Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3132342e3230322e3132382e302f31392d3139203d3e2034383437.roa
File:                     3132342e3230322e3132382e302f31392d3139203d3e2034383437.roa (raw, json)
Hash identifier:          wWBKDuU4yhTVNZoWusEl/xLJMp07Fxm1zoiWrIMxJVU=
Subject key identifier:   00:0F:E0:B8:7F:39:23:A8:47:3D:81:27:2C:EE:D4:D1:91:F1:2B:CD
Certificate issuer:       /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial:       4EF0E61D04A0EE091F6E000BD2AFD323ABC69EAA
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3132342e3230322e3132382e302f31392d3139203d3e2034383437.roa
Signing time:             Wed 15 Apr 2026 04:05:03 +0000
ROA not before:           Wed 15 Apr 2026 04:00:03 +0000
ROA not after:            Wed 14 Apr 2027 04:05:03 +0000
asID:                     4847
IP address blocks:        124.202.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 19:09:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f0:e6:1d:04:a0:ee:09:1f:6e:00:0b:d2:af:d3:23:ab:c6:9e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
        Validity
            Not Before: Apr 15 04:00:03 2026 GMT
            Not After : Apr 14 04:05:03 2027 GMT
        Subject: CN=000FE0B87F3923A8473D81272CEED4D191F12BCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fb:ea:74:b9:6f:4c:20:d0:ed:c7:f3:33:ab:
                    3e:fe:44:cd:e4:64:0f:d3:ff:15:3d:a6:2a:ee:f0:
                    4b:d2:94:07:0b:c3:10:b4:29:80:a0:ab:51:ef:19:
                    02:94:c8:97:d6:48:3a:b9:d6:a9:7d:e6:fb:c3:bc:
                    3a:06:6b:33:b8:7a:fb:14:5b:ee:78:16:3a:a4:28:
                    ee:25:d2:ad:3d:be:6e:c9:15:4f:dd:02:65:ea:fb:
                    e1:6b:0c:25:86:cb:e4:03:e5:bc:6a:d4:00:8a:c3:
                    35:2a:89:13:e0:4c:a2:cc:65:f5:51:72:bb:28:2a:
                    87:f1:8f:a9:d6:7e:b8:12:e7:a5:be:fe:d8:0b:36:
                    97:93:e9:7a:1f:57:65:b4:8f:c1:6d:09:9d:25:b4:
                    d0:ce:1f:a8:6c:1b:d0:da:19:80:c2:fe:35:6f:0f:
                    f5:3c:fc:8e:a4:dc:ed:3d:ce:68:e9:44:5b:d3:1d:
                    9b:be:cd:f5:df:ae:c2:c9:5d:56:1a:9a:5c:7e:1d:
                    66:f4:66:13:cf:56:05:3f:15:72:c4:82:64:92:4e:
                    16:53:78:aa:24:a9:92:43:b8:3d:92:b4:d9:4d:32:
                    12:c6:73:46:c6:d1:7f:cc:6a:1c:41:4c:aa:c7:0f:
                    b9:4e:86:bb:eb:e5:7c:30:9a:fe:67:13:9d:f2:5a:
                    5b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0F:E0:B8:7F:39:23:A8:47:3D:81:27:2C:EE:D4:D1:91:F1:2B:CD
            X509v3 Authority Key Identifier:
                keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3132342e3230322e3132382e302f31392d3139203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.202.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2a:6f:60:a2:9d:f1:17:90:94:4e:7a:c0:47:41:de:12:d2:9f:
         72:10:47:de:5d:d8:f9:42:d4:6f:91:c1:b8:06:83:ba:fc:ab:
         2a:bf:40:c2:32:98:8d:a8:da:3c:72:ef:a2:94:93:21:3d:49:
         f4:05:d5:cc:33:c0:e0:4f:0c:bb:c4:ab:7d:5e:a4:19:8e:86:
         69:ba:1d:70:09:f0:6c:46:e7:20:22:ab:74:bf:a8:3a:3c:53:
         68:a0:f4:7d:b7:82:df:13:21:bb:4a:40:8b:43:62:e4:6a:3c:
         f4:5b:e5:65:87:63:a0:94:15:9c:d0:0b:a4:5c:29:a7:6c:57:
         84:fa:94:ea:2a:a1:de:0b:bd:4a:f9:44:15:44:aa:c8:dd:21:
         93:4e:a3:40:24:64:30:92:6c:2e:9e:0b:84:2b:ae:15:82:03:
         a0:6f:03:a4:fb:24:06:82:74:89:69:3e:8a:71:23:92:ff:70:
         6e:70:57:ed:65:8c:e9:b5:a1:95:8e:5e:b4:9d:93:b7:38:37:
         cc:2b:95:81:45:35:43:ff:97:eb:1a:7a:5f:30:fb:0a:6d:f7:
         e1:a6:ec:4f:6f:4c:a7:45:c4:6e:13:61:70:57:d0:0a:30:00:
         36:9c:5f:71:f6:88:66:4e:f5:97:f5:ba:b3:a7:10:aa:42:93:
         03:94:99:ed
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:00:09 2026 by rpki-client