Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139362e302f32342d3234203d3e2034353135.roa
File:                     3132332e34392e3139362e302f32342d3234203d3e2034353135.roa (raw, json)
Hash identifier:          LXx/rGIx/9w6pFw56VkZ6Mqff7i1/5BgxHn6MefLK/0=
Subject key identifier:   55:2C:74:D4:4B:7E:6D:19:3A:B2:7F:27:19:2C:12:FD:60:7B:B8:65
Certificate issuer:       /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial:       1BAE61DF5DF5E7B0AE95F760F12D818361E89693
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139362e302f32342d3234203d3e2034353135.roa
Signing time:             Wed 15 Apr 2026 09:28:18 +0000
ROA not before:           Wed 15 Apr 2026 09:23:18 +0000
ROA not after:            Wed 14 Apr 2027 09:28:18 +0000
asID:                     4515
IP address blocks:        123.49.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ae:61:df:5d:f5:e7:b0:ae:95:f7:60:f1:2d:81:83:61:e8:96:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
        Validity
            Not Before: Apr 15 09:23:18 2026 GMT
            Not After : Apr 14 09:28:18 2027 GMT
        Subject: CN=552C74D44B7E6D193AB27F27192C12FD607BB865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:22:e5:7c:e4:0c:e3:dd:f8:0f:26:bc:ae:cf:
                    4c:08:ef:58:98:22:ef:4c:eb:94:b2:e0:81:c1:a7:
                    8e:9f:df:72:86:0d:3d:79:2a:fd:2c:e0:a4:c4:86:
                    a2:c0:22:db:e7:87:bc:8f:e9:f3:6b:d5:eb:f5:2d:
                    a2:d4:5c:de:e0:e1:d8:80:cf:84:c6:36:22:d3:3e:
                    56:6c:55:30:e1:0a:ed:fe:a5:ab:76:b1:2a:05:fc:
                    04:1c:4c:45:15:77:34:9f:c5:c2:2c:42:09:1a:ce:
                    88:2b:8a:36:0c:78:79:22:5f:bd:31:d6:5a:ca:b7:
                    95:a2:fb:01:ff:80:72:18:6b:25:58:34:34:f9:a5:
                    ed:1b:09:00:3d:8e:b4:14:b4:e8:c1:85:cb:2f:af:
                    f0:fa:6a:99:55:53:ba:63:7f:c3:8d:3e:61:f7:1f:
                    c9:67:67:27:aa:b7:d3:c5:19:e5:f5:d3:c0:5d:6e:
                    45:74:b6:b2:27:5b:be:80:5c:3d:8c:4f:94:97:cc:
                    b5:77:ca:3b:f0:77:8e:b8:f2:19:64:96:c7:bd:9c:
                    87:ea:49:90:b6:fd:8f:fd:69:b8:07:33:fa:d1:bc:
                    a3:d8:3f:66:45:7b:88:27:1c:b1:6d:7c:32:07:13:
                    92:93:2d:3e:5e:44:ef:95:78:75:a8:19:a5:85:e1:
                    75:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2C:74:D4:4B:7E:6D:19:3A:B2:7F:27:19:2C:12:FD:60:7B:B8:65
            X509v3 Authority Key Identifier:
                keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139362e302f32342d3234203d3e2034353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.49.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:8f:51:2e:55:a5:8a:09:13:b5:58:99:b3:a8:3f:e9:4a:db:
         9b:bf:52:3f:d6:70:be:24:da:7a:71:0b:44:c3:04:58:86:bb:
         ed:a1:4a:20:ef:2a:48:9c:31:c9:6b:b6:32:4f:05:47:c3:4d:
         57:90:45:7c:78:c3:e7:04:be:7b:67:e6:e2:5a:db:f2:e0:99:
         53:d0:ce:7d:b9:fb:6c:51:eb:7e:83:d2:7d:3b:47:8b:4c:67:
         5b:bd:d1:07:08:88:cb:a8:fa:77:e1:8c:3f:8d:fa:03:18:8e:
         d6:dd:78:e8:6a:ea:0c:de:64:85:66:12:26:c1:a9:13:80:7e:
         ad:ce:fe:02:a3:fb:f7:6b:00:11:ac:82:c0:5d:62:38:80:34:
         39:de:b8:4c:a1:1d:29:0a:76:5f:dd:1a:6e:77:75:e5:3f:32:
         22:c7:7f:17:a6:f9:b9:e8:8d:9f:70:00:f7:c0:d2:c0:10:b1:
         1f:2b:29:90:8a:3a:83:56:51:22:ab:2d:f2:49:00:b7:9b:48:
         ca:0b:3b:28:dd:7f:3f:5e:a8:09:7c:7c:e3:48:dd:f2:2e:69:
         48:bb:f6:88:74:83:54:56:99:0c:7c:33:0f:03:72:a0:ab:ff:
         91:df:2d:42:2d:4d:15:6c:3a:fe:a3:d9:69:1b:82:4e:a5:50:
         28:a9:04:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:53:17 2026 by rpki-client