Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e37382e302f32342d3234203d3e2034383038.roa
File:                     3132322e3230302e37382e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          iZ+UPJZRYFv38gs9qgOgP60v6lhbfpea4kBBrPAAlmc=
Subject key identifier:   59:8F:EB:58:41:7B:D8:B2:02:67:75:78:6C:86:06:C4:50:05:B8:B2
Certificate issuer:       /CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Certificate serial:       6212F960A4505691F0E7D90EA67C90D6EBC8EB6E
Authority key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e37382e302f32342d3234203d3e2034383038.roa
Signing time:             Wed 15 Apr 2026 02:50:22 +0000
ROA not before:           Wed 15 Apr 2026 02:45:22 +0000
ROA not after:            Wed 14 Apr 2027 02:50:22 +0000
asID:                     4808
IP address blocks:        122.200.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 13:38:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:12:f9:60:a4:50:56:91:f0:e7:d9:0e:a6:7c:90:d6:eb:c8:eb:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
        Validity
            Not Before: Apr 15 02:45:22 2026 GMT
            Not After : Apr 14 02:50:22 2027 GMT
        Subject: CN=598FEB58417BD8B2026775786C8606C45005B8B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:85:13:0c:94:47:b1:d1:6a:3d:53:b4:46:89:
                    27:5e:a0:ea:11:01:5f:ba:1c:35:7d:8b:24:9a:68:
                    24:e1:36:e6:76:2d:1a:e4:bf:df:3d:c9:59:27:3d:
                    bb:13:ce:b8:46:a8:3c:c7:b3:1f:6c:5f:42:70:d6:
                    1f:49:2f:27:35:9e:f5:5e:0f:53:5f:df:b0:76:8a:
                    64:e7:61:33:6b:df:fb:9b:7e:49:64:bb:d3:f4:f3:
                    41:e4:40:9e:41:18:c1:ea:68:c0:a3:ef:2a:f4:f0:
                    1d:21:aa:d8:51:98:bb:a4:4a:4b:bf:c5:af:90:bb:
                    a8:a4:d0:a0:9d:79:c5:57:a1:5c:66:2a:67:3a:0b:
                    62:a6:7c:9d:ab:90:79:f8:a1:a1:1a:60:79:6c:d7:
                    bc:ee:b5:94:a6:91:35:f0:df:1d:42:ed:17:8f:8b:
                    25:e7:b9:01:5d:4a:f1:cf:2f:97:b7:21:29:75:d6:
                    7a:ae:9a:56:2d:32:14:2e:31:d6:f5:7f:43:4d:e2:
                    a7:de:97:ef:31:68:2c:9d:ab:38:94:f4:01:66:9d:
                    9a:57:e4:ff:fc:ef:73:7d:3b:f3:bc:1b:a7:5c:df:
                    41:69:47:94:40:ed:b9:68:d1:8f:46:3a:42:dd:24:
                    c5:8c:d7:26:65:82:10:1d:be:73:68:79:46:fc:de:
                    03:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8F:EB:58:41:7B:D8:B2:02:67:75:78:6C:86:06:C4:50:05:B8:B2
            X509v3 Authority Key Identifier:
                keyid:29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e37382e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.200.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:66:46:57:c8:6d:cc:d4:6b:34:54:f9:32:6a:b8:c1:38:e7:
         af:b1:a4:99:8f:63:02:b1:9b:a5:df:b6:2a:a1:f4:0f:80:b1:
         a4:13:5a:d1:75:e9:6a:b6:9e:64:c9:fe:d1:d4:07:45:fc:ca:
         e7:bf:dd:fd:65:5b:aa:44:87:24:0a:78:e0:e8:be:04:4d:c4:
         03:08:8c:dc:bd:02:03:6a:d9:75:28:3d:00:a1:eb:72:9a:28:
         7e:0d:3c:70:bf:98:18:c7:67:39:55:71:a6:a7:ea:59:c9:de:
         4a:4c:0c:76:84:8e:e5:0e:f9:e2:71:24:f0:23:2e:a8:ea:b0:
         f2:b5:53:ce:2a:e9:b2:c8:77:59:2a:4b:83:de:ee:1a:23:54:
         ea:b4:79:58:a4:ef:a4:04:2b:7a:47:a4:9c:44:cb:eb:14:88:
         b4:fe:25:7c:90:ea:d6:ef:56:e9:f7:f1:02:c5:00:60:89:0c:
         7b:1b:d6:6a:c2:3f:fd:0b:6f:38:90:5c:13:7a:1c:08:7c:e7:
         1a:60:9f:46:a7:6f:67:0c:c7:2e:2c:af:73:fb:f9:87:ad:71:
         5e:86:25:2b:c7:b4:e6:fe:91:58:96:1e:b7:42:93:73:67:c1:
         91:3f:a0:e2:91:b6:75:8c:e0:02:d1:c8:d4:60:76:14:10:97:
         f1:14:12:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:09:44 2026 by rpki-client