Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e38322e302f32342d3234203d3e2034383437.roa
File:                     3132322e3230302e38322e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          Xp6isEa2ewBI3m6lqm1H70tKTkaKIvsLOOgR2gG3b8k=
Subject key identifier:   18:57:BC:76:36:B9:EF:88:21:C7:23:8B:46:19:A6:6D:D7:D0:F1:EE
Certificate issuer:       /CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Certificate serial:       204F4A7B72446BE4B6E7239520F5622891CFBF71
Authority key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e38322e302f32342d3234203d3e2034383437.roa
Signing time:             Wed 15 Apr 2026 02:50:21 +0000
ROA not before:           Wed 15 Apr 2026 02:45:21 +0000
ROA not after:            Wed 14 Apr 2027 02:50:21 +0000
asID:                     4847
IP address blocks:        122.200.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 13:38:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4f:4a:7b:72:44:6b:e4:b6:e7:23:95:20:f5:62:28:91:cf:bf:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
        Validity
            Not Before: Apr 15 02:45:21 2026 GMT
            Not After : Apr 14 02:50:21 2027 GMT
        Subject: CN=1857BC7636B9EF8821C7238B4619A66DD7D0F1EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:69:86:4f:a6:30:fe:7f:dd:56:ef:3c:e8:9e:
                    9f:3c:b9:a4:f1:9d:00:c1:9f:87:3b:29:bd:41:31:
                    71:de:be:67:43:26:d0:4b:6c:fd:0b:f0:fe:cd:1f:
                    cf:2d:0e:00:73:93:99:16:55:4e:03:5f:2e:10:f9:
                    db:24:f8:22:2e:39:5d:c2:c5:d2:43:03:8a:f4:e2:
                    35:63:05:aa:d0:f9:9b:a6:dc:c3:27:f6:79:13:58:
                    26:bb:c8:b7:c0:c0:f0:8f:72:67:27:6b:ce:2c:cf:
                    da:75:5b:cc:18:5d:f5:1b:57:41:6e:5e:e3:27:96:
                    1b:78:c2:07:31:2e:70:6a:ca:87:01:87:f7:4a:6f:
                    a0:0c:2b:29:63:86:db:49:6b:22:bf:1d:8a:66:3f:
                    a1:c6:0a:95:22:c7:95:e8:64:00:8b:85:25:62:31:
                    e8:85:b6:40:bf:a0:37:ad:29:f3:24:82:1b:ab:32:
                    b3:28:d4:63:b1:56:08:bf:10:ec:5d:3f:57:eb:93:
                    61:3d:a3:af:ce:19:f1:a3:d7:16:6b:e8:65:e2:d6:
                    d1:97:40:79:67:be:6c:54:0f:6f:3d:39:c0:0c:0c:
                    16:39:81:47:22:f8:ef:e9:9c:bd:51:7a:2d:82:71:
                    ac:d1:c2:6b:b0:c1:8a:18:b0:4d:6f:03:87:4c:dd:
                    8b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:57:BC:76:36:B9:EF:88:21:C7:23:8B:46:19:A6:6D:D7:D0:F1:EE
            X509v3 Authority Key Identifier:
                keyid:29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e38322e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.200.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:d1:47:84:11:e4:0c:2d:af:38:fb:2c:67:2e:81:e6:67:4b:
         37:1c:6a:83:79:3c:13:8c:a8:2d:56:16:83:f7:46:ce:ee:2e:
         b6:83:50:e1:07:ef:f7:c3:42:1b:4b:30:77:e4:d6:a2:10:f8:
         c0:f0:b0:68:ce:fa:cb:c6:69:c9:85:b2:0a:0b:d6:3a:56:4e:
         65:0b:fe:20:93:9e:c5:0a:85:e8:fa:0e:52:4a:62:1d:4d:dc:
         63:94:7d:6c:92:80:01:48:aa:74:9c:a3:d1:52:47:5d:80:a0:
         68:8f:af:d9:c8:50:7a:f7:85:b8:67:7e:da:e2:a3:a5:2b:40:
         64:15:43:de:4e:93:bc:33:16:89:47:cf:62:8f:cf:fe:3a:5d:
         62:a4:b2:4d:99:ef:8b:c2:a3:77:54:07:08:72:51:55:a9:e4:
         34:c7:27:35:0e:a1:37:2d:51:88:d4:5e:e8:6a:02:f8:6d:a4:
         d8:b7:3d:52:80:ea:46:b4:fd:bc:57:80:13:a6:3c:ea:dc:9b:
         12:28:28:55:25:54:ad:94:bf:bb:f7:c0:16:56:95:a8:38:fd:
         6c:01:cd:ac:07:86:e5:51:ca:a1:6f:73:85:38:57:33:56:27:
         34:36:de:b4:68:55:58:40:84:e1:31:33:23:e9:6d:14:5d:c5:
         dd:c9:2d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:41:25 2026 by rpki-client