5e:ad:80:a8:5b:da:90:c7:e9:76:e5:ee:7e:d1:c0:45:e6:33:
         cf:3f:36:18:3c:7d:45:d6:f9:ae:e4:da:38:7e:7a:16:83:5c:
         fc:fb:46:23:1d:1a:47:03:27:50:8a:fb:1f:8c:84:69:52:4e:
         a5:28:aa:48:f0:62:d0:6b:af:a1:06:31:ff:53:0a:0f:21:f8:
         cf:29:60:80:63:78:b5:c5:5d:31:12:b3:f2:51:e0:f8:03:06:
         98:de:07:c1:9c:e6:ba:d0:f5:23:9f:3f:5c:35:50:56:5d:97:
         90:5e:12:cb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:34:35 2026 by rpki-client