Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e34312e302f32342d3234203d3e203233383438.roa
File:                     3132342e3139362e34312e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier:          KfCK+nEjomQI819VFPMlNYf+CP55oby9GWBiP190fPk=
Subject key identifier:   EA:5E:58:4F:2B:7F:4B:10:F8:B5:C0:3A:91:EB:D4:EC:7A:80:A8:DD
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       38878F774C7B9B96B38FDC595CB9865FACB761B6
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e34312e302f32342d3234203d3e203233383438.roa
Signing time:             Thu 16 Apr 2026 09:13:36 +0000
ROA not before:           Thu 16 Apr 2026 09:08:36 +0000
ROA not after:            Thu 15 Apr 2027 09:13:36 +0000
asID:                     23848
IP address blocks:        124.196.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:87:8f:77:4c:7b:9b:96:b3:8f:dc:59:5c:b9:86:5f:ac:b7:61:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 16 09:08:36 2026 GMT
            Not After : Apr 15 09:13:36 2027 GMT
        Subject: CN=EA5E584F2B7F4B10F8B5C03A91EBD4EC7A80A8DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9d:bb:f6:d7:18:6f:44:e1:7e:7f:9a:9a:9e:
                    57:49:55:ac:cb:bb:f3:2f:54:45:ba:dc:25:12:ac:
                    02:cb:11:0c:af:02:d7:73:37:11:61:10:b5:bf:4e:
                    b1:81:78:65:f1:1f:bc:36:9f:14:ff:09:d7:3f:c8:
                    87:b9:07:ac:56:27:83:bf:e8:1c:5e:d1:45:e6:2c:
                    65:af:f3:cd:2c:0c:6c:3e:16:4f:47:73:e9:a3:27:
                    ff:7b:87:cc:c2:f0:da:e6:a6:ba:b5:cb:12:f1:e1:
                    be:46:32:c8:61:a0:70:59:41:86:72:35:a0:2b:57:
                    4f:96:55:3f:40:9c:18:9f:ab:6a:e4:10:30:4c:a7:
                    6c:b9:b7:b1:e3:9a:5f:72:02:60:16:78:04:eb:eb:
                    db:e7:8f:c3:5b:68:1d:71:ad:27:58:35:e8:7e:08:
                    b8:e1:1e:4b:9e:f0:a4:a6:eb:e7:97:12:6a:34:88:
                    61:c7:e7:f3:02:e1:d8:e9:87:2e:39:6e:10:2f:8b:
                    3e:1e:35:1c:d6:31:24:21:b2:fd:61:12:75:ed:9a:
                    ea:8f:d6:d7:11:a7:34:56:2f:11:d3:a7:57:d6:86:
                    80:21:1c:58:21:35:45:49:6d:40:c3:53:1d:50:2e:
                    d2:66:16:d0:b7:64:b8:b9:aa:7b:74:67:85:f3:79:
                    63:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:5E:58:4F:2B:7F:4B:10:F8:B5:C0:3A:91:EB:D4:EC:7A:80:A8:DD
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e34312e302f32342d3234203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.196.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:ed:3b:5e:75:15:22:51:86:f9:bc:5a:d1:81:96:cd:5e:75:
         04:8b:45:13:95:8d:9d:bd:9d:d8:71:34:2a:9f:d7:67:5c:be:
         00:6a:d3:13:4e:af:c4:5e:3e:6c:66:0a:94:37:4b:27:8d:73:
         0b:73:03:1a:52:a1:78:7a:bd:0d:56:66:29:ba:da:14:9b:86:
         f3:3d:a6:50:49:2f:cd:cb:33:12:7f:8c:13:b2:0a:f1:dd:e7:
         4d:c5:35:c6:3a:b8:53:c8:b4:d7:fa:28:ad:dc:9d:88:34:88:
         80:02:9b:18:10:0f:1b:b0:0d:c4:3f:06:f2:a1:fd:68:a6:3d:
         9c:9a:5c:b9:07:96:6a:60:a2:0c:f0:e0:36:aa:07:c2:f7:35:
         a3:22:91:b2:46:d5:f5:e9:5a:c1:bc:1d:cc:c4:7d:f9:0f:1a:
         df:ad:c8:ba:26:8c:01:f8:c8:90:d4:65:06:38:3a:f0:88:84:
         d9:f2:ca:1e:2f:38:5e:35:f2:84:2c:9e:4c:be:7a:db:93:19:
         3a:ad:5b:cb:ea:70:9a:6c:b7:bf:1b:4c:79:68:c8:f1:c6:36:
         14:d4:74:88:8a:b7:51:81:ac:2f:02:ae:9f:c8:fc:41:78:03:
         10:01:22:84:a5:04:f5:1c:37:96:4a:83:f7:7d:9c:6c:f6:a7:
         ab:eb:6a:ea
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:25:53 2026 by rpki-client