Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e32372e302f32342d3234203d3e203233383438.roa
File:                     3132342e3139362e32372e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier:          Z8rNPVlk0tO/mTVkjDQ4ZvUZ9KNg+WTL4+ULIqT8Vbo=
Subject key identifier:   66:F5:5D:B6:BA:C0:89:5B:0A:FC:CC:03:DE:DD:99:03:E6:C5:A9:E0
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       18364E47C79C6E1DDBB3F2C30396444C13C8FC5E
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e32372e302f32342d3234203d3e203233383438.roa
Signing time:             Thu 16 Apr 2026 09:13:36 +0000
ROA not before:           Thu 16 Apr 2026 09:08:36 +0000
ROA not after:            Thu 15 Apr 2027 09:13:36 +0000
asID:                     23848
IP address blocks:        124.196.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:36:4e:47:c7:9c:6e:1d:db:b3:f2:c3:03:96:44:4c:13:c8:fc:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 16 09:08:36 2026 GMT
            Not After : Apr 15 09:13:36 2027 GMT
        Subject: CN=66F55DB6BAC0895B0AFCCC03DEDD9903E6C5A9E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:07:ea:e0:4e:31:ab:e9:b7:25:01:f2:82:e3:
                    95:db:c4:93:fd:91:06:e1:4f:f4:c9:27:b1:db:04:
                    c9:31:88:d7:1f:49:12:c7:23:6b:3e:a4:44:44:d4:
                    f4:ef:79:1c:40:aa:ae:8f:4d:22:3b:59:81:d3:3a:
                    93:a6:f4:77:ea:c3:63:20:52:72:51:44:61:5e:31:
                    81:fa:1d:36:99:cc:20:7e:8e:93:7f:b9:f6:73:aa:
                    d3:d5:59:ac:0d:aa:73:6d:23:d2:54:3c:b2:d8:87:
                    24:62:ab:6b:54:1d:a4:45:99:ea:4a:70:c9:e6:05:
                    6e:e5:73:a3:80:c6:13:94:6e:bd:c4:99:a6:af:bd:
                    5b:cb:dc:1f:57:9f:bd:9c:cd:e7:ac:2a:40:dd:22:
                    c2:cb:82:c3:47:cd:88:ac:c6:35:56:7e:41:99:8d:
                    9f:3b:a3:a7:c4:d2:1c:3e:ad:4f:5b:2d:23:28:43:
                    f2:8f:ad:65:3b:f1:e1:bf:57:d3:f5:b1:c7:e5:ce:
                    fa:3a:1d:8a:8e:be:b1:07:f9:bd:2c:3e:17:7a:45:
                    aa:5e:76:8d:b2:7f:a0:31:61:28:77:bd:1d:02:a5:
                    28:86:2d:12:1a:aa:01:bd:93:94:9d:6e:b4:b1:b1:
                    c4:50:58:d3:18:be:f8:eb:e9:4e:6e:66:4f:5c:51:
                    5e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F5:5D:B6:BA:C0:89:5B:0A:FC:CC:03:DE:DD:99:03:E6:C5:A9:E0
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e32372e302f32342d3234203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.196.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:b4:29:20:fb:7b:bd:cd:94:16:11:b3:4d:b3:39:c2:2b:e6:
         e7:b3:68:e5:95:54:34:28:c2:e3:c2:d2:49:8a:81:fc:a2:e4:
         25:c0:96:1b:13:b7:9b:0e:92:3f:e5:14:f9:09:2d:1c:9f:dd:
         16:b4:5b:38:7e:8b:4a:19:c1:b1:73:c1:9f:2f:64:e7:0f:0e:
         2f:00:93:41:f3:73:20:7a:81:0e:72:3e:ea:d1:ab:fb:cc:ad:
         c9:ef:1d:e5:e2:75:09:e3:d2:0b:0a:cd:9c:51:25:27:2c:76:
         0e:16:86:23:c4:e3:e3:e2:28:aa:f0:29:f1:99:1f:00:c1:ac:
         e6:f4:fc:c7:b8:b3:7c:4b:45:24:4e:72:ef:c9:77:34:26:94:
         aa:a8:48:dc:5d:27:d0:bb:87:b6:9c:31:cf:d4:1d:1d:c7:cb:
         93:1e:90:aa:62:6f:c1:0b:0c:d2:49:fa:6a:02:d8:c7:39:e8:
         8e:8d:ac:9a:f5:a0:fa:3d:aa:90:ab:f8:3d:88:1a:31:ac:36:
         1e:cf:d4:ed:d1:0e:b4:10:ef:d4:c9:52:50:65:b0:9b:0b:1b:
         48:be:d2:d9:c5:30:e6:cf:f3:1c:12:cb:7b:4f:4a:7c:4e:0d:
         72:7f:5c:59:9a:b1:0a:7f:a5:ad:90:e0:27:a6:a7:4b:1e:70:
         cd:19:f6:02
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:25:52 2026 by rpki-client