Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e33332e302f32342d3234203d3e203233383438.roa
File:                     3132342e3139362e33332e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier:          dT/2zrdr1WEBLj9Qx1P06JrU439jRrBQXGYJbKrlNqI=
Subject key identifier:   80:1F:AA:D0:03:C2:FE:CC:FB:F1:13:95:C1:BB:83:CD:D7:87:58:5C
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       41ADF5A485CF0B980B6F0CDFD2BDBCEA75CD7342
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e33332e302f32342d3234203d3e203233383438.roa
Signing time:             Thu 16 Apr 2026 09:13:36 +0000
ROA not before:           Thu 16 Apr 2026 09:08:36 +0000
ROA not after:            Thu 15 Apr 2027 09:13:36 +0000
asID:                     23848
IP address blocks:        124.196.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ad:f5:a4:85:cf:0b:98:0b:6f:0c:df:d2:bd:bc:ea:75:cd:73:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 16 09:08:36 2026 GMT
            Not After : Apr 15 09:13:36 2027 GMT
        Subject: CN=801FAAD003C2FECCFBF11395C1BB83CDD787585C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:53:5f:7e:58:35:05:ef:ce:af:e5:21:53:d5:
                    93:3e:d3:d1:00:df:5b:f5:57:c4:8a:fd:f5:96:fd:
                    11:9b:e4:94:72:42:0c:4b:15:e7:3b:6b:46:21:69:
                    ea:73:fd:9a:4e:76:37:64:92:64:72:dc:83:c2:96:
                    d8:03:f6:0f:eb:af:ba:c1:70:35:e3:71:f0:df:36:
                    68:fb:a4:63:83:83:a8:fe:70:5a:f7:f3:f7:f8:fa:
                    5c:60:16:fb:e1:56:87:9b:c7:b4:c1:a8:c5:f3:2a:
                    8c:66:c0:af:1c:9c:18:f1:80:c7:93:6f:5d:f3:19:
                    7e:ee:65:e1:f5:8c:8e:23:64:0c:7d:0d:0c:b7:e8:
                    86:94:0d:c3:c8:f5:c9:50:93:c2:10:bf:5b:c3:1d:
                    58:d3:cc:79:10:0c:c0:40:74:f2:a1:1f:dc:0f:0b:
                    3e:f4:2a:52:97:26:7c:80:5d:1c:33:d6:86:a4:20:
                    4c:be:d2:5c:58:a1:e6:0b:77:63:a5:ea:31:81:a3:
                    d7:63:ed:be:a8:ed:09:56:c7:68:26:bd:23:d4:96:
                    83:73:0a:15:85:3c:ad:20:14:ee:0d:0c:66:1f:ec:
                    89:1a:d8:4c:18:6c:13:48:55:2c:69:ea:0e:b5:29:
                    f1:ba:a3:75:44:8b:2c:77:fe:80:28:3b:92:91:95:
                    21:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1F:AA:D0:03:C2:FE:CC:FB:F1:13:95:C1:BB:83:CD:D7:87:58:5C
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e33332e302f32342d3234203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.196.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:8a:1a:03:c4:b6:2c:c0:e3:cc:21:e1:7b:58:cd:0b:06:c9:
         aa:d2:01:ce:5c:e6:d5:c3:56:b4:ac:1e:c1:b2:3b:11:d8:66:
         c0:7f:a0:5b:be:22:13:03:a3:93:88:94:fb:d2:b3:79:5a:0e:
         64:50:6f:76:71:06:0c:7b:13:b4:fe:75:78:a9:19:47:9e:20:
         a2:b6:96:7f:75:d3:68:49:d8:6a:d6:a1:16:de:cb:c0:99:5a:
         78:c7:08:66:62:41:14:76:03:a3:e0:e3:f3:6b:99:b2:42:6e:
         62:c4:d9:35:fa:e7:61:3a:1b:b1:10:38:58:db:66:29:ba:23:
         08:b5:77:3c:9e:fd:5b:de:8d:31:ba:c2:cc:a1:f4:36:d6:c6:
         f1:19:8e:82:78:5c:26:9b:dc:c2:51:18:4a:ee:d5:d9:98:0a:
         62:2e:38:f6:06:5a:91:6a:86:55:62:2b:f9:13:bd:92:93:92:
         17:aa:10:aa:16:ec:a3:80:79:77:35:af:f3:35:54:27:43:60:
         ba:71:ee:c8:6a:37:ce:95:ab:3f:cf:5d:0d:7c:6a:f4:0d:80:
         d7:0d:d7:9d:d1:14:fb:4c:bf:0b:28:c7:4e:a8:df:a5:80:26:
         ee:60:89:a8:92:ee:dd:ca:55:79:7b:dd:b4:aa:f6:f6:1d:99:
         bc:32:a1:fc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:25:53 2026 by rpki-client