Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e39362e302f31392d3139203d3e20313334373634.roa
File:                     3132342e3137332e39362e302f31392d3139203d3e20313334373634.roa (raw, json)
Hash identifier:          z2rkcpsgYemmInt75dSJGxLr1LAc/QJMJUMfXR2IFcI=
Subject key identifier:   EE:C3:FD:E9:B5:F6:27:2E:92:99:54:04:71:8A:B9:D0:7C:F2:57:D2
Certificate issuer:       /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial:       1627ACE796652E77C968E465FFB0060BCBF88BEF
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e39362e302f31392d3139203d3e20313334373634.roa
Signing time:             Tue 14 Apr 2026 03:32:11 +0000
ROA not before:           Tue 14 Apr 2026 03:27:11 +0000
ROA not after:            Tue 13 Apr 2027 03:32:11 +0000
asID:                     134764
IP address blocks:        124.173.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 08:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:27:ac:e7:96:65:2e:77:c9:68:e4:65:ff:b0:06:0b:cb:f8:8b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
        Validity
            Not Before: Apr 14 03:27:11 2026 GMT
            Not After : Apr 13 03:32:11 2027 GMT
        Subject: CN=EEC3FDE9B5F6272E92995404718AB9D07CF257D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:00:6a:b1:30:d3:30:e7:fb:c7:ae:d9:20:31:
                    4c:63:97:65:9d:a2:c7:55:1d:c9:25:bf:4b:dc:96:
                    5d:8c:c7:08:88:f9:52:8c:bb:51:59:73:d0:e0:8c:
                    65:56:6d:45:ba:ff:1e:45:83:8d:ad:ce:15:c3:2f:
                    b3:e3:5a:77:96:49:94:42:17:d4:91:cf:26:72:f4:
                    4e:82:39:1a:f0:76:17:51:c3:0a:8b:74:26:1f:21:
                    b3:91:62:a6:37:4e:1f:20:fd:60:29:fb:6f:15:62:
                    6d:1c:fd:6c:56:b1:20:cb:06:ce:5f:05:d6:46:0c:
                    bf:08:98:22:c7:3f:f0:6b:71:4a:7d:93:b2:c5:8c:
                    02:16:b6:5f:30:6e:fc:ee:24:ab:f0:e1:88:6c:db:
                    69:48:f4:85:47:ae:62:38:a8:0a:3a:f4:62:33:11:
                    3a:2c:b8:92:14:05:cc:73:51:12:40:35:dd:b6:78:
                    8b:4f:64:15:80:0a:fc:ee:18:57:ea:34:7d:a3:58:
                    d0:d0:c5:b2:9e:4b:36:df:cd:22:1f:bf:3f:35:b8:
                    78:f9:0c:94:37:1d:55:28:a5:ed:78:89:80:35:68:
                    64:ff:6f:3b:e5:f6:75:f3:cc:9e:97:37:33:0f:71:
                    e8:54:df:3d:b1:74:dc:bf:f3:bd:f8:8d:ae:12:f8:
                    30:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C3:FD:E9:B5:F6:27:2E:92:99:54:04:71:8A:B9:D0:7C:F2:57:D2
            X509v3 Authority Key Identifier:
                keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e39362e302f31392d3139203d3e20313334373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.173.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9f:0f:36:1d:21:4d:9a:4f:07:d1:fa:f5:0e:f9:97:c0:0d:f4:
         29:34:f4:43:8c:a1:e4:04:1f:c2:4c:6e:35:51:de:38:49:c1:
         27:e1:de:b0:48:4c:fa:c9:2c:50:9f:15:52:3a:e1:e2:65:16:
         ee:c8:02:de:f0:23:96:ce:93:7c:0d:f4:02:3d:4e:a6:af:f6:
         7c:8f:a7:68:5e:4d:86:58:8f:ff:5c:f4:17:e9:0e:5b:10:82:
         29:eb:b8:1b:ae:f1:51:76:d2:48:b6:46:16:88:20:8f:be:cd:
         f5:df:7a:81:ad:3e:0e:b7:7c:7d:1a:9b:12:01:4c:f0:69:05:
         c9:7f:f2:93:be:fd:f8:36:30:99:a0:83:5f:49:c6:c2:04:cb:
         72:1d:26:8d:2c:46:c4:74:4a:0b:10:9d:0c:b6:3f:0c:ee:b2:
         3f:33:e4:6a:2d:f4:fd:bf:ee:58:ef:33:02:03:1f:78:60:cf:
         e3:48:4d:18:13:18:d8:1f:1d:3a:59:04:7d:37:b0:07:dd:72:
         07:72:19:c6:83:f3:c8:36:26:18:07:54:0d:b8:ba:0a:68:0e:
         8e:7f:00:d4:91:ed:3e:c9:79:02:20:0f:f4:93:2d:a4:aa:58:
         61:5a:cc:e7:bb:f3:9f:69:b6:ce:87:1c:d5:42:77:fa:c3:87:
         bb:c0:7e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:49:27 2026 by rpki-client