Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3131302e302f32342d3234203d3e203338333831.roa
File:                     3132322e3131392e3131302e302f32342d3234203d3e203338333831.roa (raw, json)
Hash identifier:          UyCSaZPcUCxipmIRh5u7i5Qm+yV065Uj+whd7TvR07o=
Subject key identifier:   15:29:6B:78:9A:BA:F7:54:E2:4F:E4:D6:2A:5F:27:3A:BA:DC:2E:98
Certificate issuer:       /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Certificate serial:       02680E311D004C5F6175DA8C5DDCCF3E8E8AD51F
Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3131302e302f32342d3234203d3e203338333831.roa
Signing time:             Wed 22 Apr 2026 07:55:00 +0000
ROA not before:           Wed 22 Apr 2026 07:50:00 +0000
ROA not after:            Wed 21 Apr 2027 07:55:00 +0000
asID:                     38381
IP address blocks:        122.119.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:68:0e:31:1d:00:4c:5f:61:75:da:8c:5d:dc:cf:3e:8e:8a:d5:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
        Validity
            Not Before: Apr 22 07:50:00 2026 GMT
            Not After : Apr 21 07:55:00 2027 GMT
        Subject: CN=15296B789ABAF754E24FE4D62A5F273ABADC2E98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7b:65:ce:a6:04:6e:90:cf:47:32:dc:e8:27:
                    43:b3:57:7e:0a:c6:e3:9c:34:c2:21:55:6a:db:a8:
                    58:c2:79:25:34:fb:e9:09:72:31:4b:f2:03:b2:5d:
                    3f:3d:a6:53:ae:cb:35:1b:80:ff:0c:b9:31:4d:d8:
                    de:f5:97:89:b3:2c:9e:69:76:18:f0:22:dd:53:cd:
                    55:98:63:a9:b8:14:5f:cd:66:6d:36:9f:ad:ef:32:
                    c7:b8:4d:ef:ac:44:2a:39:cd:f5:7f:ce:4e:3d:bb:
                    04:cc:ed:3d:11:01:b4:95:4a:aa:6a:76:a1:d2:c0:
                    fb:7a:da:1a:63:44:36:ec:8c:26:fa:1e:e7:6d:96:
                    13:e7:90:db:52:ba:85:cb:39:6c:92:0f:92:2d:82:
                    ba:01:a7:55:14:32:a6:81:07:42:13:fb:91:26:dd:
                    d9:ad:2b:3c:b4:40:06:e4:3d:c9:6b:7d:58:0a:f3:
                    87:a8:8e:da:5d:4e:f9:f4:8c:9d:92:08:12:c1:b8:
                    dd:48:58:7d:ba:f3:2e:54:e8:7c:a4:49:48:20:03:
                    dc:b7:df:85:2a:a8:ef:91:09:1c:7a:6d:e9:14:4b:
                    81:54:38:14:34:46:e4:47:c3:e5:22:e8:3f:e7:8e:
                    3d:5f:d8:83:06:ad:66:e7:b8:01:7c:f2:17:f3:23:
                    76:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:29:6B:78:9A:BA:F7:54:E2:4F:E4:D6:2A:5F:27:3A:BA:DC:2E:98
            X509v3 Authority Key Identifier:
                keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3131302e302f32342d3234203d3e203338333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.119.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:d3:29:69:c3:b1:2f:9a:7d:1e:49:7c:9e:1f:26:46:6f:5b:
         d6:db:b8:f1:0a:ee:aa:d2:ee:81:dd:00:a2:fe:b7:a5:bd:15:
         df:96:8c:c7:0a:b0:43:85:34:f6:8c:85:74:d8:f9:25:e4:2f:
         6d:85:0b:f0:f6:4a:d3:d6:af:7f:09:24:7c:ef:9d:c1:15:4d:
         d4:07:71:f0:4c:d7:65:89:8a:da:f9:73:98:1c:6b:14:63:30:
         42:30:d1:d6:ee:ed:4e:5b:83:5c:20:4e:bf:2a:36:de:f2:97:
         95:73:5e:63:15:71:c6:a6:01:53:58:02:f8:b2:7e:34:34:fb:
         54:e9:2a:ec:bb:08:f4:5b:89:51:b9:03:12:ae:00:b8:f4:96:
         25:65:cc:17:d4:9b:89:e1:f4:ac:fc:f2:a9:53:8f:26:fe:ec:
         6a:3d:ad:c4:82:00:ae:9f:5d:8b:b4:d2:ca:49:5d:92:16:69:
         e3:ab:92:3e:07:8b:ab:d6:1e:0e:c6:d0:9f:3e:8a:b8:ad:09:
         20:1d:76:b6:17:58:f2:30:da:74:85:dc:eb:1d:fb:57:9c:6d:
         78:86:82:c5:f9:71:b3:a2:ed:8e:26:9c:9a:73:09:4e:2b:60:
         78:d9:2f:c7:9b:24:65:ff:5f:9e:7b:cb:9b:c5:3e:af:f3:55:
         ba:51:14:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:35 2026 by rpki-client