Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e35302e302f32342d3234203d3e203233383438.roa
File:                     3132342e3139362e35302e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier:          XgQI1VF5dd5UezfF2RoRXtn+Y0edSITqkpFR5Oi90OM=
Subject key identifier:   AC:C8:2F:4A:82:6C:F2:C2:E7:FB:16:72:65:58:24:9C:98:00:CC:C4
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       3DD3EFE5DC8E43D11740628CCDF7DB5CC5E39896
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e35302e302f32342d3234203d3e203233383438.roa
Signing time:             Thu 16 Apr 2026 09:13:36 +0000
ROA not before:           Thu 16 Apr 2026 09:08:36 +0000
ROA not after:            Thu 15 Apr 2027 09:13:36 +0000
asID:                     23848
IP address blocks:        124.196.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d3:ef:e5:dc:8e:43:d1:17:40:62:8c:cd:f7:db:5c:c5:e3:98:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 16 09:08:36 2026 GMT
            Not After : Apr 15 09:13:36 2027 GMT
        Subject: CN=ACC82F4A826CF2C2E7FB16726558249C9800CCC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:d7:d5:30:1c:fa:d6:a7:1a:de:12:31:84:83:
                    75:11:40:49:ab:e8:ff:09:f1:92:b4:8c:07:11:5b:
                    0b:4e:91:7f:2e:9f:e3:fb:56:16:58:5c:73:4f:78:
                    3b:bf:1a:de:3b:3d:1a:25:4c:2a:dd:7f:fd:13:0a:
                    b9:c1:33:59:66:46:d6:91:de:03:f4:a8:80:5b:27:
                    0b:6f:6d:ae:83:5d:e5:09:90:bd:6f:01:5b:b2:a7:
                    55:b1:0f:07:17:3e:2f:89:0f:7c:cc:cb:a3:3e:5b:
                    16:fb:28:fe:13:2f:52:3e:12:89:95:5e:aa:66:89:
                    0e:c6:b1:1c:fe:43:03:e8:6d:5b:3a:29:ed:c1:83:
                    43:28:93:51:ac:71:86:32:43:4e:17:91:b0:4b:51:
                    6d:00:dc:f6:47:d8:81:8b:f8:cd:49:6c:d2:d1:4b:
                    0a:5d:49:1b:6c:93:55:9d:70:d1:a5:84:f4:0e:e8:
                    74:b7:1e:85:ce:aa:43:81:9e:d0:24:21:9b:cb:5d:
                    36:89:a1:fe:43:c3:58:1b:e1:4d:ea:86:4d:74:6d:
                    b3:1b:a3:9c:48:5f:9e:b7:6c:fd:62:41:d0:00:a6:
                    69:2b:90:1e:bc:1e:92:5a:38:48:f4:9a:5e:99:c6:
                    88:97:b1:e6:df:25:65:3a:f1:24:2e:33:c8:5c:b9:
                    12:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C8:2F:4A:82:6C:F2:C2:E7:FB:16:72:65:58:24:9C:98:00:CC:C4
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e35302e302f32342d3234203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.196.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:25:89:75:53:19:d1:66:96:82:00:f8:6f:4e:57:52:75:a8:
         f8:ee:2b:c4:e2:39:60:04:c0:39:cf:39:23:31:9b:f5:36:15:
         39:f9:73:13:0c:a6:9b:72:a1:7a:78:bb:98:e6:0a:dc:aa:94:
         57:58:1c:7e:fb:a9:41:2d:17:69:78:e2:7f:6e:eb:65:66:7e:
         cc:b7:2e:27:3c:4c:ce:da:8e:2c:a2:9a:5f:6f:68:46:fd:41:
         51:f7:7f:55:90:bf:0a:ab:87:b5:ea:dd:9c:df:3e:19:b3:6b:
         0a:92:83:0b:8c:05:57:ef:ce:b8:22:f0:2d:c3:a0:f4:b4:e4:
         3e:e4:6a:1b:e5:c5:46:54:a7:9d:e1:3f:63:9e:9a:c0:4a:f8:
         f1:c4:7a:d8:9a:bd:92:e9:a2:bf:8f:d9:03:be:42:cb:c7:93:
         7b:ef:60:20:14:97:ae:93:f1:86:05:5a:36:23:1c:9c:22:22:
         83:9d:a9:80:51:1a:b7:f6:fd:a4:b0:dd:b9:85:e0:10:95:ac:
         7b:57:c1:25:52:e8:2f:c4:0a:3a:a7:28:eb:53:a4:76:3a:10:
         b5:c1:c8:bb:da:e0:39:cb:02:18:b3:cc:0f:62:3d:d8:0e:95:
         7e:e8:6d:c5:39:32:f3:8c:c2:aa:ad:39:cc:1f:b5:54:d4:ef:
         e1:69:b7:8a
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUPdPv5dyOQ9EXQGKMzffbXMXjmJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEw
RTI3MDQyRDAeFw0yNjA0MTYwOTA4MzZaFw0yNzA0MTUwOTEzMzZaMDMxMTAvBgNV
BAMTKEFDQzgyRjRBODI2Q0YyQzJFN0ZCMTY3MjY1NTgyNDlDOTgwMENDQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD219UwHPrWpxreEjGEg3URQEmr
6P8J8ZK0jAcRWwtOkX8un+P7VhZYXHNPeDu/Gt47PRolTCrdf/0TCrnBM1lmRtaR
3gP0qIBbJwtvba6DXeUJkL1vAVuyp1WxDwcXPi+JD3zMy6M+Wxb7KP4TL1I+EomV
XqpmiQ7GsRz+QwPobVs6Ke3Bg0Mok1GscYYyQ04XkbBLUW0A3PZH2IGL+M1JbNLR
SwpdSRtsk1WdcNGlhPQO6HS3HoXOqkOBntAkIZvLXTaJof5Dw1gb4U3qhk10bbMb
o5xIX563bP1iQdAApmkrkB68HpJaOEj0ml6ZxoiXsebfJWU68SQuM8hcuRIzAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUrMgvSoJs8sLn+xZyZVgknJgAzMQwHwYDVR0j
BBgwFoAU7aiEp5dI1X60k2ZwTLaoEQ4nBC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA4MzUzMjM1NTgyOTc2My8wL0VEQTg4NEE3OTc0OEQ1N0VCNDkzNjY3MDRDQjZB
ODExMEUyNzA0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEwRTI3MDQyRC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NzA4MzUzMjM1NTgyOTc2My8wLzMxMzIzNDJlMzEz
OTM2MmUzNTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM4MzQzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAHzEMjANBgkqhkiG9w0BAQsFAAOCAQEARSWJdVMZ0WaWggD4b05XUnWo
+O4rxOI5YATAOc85IzGb9TYVOflzEwymm3Kheni7mOYK3KqUV1gcfvupQS0XaXji
f27rZWZ+zLcuJzxMztqOLKKaX29oRv1BUfd/VZC/CquHterdnN8+GbNrCpKDC4wF
V+/OuCLwLcOg9LTkPuRqG+XFRlSnneE/Y56awEr48cR62Jq9kumiv4/ZA75Cy8eT
e+9gIBSXrpPxhgVaNiMcnCIig52pgFEat/b9pLDduYXgEJWse1fBJVLoL8QKOqco
61OkdjoQtcHIu9rgOcsCGLPMD2I92A6VfuhtxTky84zCqq05zB+1VNTv4Wm3ig==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:26:00 2026 by rpki-client