Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3132332e39392e3230362e302f32342d3234203d3e203536303436.roa
File:                     3132332e39392e3230362e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          rLlTB8afuqz0Jj8a1c3LdLyNwLfwlf2Z8mFieiDedNA=
Subject key identifier:   55:A7:11:58:71:D0:82:B7:AE:C6:9B:6F:2E:DD:73:E6:7D:D5:F1:5C
Certificate issuer:       /CN=709E5125176627846677AF908E76CAE21FB95460
Certificate serial:       1E0796C4FBFFB684D3ADBB993C3F93D669536754
Authority key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3132332e39392e3230362e302f32342d3234203d3e203536303436.roa
Signing time:             Tue 14 Apr 2026 07:45:08 +0000
ROA not before:           Tue 14 Apr 2026 07:40:08 +0000
ROA not after:            Tue 13 Apr 2027 07:45:08 +0000
asID:                     56046
IP address blocks:        123.99.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 00:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:07:96:c4:fb:ff:b6:84:d3:ad:bb:99:3c:3f:93:d6:69:53:67:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=709E5125176627846677AF908E76CAE21FB95460
        Validity
            Not Before: Apr 14 07:40:08 2026 GMT
            Not After : Apr 13 07:45:08 2027 GMT
        Subject: CN=55A7115871D082B7AEC69B6F2EDD73E67DD5F15C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1f:cb:ad:e5:45:b6:35:fb:5e:13:fb:ae:fb:
                    5a:82:f3:96:e2:d5:1c:67:66:e5:ce:2d:f5:47:44:
                    0e:18:fd:40:5f:2c:b6:58:0c:04:39:d7:a4:4b:10:
                    b6:1d:40:3c:7b:a6:c9:db:17:24:55:9f:e2:fc:eb:
                    1f:ae:f5:6c:29:ea:52:3f:31:e6:0c:fc:1c:1b:37:
                    6b:59:07:b7:f3:ba:00:2a:48:2b:7c:09:3e:31:c4:
                    58:e3:12:49:ad:6d:40:46:7f:89:4d:7b:04:ae:e9:
                    56:8c:f6:ae:05:36:d6:4e:25:d3:62:f2:a7:1e:73:
                    8a:7c:83:25:39:b0:54:c4:fb:f8:cf:ba:ff:18:1f:
                    a6:d1:8b:bf:3d:ce:5e:36:16:28:60:0c:ea:a2:f9:
                    ea:b5:c7:ab:93:40:f1:92:1c:d7:db:9a:07:07:d0:
                    90:be:43:27:32:57:1d:9b:e8:86:1d:df:5d:60:9e:
                    dc:92:97:54:cf:3e:7a:78:7b:a4:d3:d1:31:b5:06:
                    dd:66:27:6d:8a:42:80:fa:5e:32:6e:f6:b1:d3:56:
                    b4:d4:7d:35:ab:e7:bf:f0:c1:31:df:85:b5:30:96:
                    f3:15:6d:6a:9d:f6:dd:ab:ba:7e:98:11:48:cb:2d:
                    b6:16:47:21:4c:15:3d:10:eb:86:a6:1f:ac:ce:d4:
                    04:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A7:11:58:71:D0:82:B7:AE:C6:9B:6F:2E:DD:73:E6:7D:D5:F1:5C
            X509v3 Authority Key Identifier:
                keyid:70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3132332e39392e3230362e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.99.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:15:68:c4:39:26:8d:75:f7:56:e3:ec:56:ff:3b:f1:0d:c2:
         14:e8:22:b4:2f:a6:43:1c:f6:c5:8b:96:c9:17:f0:ef:d3:b5:
         f3:c4:63:10:77:ed:c8:ad:33:56:83:69:2f:6f:3b:79:6f:23:
         90:58:3e:19:be:d1:48:1c:aa:41:a7:80:ef:71:13:4d:96:94:
         88:74:11:da:81:24:4b:da:26:f6:7c:be:7a:ed:fd:d7:8f:c6:
         2f:8d:29:1b:37:bb:29:4d:98:78:06:78:07:2a:d5:83:61:c4:
         bb:4d:1b:eb:28:a4:e5:62:4e:4b:2e:62:5c:eb:fd:94:86:5d:
         9f:6c:70:34:fe:31:ea:aa:09:8e:38:97:12:1d:8f:a6:0b:76:
         dc:cf:d7:92:46:fb:d1:83:f4:bb:cb:ef:f0:e2:31:df:b5:38:
         7c:19:26:15:59:79:b2:ed:41:7c:46:fa:dc:69:9e:2e:24:6a:
         31:75:54:b5:73:78:8a:a5:6b:db:57:49:e8:fb:40:01:ff:79:
         f5:5b:e7:30:d4:bb:4b:4d:7e:f9:16:2a:83:28:ec:ef:66:93:
         c5:96:28:76:eb:b0:35:0b:6e:d0:2e:e2:e6:f0:8d:9d:eb:97:
         cc:13:92:ec:bd:3b:a7:22:44:8e:91:57:9d:3c:17:e9:9d:bf:
         c7:4c:27:53
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:51:57 2026 by rpki-client