Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e33322e302f32312d3231203d3e203233373234.roa
File:                     3132322e31312e33322e302f32312d3231203d3e203233373234.roa (raw, json)
Hash identifier:          h0Xaj72XHmJeYZGrLxwTo88nHBDFLZq98uJjTObVwD4=
Subject key identifier:   94:D2:05:B3:E9:0F:91:40:41:C5:4F:9E:3F:E0:2E:2B:C2:39:11:55
Certificate issuer:       /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial:       7ECBFD297F2CB4D59E0A57CAE04FE9C93F3FC4FF
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e33322e302f32312d3231203d3e203233373234.roa
Signing time:             Tue 02 Jun 2026 07:46:58 +0000
ROA not before:           Tue 02 Jun 2026 07:41:58 +0000
ROA not after:            Tue 01 Jun 2027 07:46:58 +0000
asID:                     23724
IP address blocks:        122.11.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 14:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:cb:fd:29:7f:2c:b4:d5:9e:0a:57:ca:e0:4f:e9:c9:3f:3f:c4:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
        Validity
            Not Before: Jun  2 07:41:58 2026 GMT
            Not After : Jun  1 07:46:58 2027 GMT
        Subject: CN=94D205B3E90F914041C54F9E3FE02E2BC2391155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0a:12:c3:ad:98:a2:a2:64:59:1f:a2:41:91:
                    6a:dd:4d:16:07:ee:21:c1:54:14:e0:d3:7c:2b:db:
                    be:9a:6e:32:76:49:6e:bf:c8:ff:df:43:c2:66:d3:
                    c8:44:69:87:1a:58:9b:37:e8:94:0b:a3:f6:2e:eb:
                    e2:55:23:98:66:a3:2e:97:8d:d9:92:70:48:20:c9:
                    ef:5a:f2:d9:c4:87:c7:e5:a1:0b:16:4b:89:f9:81:
                    3e:ea:87:45:a9:f1:c4:a0:fa:ab:ee:2b:5a:32:f7:
                    d8:dd:14:64:7b:d2:36:ac:f2:aa:64:0b:fb:9a:6b:
                    4c:9d:6f:fd:82:54:99:3f:ec:ff:17:4b:c1:5d:a8:
                    c6:e7:8a:40:6c:98:92:7e:31:d4:4a:23:b0:48:0a:
                    31:10:9f:60:68:ed:e8:63:16:3c:cc:9c:40:0d:f9:
                    12:93:a1:d1:84:b3:fa:ef:4e:30:e0:3a:ec:55:16:
                    b0:82:70:6b:28:c9:34:5a:aa:86:0c:3f:bf:3e:02:
                    95:ec:73:ee:34:6a:30:14:d0:23:84:48:b2:38:61:
                    d0:92:56:a2:4e:c3:7c:ce:64:6a:e6:22:6f:28:01:
                    77:35:ea:fc:5c:a0:3c:cd:f9:1e:37:d7:81:90:76:
                    6e:a7:a2:a8:14:f5:d2:13:11:6f:f2:6d:98:cf:9a:
                    b2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D2:05:B3:E9:0F:91:40:41:C5:4F:9E:3F:E0:2E:2B:C2:39:11:55
            X509v3 Authority Key Identifier:
                keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e33322e302f32312d3231203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.11.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0d:b1:ab:57:a5:b5:bf:23:32:d9:d4:07:e3:bb:94:a2:3a:e0:
         f4:d1:c2:3f:f9:80:11:42:dd:a5:e0:58:9f:39:cc:e4:83:08:
         09:4e:5a:73:0c:0a:09:c6:60:c3:ec:81:b6:0e:5d:0a:f8:fd:
         71:4c:47:60:1a:ee:b6:8f:d2:c5:87:fe:8f:03:a5:07:38:35:
         ea:89:d3:e0:e9:2c:84:11:9e:8c:c4:d0:3d:1a:41:b8:83:4c:
         77:97:76:98:90:b0:19:d0:54:90:32:ae:1f:64:f7:05:b8:ac:
         79:45:52:21:11:31:33:26:31:f8:e4:7f:cd:ff:05:c9:75:dc:
         4d:ad:b9:1e:f2:45:69:70:db:3a:b9:f3:c5:86:ae:e6:69:b3:
         84:12:ff:6b:25:43:33:bb:15:4c:21:e1:d7:ae:a2:4c:0a:da:
         aa:18:6b:d8:8b:4e:43:17:fc:5b:ea:75:e8:51:8f:d1:67:ac:
         f4:46:cb:94:ca:48:92:cd:ba:34:c5:6a:9e:76:00:c3:f1:d4:
         d1:93:c3:aa:49:01:2c:6f:9a:1b:79:73:1e:56:46:af:d3:cb:
         2b:bc:40:79:52:4f:34:25:54:89:d1:cc:b3:72:66:4d:45:22:
         c0:b4:be:44:4d:2c:43:b5:3d:c6:82:14:fc:e8:fe:3e:8d:c4:
         ab:e2:45:bb
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUfsv9KX8stNWeClfK4E/pyT8/xP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4
Mjg5MzI4OTAeFw0yNjA2MDIwNzQxNThaFw0yNzA2MDEwNzQ2NThaMDMxMTAvBgNV
BAMTKDk0RDIwNUIzRTkwRjkxNDA0MUM1NEY5RTNGRTAyRTJCQzIzOTExNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrChLDrZiiomRZH6JBkWrdTRYH
7iHBVBTg03wr276abjJ2SW6/yP/fQ8Jm08hEaYcaWJs36JQLo/Yu6+JVI5hmoy6X
jdmScEggye9a8tnEh8floQsWS4n5gT7qh0Wp8cSg+qvuK1oy99jdFGR70jas8qpk
C/uaa0ydb/2CVJk/7P8XS8FdqMbnikBsmJJ+MdRKI7BICjEQn2Bo7ehjFjzMnEAN
+RKTodGEs/rvTjDgOuxVFrCCcGsoyTRaqoYMP78+ApXsc+40ajAU0COESLI4YdCS
VqJOw3zOZGrmIm8oAXc16vxcoDzN+R4314GQdm6noqgU9dITEW/ybZjPmrLfAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUlNIFs+kPkUBBxU+eP+AuK8I5EVUwHwYDVR0j
BBgwFoAUCY1CHLRvKS8TznHfPWhdXoKJMokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4Mjc0MTU3NzY2MjQ2Ni8wLzA5OEQ0MjFDQjQ2RjI5MkYxM0NFNzFERjNENjg1
RDVFODI4OTMyODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4Mjg5MzI4OS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3NjYyNDY2LzAvMzEzMjMyMmUzMTMx
MmUzMzMyMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzMzM3MzIzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA3oLIDANBgkqhkiG9w0BAQsFAAOCAQEADbGrV6W1vyMy2dQH47uUojrg9NHC
P/mAEULdpeBYnznM5IMICU5acwwKCcZgw+yBtg5dCvj9cUxHYBruto/SxYf+jwOl
Bzg16onT4OkshBGejMTQPRpBuINMd5d2mJCwGdBUkDKuH2T3BbiseUVSIRExMyYx
+OR/zf8FyXXcTa25HvJFaXDbOrnzxYau5mmzhBL/ayVDM7sVTCHh166iTAraqhhr
2ItOQxf8W+p16FGP0Wes9EbLlMpIks26NMVqnnYAw/HU0ZPDqkkBLG+aG3lzHlZG
r9PLK7xAeVJPNCVUidHMs3JmTUUiwLS+RE0sQ7U9xoIU/Oj+Po3Eq+JFuw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:03:00 2026 by rpki-client