Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e32362e302f32342d3234203d3e203233383438.roa
File:                     3132342e3139362e32362e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier:          YZttBpYdx/M5XRh4HOwbVW+aOAS+r7lsnIq+HLCHGmU=
Subject key identifier:   CE:EA:ED:9D:E8:26:DE:C6:60:4D:C0:84:E3:AE:F4:F6:08:34:DE:3D
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       44F1F18C0FAA990ACA7B48666A4E1B5B1C07AD3F
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e32362e302f32342d3234203d3e203233383438.roa
Signing time:             Thu 16 Apr 2026 09:13:36 +0000
ROA not before:           Thu 16 Apr 2026 09:08:36 +0000
ROA not after:            Thu 15 Apr 2027 09:13:36 +0000
asID:                     23848
IP address blocks:        124.196.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f1:f1:8c:0f:aa:99:0a:ca:7b:48:66:6a:4e:1b:5b:1c:07:ad:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 16 09:08:36 2026 GMT
            Not After : Apr 15 09:13:36 2027 GMT
        Subject: CN=CEEAED9DE826DEC6604DC084E3AEF4F60834DE3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:01:f2:fa:b2:bf:2e:62:5c:bd:13:1b:b4:ab:
                    09:22:c3:51:d4:0b:d5:29:c9:f0:e3:43:98:55:86:
                    f6:6b:ee:02:d4:99:fa:b2:e2:92:8b:c1:2f:5e:07:
                    ad:5c:4f:05:d6:d4:eb:b0:07:21:07:9c:69:25:64:
                    3a:d2:17:b4:48:81:4f:21:3e:53:e9:ec:9b:dc:dd:
                    8d:1e:f3:8c:3b:16:b8:66:6b:70:37:d8:1b:89:4d:
                    13:93:c8:2b:4b:ec:04:55:f2:ef:2b:b3:04:1d:b4:
                    37:b1:bf:f6:78:a6:40:2b:28:d5:77:21:38:ca:f4:
                    43:80:56:3c:f4:65:7f:20:18:b0:1a:0d:59:3f:59:
                    a1:64:6d:99:b3:af:b8:0b:a8:74:a5:62:94:6e:d2:
                    7c:75:db:e4:1d:14:e8:83:90:16:8f:78:1b:6d:96:
                    ec:2b:e8:96:dd:89:c0:c5:f6:52:fa:9e:25:ca:eb:
                    01:79:11:3f:a4:ef:a1:76:01:e8:c5:e2:a3:b0:26:
                    05:0b:e1:31:c9:ec:60:44:1b:99:40:60:35:fe:e8:
                    5d:ce:c4:e3:b3:fa:af:98:ea:5d:8b:8e:8f:12:87:
                    88:18:db:54:05:31:8e:7b:0c:9a:17:12:62:08:c4:
                    05:19:90:42:a7:ba:17:1c:fc:e2:ba:2a:38:38:9e:
                    f1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:EA:ED:9D:E8:26:DE:C6:60:4D:C0:84:E3:AE:F4:F6:08:34:DE:3D
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e32362e302f32342d3234203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.196.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:b2:3c:9d:b4:90:be:0f:05:80:4c:1b:46:0d:d9:90:c7:13:
         89:b4:2b:07:24:a3:01:53:49:78:8c:63:56:4c:37:24:26:11:
         e1:2c:5e:00:a3:75:85:d3:d2:63:94:46:8e:43:c3:a7:68:79:
         e0:5e:15:12:f2:a4:e2:b3:25:87:a8:07:c5:f3:27:f2:19:41:
         94:a9:2f:f2:bc:69:b1:98:61:53:0a:92:f6:d2:28:2b:a8:b4:
         56:4a:f5:da:a0:fd:d2:93:da:c1:28:77:08:17:f1:23:c7:18:
         51:d6:b5:b9:74:5d:96:2b:89:b2:a6:a0:6f:35:79:24:6a:9a:
         62:83:e2:d0:71:5f:cd:94:41:7b:0b:d4:71:cc:40:a1:61:fe:
         b1:df:21:69:de:06:27:03:17:fd:28:9d:69:81:c8:3a:54:74:
         4c:70:8c:03:99:05:1c:73:ff:26:03:ce:85:a3:c9:e5:27:9c:
         f0:39:04:94:ca:33:b9:db:9c:4e:f2:94:26:f2:7e:02:d9:4c:
         9e:25:da:75:ce:c5:b1:c5:ea:28:a8:b2:98:bb:1b:1f:8c:14:
         a8:ab:a8:61:6b:9c:94:d3:34:72:4a:64:40:d7:2d:75:e4:2b:
         d8:59:0b:ca:ec:b8:ea:19:c1:4c:1b:04:30:70:c5:ac:dc:08:
         7c:d6:8e:5e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:09 2026 by rpki-client