Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3132342e31342e372e302f32342d3234203d3e20313331353336.roa
File:                     3132342e31342e372e302f32342d3234203d3e20313331353336.roa (raw, json)
Hash identifier:          CsiJAib13bjqRBlimbK3uTYoMIBIKwMNewp2EygK87w=
Subject key identifier:   8A:EA:DB:43:6D:3E:8B:E4:72:CA:FA:70:53:5C:BB:C2:5C:5F:49:BA
Certificate issuer:       /CN=A162689F28161D4D4C3DF339D95097D5EF647370
Certificate serial:       7DA6052DEBD04D531B81B38537B3DA9BF4920B76
Authority key identifier: A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3132342e31342e372e302f32342d3234203d3e20313331353336.roa
Signing time:             Thu 11 Jun 2026 04:33:31 +0000
ROA not before:           Thu 11 Jun 2026 04:28:31 +0000
ROA not after:            Thu 10 Jun 2027 04:33:31 +0000
asID:                     131536
IP address blocks:        124.14.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a6:05:2d:eb:d0:4d:53:1b:81:b3:85:37:b3:da:9b:f4:92:0b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A162689F28161D4D4C3DF339D95097D5EF647370
        Validity
            Not Before: Jun 11 04:28:31 2026 GMT
            Not After : Jun 10 04:33:31 2027 GMT
        Subject: CN=8AEADB436D3E8BE472CAFA70535CBBC25C5F49BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:4a:be:8f:ce:2d:ec:f8:9a:08:93:ad:59:
                    60:fc:8a:58:63:4d:36:30:1c:73:3e:f4:3a:88:cd:
                    a0:8d:1d:2b:d9:ca:38:71:b5:f5:47:8c:7f:5a:bd:
                    9e:1f:75:9f:39:a9:62:85:fe:7d:01:13:c7:16:f9:
                    78:3c:7a:0c:30:b6:ca:85:ea:f7:60:14:1c:16:4e:
                    ae:51:6d:00:9b:df:6f:2e:8a:e5:ca:fb:97:c4:a4:
                    10:6b:77:a5:2c:67:cb:ab:5b:4f:28:42:b0:c2:0a:
                    d0:13:14:1e:05:32:95:ac:94:72:10:56:32:49:61:
                    a5:45:e0:a4:db:93:06:73:7a:9b:33:70:bf:dd:6e:
                    bf:51:51:c4:b4:58:44:ee:77:a0:8c:b0:87:bf:b7:
                    b2:27:40:ea:dc:50:16:ac:ea:a5:4c:16:27:02:5e:
                    6e:c8:31:23:52:b4:4b:7d:95:e4:13:26:c4:cf:39:
                    f5:79:64:55:69:e7:55:1d:91:5f:66:31:d1:33:ea:
                    99:dc:ba:2a:a1:0c:d9:95:02:97:c3:36:30:56:b6:
                    15:01:d1:c9:96:2c:a4:dd:05:83:0f:e2:b0:f9:5b:
                    11:c0:25:b1:6e:3f:3e:bf:2d:ae:17:ca:d1:3c:0f:
                    da:0b:d5:2f:0a:f0:d6:3a:7d:f6:47:aa:5a:6d:bc:
                    ea:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EA:DB:43:6D:3E:8B:E4:72:CA:FA:70:53:5C:BB:C2:5C:5F:49:BA
            X509v3 Authority Key Identifier:
                keyid:A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3132342e31342e372e302f32342d3234203d3e20313331353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.14.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:e9:eb:01:55:f4:5b:d0:64:3e:7b:84:8f:ef:5b:31:13:1b:
         83:2e:55:bc:11:59:65:b3:6d:42:4c:1e:c7:df:2c:aa:df:49:
         b9:32:8b:0a:08:69:e0:07:10:a7:f1:f5:72:29:ef:88:fc:17:
         59:04:50:01:2c:cb:a6:ea:ce:eb:5c:98:f4:3b:65:d3:e9:1f:
         cb:47:c1:4a:7f:7a:fd:71:4d:70:93:11:8f:9c:6f:6b:4f:a3:
         59:d3:3e:ef:a8:d2:a0:ff:c6:9a:27:0f:c7:d1:4f:12:f4:f0:
         37:55:98:a9:ff:15:27:f4:3c:eb:a2:a8:26:5c:68:e8:7b:75:
         a7:e7:29:4f:af:06:0d:2c:aa:f2:ff:5a:33:51:93:61:54:35:
         5c:42:68:30:12:8e:e9:bd:6b:ef:0a:df:b8:f2:7e:45:96:17:
         7d:72:84:d2:33:04:14:fd:9e:e6:be:cb:ef:c9:ab:63:a0:2a:
         5b:3a:4d:f0:7b:27:65:e0:05:80:90:3a:a8:b2:3d:11:eb:5d:
         05:87:11:4c:ca:a0:11:d7:86:4e:22:9b:7e:44:dd:ad:6c:db:
         8f:b0:c6:f7:7e:6a:61:93:3f:4d:d5:06:7f:ac:ff:7d:99:e6:
         4b:63:a1:f0:cb:b2:a3:de:3f:ed:cc:0c:2b:5b:79:67:7f:fc:
         d9:82:19:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:51:36 2026 by rpki-client