Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e35312e302f32342d3234203d3e203233383438.roa
File:                     3132342e3139362e35312e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier:          k5jkRNA6aXPQenwIVn5k2+fkvPtbfvHTPvjBUnzFSK4=
Subject key identifier:   11:58:EF:36:B2:73:92:D3:19:60:C7:FE:7E:61:90:B0:90:48:88:3C
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       7A892E2C5A33FF16340067223D9D5DDAF97C6B9B
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e35312e302f32342d3234203d3e203233383438.roa
Signing time:             Thu 16 Apr 2026 09:13:37 +0000
ROA not before:           Thu 16 Apr 2026 09:08:37 +0000
ROA not after:            Thu 15 Apr 2027 09:13:37 +0000
asID:                     23848
IP address blocks:        124.196.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:89:2e:2c:5a:33:ff:16:34:00:67:22:3d:9d:5d:da:f9:7c:6b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 16 09:08:37 2026 GMT
            Not After : Apr 15 09:13:37 2027 GMT
        Subject: CN=1158EF36B27392D31960C7FE7E6190B09048883C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7c:91:a1:c7:ba:ed:d1:b4:58:b9:e6:fb:9f:
                    46:f5:57:57:70:32:5f:45:02:46:f9:71:44:c8:60:
                    82:bf:8b:d0:ae:b3:9a:47:ff:40:31:32:6e:bc:2c:
                    16:45:3e:60:fe:8a:60:2e:5d:bc:c2:a6:b8:8e:68:
                    43:c8:f7:28:8e:a7:b5:53:5c:fc:86:59:4d:5e:f8:
                    12:4d:27:c1:1c:d6:2b:40:8f:d5:27:a4:1f:5b:8e:
                    0f:a1:e7:67:3b:00:11:81:cd:47:ae:27:b7:54:48:
                    0a:2e:b6:4d:c4:4d:22:b8:d8:a2:64:02:83:66:b3:
                    91:ac:da:69:ad:9e:aa:2e:21:87:4a:89:26:e7:30:
                    13:04:87:d3:d0:88:02:08:84:98:b4:fb:a6:19:45:
                    22:f6:61:8f:13:e2:67:78:d7:b3:0c:fa:df:ec:6f:
                    41:69:8f:e3:da:39:a3:d2:8d:ff:5e:a4:b3:1b:9b:
                    25:5d:f3:95:ce:da:00:05:44:2c:19:35:c4:ae:36:
                    d6:c4:22:d7:fb:67:52:d3:f1:01:dd:e2:70:87:71:
                    cc:8f:fd:61:5c:fc:2e:bc:7f:02:92:a5:e2:bf:6c:
                    84:76:6e:7a:44:eb:ac:1a:33:6a:76:f3:57:d4:2a:
                    bb:da:28:cf:8f:e5:8d:af:1c:97:df:a2:82:01:4e:
                    35:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:58:EF:36:B2:73:92:D3:19:60:C7:FE:7E:61:90:B0:90:48:88:3C
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e35312e302f32342d3234203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.196.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:52:0b:12:cd:7d:3d:af:4e:14:89:b8:ff:ab:08:c0:08:16:
         78:0d:d4:a9:d5:37:5e:2a:ea:e4:50:c0:36:9d:13:29:35:c8:
         69:f5:e4:c7:77:d3:24:cc:11:82:a1:97:b6:02:26:63:ce:5b:
         61:8e:09:3c:41:6c:0b:60:06:2f:0d:7f:06:f8:47:4d:f9:fd:
         6d:8e:be:81:73:63:c5:eb:c9:a9:cb:5c:4e:68:49:e0:1f:39:
         ca:48:c7:08:df:f7:b5:68:5b:b4:d4:9d:66:31:97:9a:d7:2d:
         c4:43:ca:fb:99:e0:ae:37:25:d8:df:90:fa:00:d7:04:11:86:
         88:49:1f:26:f0:2c:b0:bb:53:0f:c6:80:e5:47:6a:8d:72:7d:
         ba:2f:88:c6:85:95:eb:b8:e9:16:3c:79:62:33:9b:4f:29:e3:
         c0:5f:76:26:28:6b:fd:63:98:b1:66:8f:16:0e:fc:80:da:f6:
         f6:f8:1c:fb:b3:79:17:35:b3:a1:ab:2b:bb:34:4f:83:3c:17:
         98:75:59:84:b9:e5:18:94:29:98:e5:51:9b:07:fe:80:46:08:
         a1:ed:f0:bc:ce:26:f9:59:0d:e1:d4:ee:02:53:d4:ba:59:fa:
         ab:15:7b:5e:2f:ea:5e:4c:eb:34:93:97:70:b6:ef:b4:92:87:
         0a:d6:cd:43
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:25:54 2026 by rpki-client