Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e34302e302f32312d3231203d3e203233373234.roa
File:                     3132322e31312e34302e302f32312d3231203d3e203233373234.roa (raw, json)
Hash identifier:          ai772q1EoRxuBDbBexQPnZXL/jCbU0YH2VB2woJTRp8=
Subject key identifier:   E4:27:F0:24:BC:C5:01:20:87:F0:82:8D:FA:91:44:C3:26:CF:A8:A5
Certificate issuer:       /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial:       5C4776990E9E12FA889C951F27DBB07B8633867C
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e34302e302f32312d3231203d3e203233373234.roa
Signing time:             Tue 02 Jun 2026 07:46:58 +0000
ROA not before:           Tue 02 Jun 2026 07:41:58 +0000
ROA not after:            Tue 01 Jun 2027 07:46:58 +0000
asID:                     23724
IP address blocks:        122.11.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 14:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:47:76:99:0e:9e:12:fa:88:9c:95:1f:27:db:b0:7b:86:33:86:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
        Validity
            Not Before: Jun  2 07:41:58 2026 GMT
            Not After : Jun  1 07:46:58 2027 GMT
        Subject: CN=E427F024BCC5012087F0828DFA9144C326CFA8A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:16:ec:92:68:f3:7b:49:52:ca:82:2d:e5:4f:
                    f2:04:96:f8:32:3d:1c:9d:80:30:bd:c1:3c:85:a2:
                    c7:ac:35:aa:47:99:48:d2:65:53:e6:27:7b:d6:c0:
                    41:b5:01:af:42:8d:9d:21:30:4f:62:65:4a:c6:c5:
                    f8:c0:b9:32:4c:3f:86:54:f0:ad:6b:23:2f:a3:66:
                    29:63:35:7f:ad:31:0e:9a:b7:e8:5a:1a:bf:a3:e9:
                    99:d1:68:73:ca:f7:c6:81:4e:28:4f:97:00:f3:a7:
                    a1:e4:9a:09:30:20:1c:8e:2e:08:82:f2:3b:64:46:
                    e2:70:1d:c9:69:57:20:44:dd:ba:9b:15:c1:bb:02:
                    c7:58:fb:6a:cb:1d:47:d3:85:1b:fd:64:b2:c5:bb:
                    ef:0e:27:8c:72:14:9b:d3:25:a7:c1:45:47:f2:f9:
                    7e:4e:53:b3:a2:3d:3f:4e:e6:c3:58:14:36:4d:a9:
                    07:af:ac:5f:f4:ad:16:9d:1b:d1:ae:2d:9a:01:1f:
                    cc:80:01:36:f6:c2:e4:37:3e:d0:38:6d:6c:60:46:
                    0a:ff:f5:41:6e:19:54:f2:05:f7:f1:a0:e1:f5:49:
                    c1:17:d0:76:64:22:31:15:e6:64:1f:6e:42:4c:49:
                    19:ee:48:04:1b:d7:87:11:a5:aa:bd:5f:be:49:c4:
                    95:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:27:F0:24:BC:C5:01:20:87:F0:82:8D:FA:91:44:C3:26:CF:A8:A5
            X509v3 Authority Key Identifier:
                keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e34302e302f32312d3231203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.11.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:e5:bb:a0:1f:27:f5:2e:b7:32:24:84:13:fc:2d:b5:b4:5e:
         76:9a:b3:cc:9a:74:d7:25:98:75:7d:f2:55:cc:e3:df:85:6e:
         bf:b3:25:a2:fa:36:0e:ac:cc:36:85:60:73:56:dd:8e:ae:d3:
         25:e8:5e:6d:d4:be:e3:89:59:b6:75:73:db:3a:29:a2:4e:fe:
         03:2b:7c:14:0c:e3:df:19:6e:69:be:5a:47:50:03:3f:2d:70:
         61:d3:e5:ba:03:05:75:80:ea:ce:44:fc:60:05:d6:70:56:5d:
         31:34:bf:6f:fa:0a:8e:67:5f:85:50:38:bd:46:15:a0:33:72:
         9d:49:f1:b5:03:89:ea:54:0a:a4:5f:b0:18:d1:fc:af:00:2b:
         db:b2:a8:c0:c3:7b:7f:90:68:e8:0d:e3:93:25:63:91:33:aa:
         6d:02:07:ec:42:d2:76:88:ce:22:f8:36:fc:f0:05:0a:ea:7b:
         ed:43:c1:f5:61:3d:13:b4:13:72:9d:a6:89:bb:09:84:09:46:
         6b:ea:8f:b7:9f:cf:26:d0:cc:1c:c0:d6:ba:e7:a8:71:b1:79:
         dd:4d:88:32:1f:eb:fa:71:00:eb:55:8d:5b:80:50:be:cf:00:
         7b:2e:4a:e8:e4:ed:dc:bd:ae:69:57:2c:91:c1:68:97:da:a9:
         f5:66:33:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:52:07 2026 by rpki-client