Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e37382e302f32342d3234203d3e203338333634.roa
File:                     3132322e3230302e37382e302f32342d3234203d3e203338333634.roa (raw, json)
Hash identifier:          9fJKYs4MqOnlMsQZVCVjySz00PIbDp78r6bTuookxck=
Subject key identifier:   A1:12:47:03:99:7E:1B:E1:C5:C3:EF:35:A4:92:24:DB:E4:43:AB:35
Certificate issuer:       /CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Certificate serial:       18185E03705D5D6A33F068BCFA60DF6CF2336498
Authority key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e37382e302f32342d3234203d3e203338333634.roa
Signing time:             Wed 15 Apr 2026 02:50:23 +0000
ROA not before:           Wed 15 Apr 2026 02:45:23 +0000
ROA not after:            Wed 14 Apr 2027 02:50:23 +0000
asID:                     38364
IP address blocks:        122.200.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 13:38:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:18:5e:03:70:5d:5d:6a:33:f0:68:bc:fa:60:df:6c:f2:33:64:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
        Validity
            Not Before: Apr 15 02:45:23 2026 GMT
            Not After : Apr 14 02:50:23 2027 GMT
        Subject: CN=A1124703997E1BE1C5C3EF35A49224DBE443AB35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cd:90:af:73:ae:dd:ac:b7:d8:14:ef:9c:f7:
                    20:96:32:5d:f9:0d:46:68:db:ec:c4:a4:0d:53:41:
                    ad:27:10:17:43:9d:1e:ab:54:39:2f:bc:ac:6c:59:
                    1a:80:61:17:c3:79:c8:6e:f5:d9:c4:2f:cd:f9:3e:
                    65:1b:77:d6:6f:53:56:b4:9d:31:3c:f2:1c:59:00:
                    fa:5c:b0:c1:03:5e:a7:f1:62:d3:c5:71:46:f9:6b:
                    0e:78:44:62:cc:f0:ce:e6:95:2c:63:31:c2:16:dd:
                    05:60:df:5a:3a:df:31:c1:05:09:dd:6d:41:30:2a:
                    97:3f:13:7f:ab:88:21:52:a5:dc:91:f0:9a:db:df:
                    4b:cf:cf:13:e6:86:be:5b:05:48:9e:79:7f:8b:4b:
                    c8:5c:5a:b4:90:2f:ef:be:bd:8a:f3:9a:39:a6:c9:
                    71:a7:d4:b6:dd:db:d9:dc:75:21:5e:ea:cc:ac:85:
                    7e:76:66:51:ab:ba:70:50:e5:b0:df:8a:2f:6a:c6:
                    f4:4c:e4:6c:69:28:69:74:bf:da:66:c0:be:5d:0b:
                    da:92:3b:2c:3d:57:77:45:c2:2e:d0:92:d2:c7:f2:
                    71:ae:61:e8:dc:78:dc:20:51:1c:e6:cc:64:53:69:
                    1c:d4:44:5a:c2:42:a9:19:4c:94:f2:1b:7c:6c:a9:
                    22:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:12:47:03:99:7E:1B:E1:C5:C3:EF:35:A4:92:24:DB:E4:43:AB:35
            X509v3 Authority Key Identifier:
                keyid:29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e37382e302f32342d3234203d3e203338333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.200.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:98:f4:21:e9:40:77:78:43:af:17:5a:28:7d:18:a1:ee:60:
         fd:17:07:39:7d:94:bb:53:1e:f2:96:d8:4d:f5:95:14:3b:29:
         d0:80:7c:09:ca:0a:9f:c3:9a:2b:46:15:86:5e:50:16:4b:d9:
         7b:8a:49:5f:b3:0c:09:2b:60:03:cd:63:4c:0a:3d:fa:3b:65:
         5c:5b:47:65:1e:02:dc:02:87:d5:fd:ce:97:f8:92:fd:0a:ed:
         1d:db:61:17:74:9e:8b:73:63:f8:d2:3b:7e:74:4d:9f:7b:c0:
         56:1d:d6:ef:99:4d:de:80:46:06:fb:07:da:01:d2:3e:d3:db:
         20:4b:9f:b0:bc:4a:cd:10:72:39:4a:3d:24:26:93:6c:ff:f4:
         01:07:b6:fb:99:bb:07:d2:16:2c:95:db:eb:23:5d:4e:16:97:
         fd:9f:40:4d:5a:f9:a4:a1:48:be:02:b6:cd:55:2b:c2:27:9a:
         a9:5d:90:ab:35:58:c1:01:d1:45:b6:15:5d:27:0c:3a:bc:52:
         04:21:28:e1:4d:0a:2f:36:c4:e9:f4:00:9b:c0:a2:53:61:5b:
         7f:7e:f6:a5:e9:b9:09:94:a6:94:3d:16:c3:4a:17:54:86:b1:
         29:68:74:19:90:66:db:0b:7e:b2:a9:2e:bc:b8:b7:a7:b0:67:
         f1:e1:40:9e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:54:45 2026 by rpki-client