Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e36362e302f32342d3234203d3e203233383438.roa
File:                     3132342e3139362e36362e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier:          EYUZOVP/TWLESbNzdFCnignK+O2/Q1JCl1lYrd3z/B4=
Subject key identifier:   F6:E8:61:F1:9F:CB:9A:BC:E8:AE:EF:27:88:00:3D:4B:9D:92:A5:E9
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       6D9EBD4183EDDA263831CCF8365E9363083C456D
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e36362e302f32342d3234203d3e203233383438.roa
Signing time:             Thu 16 Apr 2026 09:17:57 +0000
ROA not before:           Thu 16 Apr 2026 09:12:57 +0000
ROA not after:            Thu 15 Apr 2027 09:17:57 +0000
asID:                     23848
IP address blocks:        124.196.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:9e:bd:41:83:ed:da:26:38:31:cc:f8:36:5e:93:63:08:3c:45:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 16 09:12:57 2026 GMT
            Not After : Apr 15 09:17:57 2027 GMT
        Subject: CN=F6E861F19FCB9ABCE8AEEF2788003D4B9D92A5E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:19:7a:ce:c8:d1:f6:c1:b7:f9:82:66:9b:da:
                    d9:68:19:e2:b2:c6:fc:d1:ad:55:da:45:0e:1c:26:
                    0e:fd:7e:8a:d2:43:1e:07:ab:f9:5b:40:01:13:2b:
                    45:30:a1:28:af:b2:36:73:ae:f8:6a:ca:95:b8:d8:
                    ae:a8:f1:79:54:39:a3:2e:ce:d4:22:01:62:1d:ea:
                    89:5a:5d:eb:f5:f9:a9:6c:8b:72:6d:a8:e2:35:42:
                    cb:12:63:10:ce:17:b7:bf:b1:55:f7:23:25:31:a0:
                    11:b9:c8:bd:52:f2:5f:93:f7:1f:08:94:11:1c:46:
                    ca:de:54:3f:db:45:ac:fb:2c:6b:c0:3a:f9:20:f4:
                    ba:59:8f:cc:c5:d9:cf:1b:d6:23:88:3b:e8:4c:0e:
                    07:6e:a7:dc:a2:4e:cd:a0:86:11:c5:56:d4:1d:1d:
                    ad:7b:16:5a:c6:be:62:89:23:6e:d4:fb:31:c7:ae:
                    4f:8f:07:1c:6b:15:0e:d1:18:24:f4:17:41:54:b0:
                    62:1f:86:31:04:df:fa:c0:88:8a:11:2e:33:67:9d:
                    b7:6f:c3:9f:3a:ef:30:4d:e1:5e:06:96:06:da:64:
                    62:24:91:1c:3d:9c:8b:ce:e3:d8:0a:8d:51:f5:a9:
                    eb:95:03:b4:5e:29:86:a9:0b:d8:a3:1a:47:a8:80:
                    46:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E8:61:F1:9F:CB:9A:BC:E8:AE:EF:27:88:00:3D:4B:9D:92:A5:E9
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e36362e302f32342d3234203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.196.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:94:ae:86:61:58:2a:87:34:5a:29:71:4b:e4:26:c9:20:f7:
         a8:28:aa:6b:b0:82:c8:94:94:d4:6b:d1:86:54:6c:0a:69:17:
         7d:e5:bb:75:f3:03:88:14:43:18:70:da:43:bd:3b:06:90:ec:
         38:a3:e8:fe:19:62:12:cb:59:2d:4a:88:f6:52:b4:5c:b5:60:
         2f:85:e5:da:0c:90:0f:93:4b:6f:2c:02:69:78:d2:6e:9a:ca:
         ea:1a:18:e9:93:24:19:39:ae:7f:e4:52:24:f6:ef:2e:f7:a2:
         be:d8:a9:2b:7e:64:08:6f:9b:ec:29:a8:19:67:7c:08:ee:04:
         4d:82:de:5e:dd:b0:6f:69:b8:a1:03:95:ce:e3:bf:1c:79:c2:
         e9:75:41:7d:7e:55:00:73:64:e8:e9:96:11:fe:c2:b0:9b:73:
         d2:b9:85:03:6a:d3:2a:78:e5:f5:10:7b:b7:72:b5:0e:b9:5e:
         c6:88:62:61:eb:70:33:52:0f:80:97:9d:6d:46:b7:69:cd:22:
         b4:72:c4:63:7f:4f:26:b8:72:43:00:a2:d9:ec:11:dc:f4:5f:
         2e:c1:d6:2b:e9:43:fa:33:2c:e4:06:f7:2b:62:80:98:02:f0:
         77:3f:35:7f:d6:32:74:0f:64:56:c2:c3:36:67:1d:8d:eb:b5:
         df:d7:d0:16
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:25:57 2026 by rpki-client