Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e39322e302f32342d3234203d3e2034383038.roa
File:                     3132322e3230302e39322e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          4nrH9LfsUqF1kG4hbRAgCUaFjmEZbef1g1MPoHFYyJc=
Subject key identifier:   09:4E:D5:A0:BF:85:0E:53:3B:F2:58:A1:26:AD:D8:F9:2C:43:C7:B6
Certificate issuer:       /CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Certificate serial:       336B385533AA644F6CF7B748D24399DC972ED223
Authority key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e39322e302f32342d3234203d3e2034383038.roa
Signing time:             Wed 15 Apr 2026 02:50:22 +0000
ROA not before:           Wed 15 Apr 2026 02:45:22 +0000
ROA not after:            Wed 14 Apr 2027 02:50:22 +0000
asID:                     4808
IP address blocks:        122.200.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 13:38:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:6b:38:55:33:aa:64:4f:6c:f7:b7:48:d2:43:99:dc:97:2e:d2:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
        Validity
            Not Before: Apr 15 02:45:22 2026 GMT
            Not After : Apr 14 02:50:22 2027 GMT
        Subject: CN=094ED5A0BF850E533BF258A126ADD8F92C43C7B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:52:88:d1:e5:78:a5:21:4e:89:b0:0e:7f:bb:
                    01:90:ab:5b:f6:8c:d4:10:0d:af:8d:f3:cb:0f:48:
                    c2:ee:ff:31:79:80:b1:22:d8:72:3f:df:89:6e:34:
                    02:f5:39:a8:4a:2f:30:33:31:a6:0c:c9:d6:de:5c:
                    4a:e2:28:44:c7:62:cb:90:67:84:97:06:4e:8e:69:
                    36:d4:f1:0a:8d:5d:39:c5:4e:99:64:59:d2:06:12:
                    56:9b:5a:0a:90:69:3f:75:44:b9:32:79:86:a8:82:
                    7f:71:f6:81:0e:9a:3f:3b:61:cd:a8:c2:ed:23:94:
                    3f:8c:b5:a3:42:91:a9:64:9d:37:a4:af:bb:64:fa:
                    0a:f0:23:ca:92:f0:37:56:0b:c7:06:c0:53:6f:6b:
                    11:69:17:60:a7:6c:04:7e:ed:b9:09:76:19:ec:6b:
                    00:6f:4f:5a:1c:ff:44:0c:80:bb:80:b0:f1:66:fc:
                    2e:c5:b3:f0:03:c7:93:5f:06:42:67:db:23:4d:6e:
                    49:f1:db:26:b7:46:96:0e:9c:db:b5:c4:0c:5a:0a:
                    2d:a7:b7:e4:bc:19:4e:9e:69:6f:8f:92:9a:27:58:
                    ca:5e:de:b5:cc:3c:06:6c:cb:35:2f:30:ce:1a:1f:
                    18:28:d5:e8:65:4b:e5:5f:09:d8:88:56:5b:29:d1:
                    c1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4E:D5:A0:BF:85:0E:53:3B:F2:58:A1:26:AD:D8:F9:2C:43:C7:B6
            X509v3 Authority Key Identifier:
                keyid:29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e39322e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.200.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:19:07:29:ad:4c:43:7d:bc:cc:02:9b:fd:d7:f0:2c:6e:fb:
         ad:e2:28:18:45:40:84:ae:af:2c:11:2c:85:c8:ef:35:33:7b:
         1d:e9:b4:0f:f5:02:11:4e:48:f2:61:04:b6:42:10:5d:1f:1f:
         e3:7e:60:c2:19:cc:b0:1f:ce:5c:8d:f6:26:8c:da:98:25:1e:
         75:af:70:74:d9:14:2d:bc:23:d6:e5:1c:8e:fc:1a:ee:97:f6:
         c7:42:25:13:cf:d1:56:a7:b8:60:ef:a5:f5:40:42:e7:0f:22:
         1c:61:9b:18:0b:76:02:19:e8:88:75:dc:22:67:a0:8e:d3:f1:
         05:af:52:0c:7f:c3:78:41:79:45:31:56:41:0c:d5:4f:2f:17:
         98:e5:b1:d1:50:1e:54:d8:b3:03:d8:b8:14:f9:84:cb:b8:6b:
         44:f7:88:62:9e:17:51:bd:fe:bd:cd:9e:57:14:5f:92:87:d4:
         13:60:cf:d1:d3:f2:43:79:d4:58:43:30:86:b6:31:1a:2f:6c:
         55:ea:b0:23:bd:e5:37:bc:b8:27:6f:30:99:04:c5:dc:38:61:
         a7:e4:4d:ed:8b:7d:14:5d:dd:f9:59:0f:82:2e:66:1f:a9:40:
         b4:21:70:2f:2d:ab:58:e9:8e:0e:3e:eb:e0:b2:ad:14:23:1a:
         d6:c0:f5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:59 2026 by rpki-client