Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e34392e302f32342d3234203d3e203233383438.roa
File:                     3132342e3139362e34392e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier:          RXI0wySzQ2AlA5fzVR2NRdvfdVCF7S78OZ4EfIvm3hM=
Subject key identifier:   B7:9B:D2:53:40:E1:ED:AD:A9:CC:7B:95:94:79:9B:39:34:74:38:0F
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       2D9296923F6034F3294A17331FDB81B38A7FDC10
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e34392e302f32342d3234203d3e203233383438.roa
Signing time:             Thu 16 Apr 2026 09:13:35 +0000
ROA not before:           Thu 16 Apr 2026 09:08:35 +0000
ROA not after:            Thu 15 Apr 2027 09:13:35 +0000
asID:                     23848
IP address blocks:        124.196.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:92:96:92:3f:60:34:f3:29:4a:17:33:1f:db:81:b3:8a:7f:dc:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 16 09:08:35 2026 GMT
            Not After : Apr 15 09:13:35 2027 GMT
        Subject: CN=B79BD25340E1EDADA9CC7B9594799B393474380F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a5:39:55:1d:d9:23:ac:2b:73:6f:1b:2b:7c:
                    29:29:f2:eb:f0:5d:ac:81:fe:d8:68:1f:10:37:ab:
                    08:fc:43:4d:f1:3a:2c:ba:3a:9c:a1:fd:d0:5b:47:
                    4f:36:cf:b5:6e:27:45:68:cc:e6:aa:45:de:58:fd:
                    a1:db:15:2d:f6:3c:1d:23:39:01:88:f4:f1:ec:cb:
                    0c:ca:ef:67:47:31:12:37:60:3b:97:56:86:3f:a8:
                    c0:06:0f:0f:45:76:e7:86:80:b3:7f:b0:fe:fb:ae:
                    d3:6f:a2:f9:d8:52:17:fb:5b:28:18:b6:3d:04:5d:
                    27:08:46:4f:d5:e5:c3:5b:cc:85:cf:89:c3:05:2f:
                    47:b4:14:65:1c:00:9e:e7:67:5e:15:fd:d9:43:5f:
                    94:87:85:dd:a7:bb:8a:1d:9c:86:a9:9e:c3:8c:45:
                    44:de:1c:4d:49:1a:b3:b1:47:75:c5:a2:2a:31:e7:
                    88:09:a8:12:20:80:94:44:ae:c4:15:44:fe:30:b9:
                    cf:27:85:c0:fb:89:5a:8e:03:79:98:03:e6:3d:2f:
                    de:e1:79:69:18:ef:45:4e:71:87:e7:cc:d4:85:d5:
                    0f:06:8d:37:c4:22:4e:ab:84:fb:70:2c:60:9d:1f:
                    58:33:b3:98:2d:bf:68:41:18:1b:1d:53:a3:cd:f8:
                    e1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9B:D2:53:40:E1:ED:AD:A9:CC:7B:95:94:79:9B:39:34:74:38:0F
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e34392e302f32342d3234203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.196.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:9c:da:cf:6f:b1:75:c8:45:04:5a:d9:e1:78:b5:ca:a5:60:
         bc:d8:46:d1:b1:8c:bb:24:09:b7:70:b3:06:5f:9b:2e:b2:40:
         53:07:e2:a5:7d:1d:ed:ee:23:4c:23:18:68:3c:03:77:d2:23:
         9f:1c:ad:18:f7:36:ff:4e:af:14:74:b1:72:7a:08:76:b9:ec:
         91:41:af:64:d1:94:a0:57:04:69:70:8a:7e:7b:ff:97:7b:8f:
         81:a0:1e:4e:0a:f2:56:2c:77:b8:53:f5:3b:e0:17:a9:d0:19:
         24:6f:b9:48:bf:2a:a4:c4:df:75:ca:c9:39:0d:45:47:71:1b:
         63:d0:ef:0e:e9:7e:4b:83:82:8c:0f:0b:d5:d1:23:f9:38:f1:
         b5:5e:ba:f6:d5:58:af:66:a9:0a:46:44:3f:1a:f9:a2:9b:f0:
         a2:cf:36:42:40:60:05:fc:9b:7b:21:28:f0:e2:e8:30:56:7e:
         87:be:6c:56:c9:fb:87:a4:a7:d8:7c:2d:8f:d3:74:35:08:06:
         83:b2:1a:85:cb:b1:71:d0:b5:5d:a7:4a:d4:39:52:56:0a:ce:
         a2:4e:54:3c:e4:6f:e3:0e:03:d2:06:e5:b6:1b:74:e3:a0:d4:
         bb:03:a0:50:b2:f7:a5:5d:c3:c8:94:92:56:67:ea:60:fc:89:
         97:b3:06:b3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:04 2026 by rpki-client