Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e34382e302f32342d3234203d3e203233383438.roa
File:                     3132342e3139362e34382e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier:          V2jTYd74SazoJHxFaIhHkvbI4rs/rDJEogSocaB5E7w=
Subject key identifier:   86:4F:CB:97:27:C3:05:3B:FF:F3:6D:10:FD:B5:05:12:A0:C4:B2:FC
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       2B722F8F64FC5BDE5672603E11D63AE77391E937
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e34382e302f32342d3234203d3e203233383438.roa
Signing time:             Thu 16 Apr 2026 09:13:36 +0000
ROA not before:           Thu 16 Apr 2026 09:08:36 +0000
ROA not after:            Thu 15 Apr 2027 09:13:36 +0000
asID:                     23848
IP address blocks:        124.196.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:72:2f:8f:64:fc:5b:de:56:72:60:3e:11:d6:3a:e7:73:91:e9:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 16 09:08:36 2026 GMT
            Not After : Apr 15 09:13:36 2027 GMT
        Subject: CN=864FCB9727C3053BFFF36D10FDB50512A0C4B2FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:65:ee:f9:d0:00:cc:57:e5:d3:8a:d2:89:41:
                    9d:a2:07:c3:4b:f8:2a:a6:b7:1b:e4:43:ae:86:6b:
                    71:cc:e1:77:f6:b2:e1:18:c7:74:b9:9f:8f:c1:3f:
                    1e:9a:57:c1:13:b7:40:b7:2a:67:b1:58:84:a4:2e:
                    dc:16:d2:d6:6f:5d:d4:06:74:6b:18:c9:28:f2:2c:
                    05:1a:ab:e8:0c:7b:10:48:f7:61:6d:f5:62:54:47:
                    b0:66:75:79:5f:ea:d0:43:ed:ad:dd:2c:32:d7:51:
                    09:29:a4:1a:9e:bc:79:59:bd:c9:d4:ec:ea:f0:8d:
                    3e:a2:c4:38:68:ae:ed:df:56:c6:9d:5a:4d:70:43:
                    b1:61:92:a1:5d:cc:da:db:80:68:85:fb:04:d4:30:
                    a9:97:51:f9:95:36:5d:e5:ed:bd:26:01:a5:6c:8b:
                    22:46:31:c2:45:ba:40:ea:1c:6a:a6:d8:0b:f6:cc:
                    0b:25:77:b4:24:50:9a:99:17:97:b4:22:a7:a9:3a:
                    0c:a6:a7:e9:5b:e3:60:f1:fd:fa:95:f7:ab:c8:c4:
                    49:47:9d:a5:e8:06:6f:95:3f:d3:a4:8c:57:5c:d5:
                    d2:f6:d3:de:2e:e7:0c:18:a3:5f:50:4b:76:f1:88:
                    18:40:bc:fd:ca:72:03:66:94:19:d0:63:cd:90:61:
                    61:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4F:CB:97:27:C3:05:3B:FF:F3:6D:10:FD:B5:05:12:A0:C4:B2:FC
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e34382e302f32342d3234203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.196.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:03:fd:8d:5f:da:a6:04:5b:63:0e:44:7d:c6:f2:f2:71:fc:
         1f:ef:74:b1:61:29:1c:2e:0a:9a:27:a0:a3:47:b7:52:6e:1a:
         8e:d1:68:a5:ee:d1:b9:c1:45:fc:55:ec:c6:64:54:d4:ab:5a:
         f9:d9:c9:73:7d:ce:72:aa:f6:0b:a6:18:a7:c7:49:93:c8:e7:
         49:3b:b1:53:82:28:2f:31:26:39:73:1c:7d:01:ae:28:66:1f:
         d5:7c:9c:3d:6c:02:0e:4f:ea:54:a5:f5:9a:bb:76:83:21:bf:
         9d:15:a1:1f:fe:d3:f1:17:3e:14:dd:1a:a7:14:73:63:b4:61:
         21:90:29:38:7f:70:51:e3:d0:7d:fc:e7:29:e3:31:5d:dd:19:
         19:52:36:49:fe:a8:23:69:57:8d:64:11:ba:04:d6:17:a0:fa:
         15:95:c6:ea:79:6f:8b:1c:53:d2:56:0e:f9:13:19:25:d1:e7:
         bb:35:14:02:45:fd:49:a5:57:b6:dc:63:ce:f0:e1:c5:27:53:
         7c:b4:ab:44:e5:f6:24:50:33:d1:64:4e:f3:42:73:ec:bb:08:
         31:16:f8:81:9c:a5:c5:f8:53:a7:11:9a:7f:3c:b6:3c:35:42:
         ee:59:01:20:c2:84:99:7f:c4:a5:67:d9:18:0c:0c:f1:98:0e:
         6f:20:de:6d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:09 2026 by rpki-client