Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e39322e302f32342d3234203d3e2034383437.roa
File:                     3132322e3230302e39322e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          7MKytXnVY3xTke2Q8+t8jq61Vb4/fGpyyq+FUQmQJnw=
Subject key identifier:   E9:FC:91:F8:1B:08:41:C5:20:8B:90:B2:C9:BE:E9:34:66:E1:4C:83
Certificate issuer:       /CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Certificate serial:       6FE26C89C1DD79A63890CAA0075107532C9164A3
Authority key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e39322e302f32342d3234203d3e2034383437.roa
Signing time:             Wed 15 Apr 2026 02:50:22 +0000
ROA not before:           Wed 15 Apr 2026 02:45:22 +0000
ROA not after:            Wed 14 Apr 2027 02:50:22 +0000
asID:                     4847
IP address blocks:        122.200.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 13:38:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e2:6c:89:c1:dd:79:a6:38:90:ca:a0:07:51:07:53:2c:91:64:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
        Validity
            Not Before: Apr 15 02:45:22 2026 GMT
            Not After : Apr 14 02:50:22 2027 GMT
        Subject: CN=E9FC91F81B0841C5208B90B2C9BEE93466E14C83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:1e:fb:be:95:bf:74:01:a7:57:71:34:03:
                    c1:d9:1d:cb:99:21:17:d8:fe:5c:36:f9:4e:e1:41:
                    bd:e7:83:6d:cf:6d:0f:86:5b:0d:06:ec:bd:fd:a0:
                    ae:8a:5e:53:07:ca:c5:eb:15:2a:6f:15:07:8a:52:
                    8b:70:3e:de:f7:7e:91:60:78:5e:d1:dc:95:f9:54:
                    32:7d:38:7a:51:fd:2c:c5:f7:9e:5d:5e:5e:03:5c:
                    71:f3:35:c4:4e:8b:40:a2:30:15:11:e5:bf:35:6d:
                    1c:53:42:df:49:f2:ee:a7:ad:f9:23:c0:22:9d:2e:
                    1f:55:0f:d0:10:eb:c5:fe:c9:94:3c:59:fd:a3:4f:
                    17:61:4d:54:dc:0a:e7:af:bb:e6:25:a4:71:aa:21:
                    71:76:0a:e2:23:aa:d2:93:54:75:e5:08:f3:68:3a:
                    63:8c:f7:14:35:ab:0b:1a:60:ba:a8:f8:41:29:fc:
                    f5:fa:e1:62:b2:5c:56:cd:a3:a0:15:3a:9a:4d:28:
                    be:ae:51:d2:7a:ed:8b:36:cf:6d:9f:f2:5d:5b:fe:
                    35:6d:3c:f9:92:c2:d5:fd:81:91:a5:fa:3b:92:e4:
                    23:6f:a7:f4:89:41:a9:34:5a:69:2f:2e:d9:7b:ad:
                    82:8c:42:de:16:b1:eb:02:6f:34:7a:17:22:51:f1:
                    0e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FC:91:F8:1B:08:41:C5:20:8B:90:B2:C9:BE:E9:34:66:E1:4C:83
            X509v3 Authority Key Identifier:
                keyid:29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e39322e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.200.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:18:4b:e2:cc:19:41:00:27:e1:23:8d:1f:56:81:d8:96:d1:
         9c:3c:22:0d:80:c8:ab:62:8a:61:39:17:60:86:82:f7:41:be:
         29:c1:63:67:ea:c9:37:74:3a:4e:99:f5:53:9f:8a:16:15:09:
         65:34:a2:90:23:78:38:89:af:e1:b5:db:27:7a:78:65:ab:7c:
         74:ea:7a:6e:dc:1b:a1:05:52:08:fd:c7:b6:db:31:73:42:86:
         45:13:b4:54:c6:34:3f:e0:c6:c7:5f:f4:f5:4c:4d:60:4c:8c:
         e3:25:5c:ec:67:ae:9f:86:29:f3:b1:89:79:71:5c:33:93:5d:
         29:3a:95:00:fa:f7:cb:0c:5f:77:6f:d7:45:92:9d:6d:63:5b:
         f7:15:56:d4:06:ff:4a:ae:49:8a:f6:f9:55:bd:2c:b2:65:dc:
         e3:01:77:cb:38:fe:19:eb:3f:74:1b:1a:8a:ba:1f:87:c4:d2:
         7f:08:60:34:23:55:9c:69:c2:4f:44:37:ad:2e:f7:6a:79:21:
         d9:8f:00:f2:86:cd:ec:59:a3:a5:e8:28:7c:95:d1:02:e7:e2:
         d5:5e:85:5b:1a:34:a9:34:e8:85:c4:b5:e3:5c:c5:03:ae:28:
         4c:3f:c4:9f:43:50:a1:83:74:42:e6:2b:76:e4:20:22:ae:34:
         bc:fc:6d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:21:04 2026 by rpki-client