Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3135362e302f32322d3234203d3e20333939343638.roa
File:                     3132342e34322e3135362e302f32322d3234203d3e20333939343638.roa (raw, json)
Hash identifier:          Q9WNiY3D5Ig84zc4CmQwpw/C664C4T4CNwTtBXqPCmc=
Subject key identifier:   9F:6D:C0:D4:F5:30:4D:21:3D:5D:ED:53:08:24:C9:FE:68:42:0D:96
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       1CADB178BCADF7C67EFF36BA3F47F2392AB41664
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3135362e302f32322d3234203d3e20333939343638.roa
Signing time:             Thu 12 Feb 2026 07:39:27 +0000
ROA not before:           Thu 12 Feb 2026 07:34:27 +0000
ROA not after:            Thu 11 Feb 2027 07:39:27 +0000
asID:                     399468
IP address blocks:        124.42.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 04:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ad:b1:78:bc:ad:f7:c6:7e:ff:36:ba:3f:47:f2:39:2a:b4:16:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Feb 12 07:34:27 2026 GMT
            Not After : Feb 11 07:39:27 2027 GMT
        Subject: CN=9F6DC0D4F5304D213D5DED530824C9FE68420D96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0f:d3:9d:ff:8a:86:26:62:b7:74:85:0d:b3:
                    b1:0d:0d:bf:07:05:c6:1c:20:a8:8f:b6:48:4c:7f:
                    5b:91:8a:96:b6:68:d9:d7:98:de:a6:76:1d:ea:99:
                    52:f7:ee:9c:03:8e:ab:6c:6f:a8:47:80:d8:a8:d5:
                    65:f8:fb:14:af:81:66:ea:dd:32:f4:7c:20:7f:f9:
                    f9:aa:3c:03:12:8b:21:f7:35:ec:a3:14:32:d9:22:
                    c3:5c:0b:46:32:75:14:35:c0:98:64:cf:35:80:af:
                    2f:bc:c1:49:62:d5:91:9e:bd:84:d7:9e:df:23:58:
                    e7:9a:ce:f1:69:49:5d:2d:fe:bf:3c:26:fa:25:9f:
                    71:4e:a5:6d:7f:b3:98:b8:7c:d8:2d:0a:4d:ba:6a:
                    aa:80:31:0d:a5:a6:23:8d:b1:94:2f:38:22:bc:76:
                    ef:4c:c2:2a:6e:af:e6:3c:f3:5a:be:8e:b2:c0:1e:
                    7c:ab:65:c2:17:70:e6:c8:21:57:2e:ce:6c:b7:06:
                    43:39:00:db:cf:94:b6:08:be:70:d6:ff:30:dd:24:
                    10:2e:bd:b1:a8:05:60:02:4e:96:65:de:24:45:3c:
                    5e:73:a5:75:5d:6c:2a:0e:42:96:f1:a3:96:e0:2a:
                    42:8d:b8:f5:19:ed:9e:01:93:09:13:48:16:cf:88:
                    1a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6D:C0:D4:F5:30:4D:21:3D:5D:ED:53:08:24:C9:FE:68:42:0D:96
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3135362e302f32322d3234203d3e20333939343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.42.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:59:65:f6:4a:49:54:90:19:c7:be:d5:7d:33:0d:a7:07:6b:
         04:58:70:e7:65:f9:37:97:00:c2:04:2d:3f:da:b0:45:84:0d:
         2b:f6:53:28:2f:0c:60:94:47:f5:57:4d:b8:8f:e1:fb:2c:90:
         32:ce:75:1b:85:f6:25:77:c8:92:da:eb:2a:97:38:9c:9b:ca:
         62:5a:5d:ef:9b:fd:26:86:e1:3e:68:f0:6d:11:13:9f:b2:70:
         48:91:cb:5e:cf:da:39:12:8b:e0:14:6b:3d:b1:39:0a:e0:3a:
         d8:5b:9f:d2:da:61:f4:f3:88:76:a4:31:4e:43:ff:9c:ed:19:
         d2:c4:a0:82:e2:29:f4:30:da:9c:27:b6:13:84:31:2d:bd:a2:
         30:92:11:9c:b0:79:a0:4f:42:0f:97:e7:26:6b:c6:5c:f7:96:
         be:b6:03:b5:81:18:74:26:2b:af:47:69:bb:e1:c3:1e:28:61:
         99:bc:32:78:81:f5:de:2e:8e:16:7f:88:78:7d:fd:98:3b:60:
         54:61:c3:9b:1a:d7:22:6d:41:fa:32:61:35:91:57:64:0c:0c:
         42:41:8a:79:e3:0d:8e:12:b6:b2:13:5a:ea:5f:54:61:85:d6:
         7e:01:6d:fa:f2:71:d4:c5:f1:ad:c7:6f:f9:48:07:f7:f3:71:
         da:5b:a0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:56:03 2026 by rpki-client