Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e33322e302f32342d3234203d3e203233383438.roa
File:                     3132342e3139362e33322e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier:          +CPNO/HYZYD18y6mIkdTodQmNMkz4aB2nSv7B1H3+oc=
Subject key identifier:   44:F2:24:9C:D1:EF:95:A0:01:79:1A:64:9B:B1:9B:D2:F0:B6:75:49
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       06109AC1BCF09D73DD30BAB207644628239D9374
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e33322e302f32342d3234203d3e203233383438.roa
Signing time:             Thu 16 Apr 2026 09:13:36 +0000
ROA not before:           Thu 16 Apr 2026 09:08:36 +0000
ROA not after:            Thu 15 Apr 2027 09:13:36 +0000
asID:                     23848
IP address blocks:        124.196.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:10:9a:c1:bc:f0:9d:73:dd:30:ba:b2:07:64:46:28:23:9d:93:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 16 09:08:36 2026 GMT
            Not After : Apr 15 09:13:36 2027 GMT
        Subject: CN=44F2249CD1EF95A001791A649BB19BD2F0B67549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8f:7b:cf:fe:cd:46:a2:b9:dd:e2:02:3c:17:
                    43:9c:d4:4a:05:9f:ef:6d:63:09:5e:5f:38:e7:0e:
                    f9:42:af:45:4b:f4:0d:f5:f2:54:3d:75:b0:20:e3:
                    8c:e6:eb:2c:c2:9f:8c:8c:24:64:f7:dc:c6:b7:01:
                    8c:3e:ea:40:0c:5d:95:a3:97:1f:ec:b3:42:20:96:
                    ac:20:71:7c:89:4d:9d:0b:c3:26:9e:78:50:72:10:
                    eb:63:15:1d:f6:38:17:9b:0b:72:63:97:60:6c:dd:
                    4b:b6:b8:38:13:0a:cc:3d:51:72:db:ce:3d:bf:d0:
                    a6:af:a0:a1:18:73:f5:62:cd:4e:af:36:18:8f:52:
                    a2:3b:c8:65:a8:a8:e5:c1:9e:13:55:f8:6a:a2:ae:
                    2d:15:b1:2f:53:e7:75:fd:ed:68:3b:4d:84:6c:4d:
                    df:df:53:bc:45:3c:53:0f:08:6d:59:59:67:a4:e3:
                    43:da:3e:ba:11:8a:ea:ee:eb:e7:f8:28:f2:3c:0d:
                    e1:16:85:50:57:78:16:66:41:0a:41:e0:39:03:0a:
                    93:62:f9:69:d3:47:cf:2f:d4:56:88:41:2f:29:49:
                    4d:3a:ab:bf:18:b0:87:ba:3a:43:df:0d:20:60:5e:
                    31:b3:a3:ef:b5:00:a5:de:74:4c:0e:f1:da:84:e5:
                    dc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F2:24:9C:D1:EF:95:A0:01:79:1A:64:9B:B1:9B:D2:F0:B6:75:49
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e33322e302f32342d3234203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.196.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:34:f5:ee:97:86:d9:db:45:0b:68:da:c9:31:49:65:42:89:
         76:80:de:72:ed:a1:4a:d8:31:4a:ce:e3:27:c4:04:86:56:fc:
         8e:b3:f5:ff:85:ec:86:4c:b5:8f:d7:59:ed:29:2a:a6:8c:1e:
         da:1b:43:c9:f1:45:a3:6a:68:07:41:07:b4:be:d2:0c:e0:53:
         59:a9:2e:ee:92:39:97:e2:9c:e4:3e:4a:b7:1c:90:ad:21:c5:
         30:0a:13:c3:a7:8b:69:47:70:94:49:6a:60:b5:48:fa:ba:aa:
         20:65:b1:f8:cc:1a:f6:dc:46:96:15:9d:b4:d1:db:15:c6:5a:
         78:1f:e5:be:79:51:34:1c:c7:ba:92:83:0d:23:57:c1:f1:7c:
         77:7c:a9:57:1a:73:f8:ed:cc:4f:56:cb:89:ba:42:d1:ee:cd:
         03:71:84:e3:0b:3c:98:cc:2d:02:18:16:6e:6a:56:51:d8:66:
         7a:9f:4d:8f:33:d7:62:93:d1:13:a0:d6:2f:8f:12:e1:2a:36:
         f6:0b:bb:28:da:e1:a2:55:c9:60:a8:f1:16:23:51:53:b6:07:
         b3:8e:8e:b9:c9:b2:9c:8c:b2:d5:6e:51:1f:4a:64:0e:7b:df:
         de:63:9c:96:63:d4:21:46:c5:bd:81:74:6e:15:5e:dd:bb:00:
         c1:aa:65:c4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:10:59 2026 by rpki-client