Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3131322e302f32342d3234203d3e203338333831.roa
File:                     3132322e3131392e3131322e302f32342d3234203d3e203338333831.roa (raw, json)
Hash identifier:          xGwID/Qt4vXrkjAL94dRHrvkluCjapY/LmZBSWSHdE0=
Subject key identifier:   EF:12:A8:C8:A7:1D:EB:50:A0:16:7E:33:E6:9F:51:46:48:CF:CF:44
Certificate issuer:       /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Certificate serial:       52A381BB6D761237679BA7798BEAD0813BE8919D
Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3131322e302f32342d3234203d3e203338333831.roa
Signing time:             Wed 22 Apr 2026 07:54:59 +0000
ROA not before:           Wed 22 Apr 2026 07:49:59 +0000
ROA not after:            Wed 21 Apr 2027 07:54:59 +0000
asID:                     38381
IP address blocks:        122.119.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a3:81:bb:6d:76:12:37:67:9b:a7:79:8b:ea:d0:81:3b:e8:91:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
        Validity
            Not Before: Apr 22 07:49:59 2026 GMT
            Not After : Apr 21 07:54:59 2027 GMT
        Subject: CN=EF12A8C8A71DEB50A0167E33E69F514648CFCF44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:eb:9d:bc:1c:7a:c3:a5:c6:d0:f2:e4:87:ea:
                    14:00:77:9a:bb:23:4d:08:47:b4:fc:cb:b8:bb:55:
                    ef:84:0d:ee:88:dd:f6:da:97:51:ac:35:f4:3a:f8:
                    ea:3a:72:48:a2:dc:7f:c8:cd:b1:a4:e5:32:62:b0:
                    2a:59:f3:c5:04:89:84:94:70:42:c3:70:10:9d:0b:
                    ff:e6:1e:9f:ab:00:cd:5f:79:a9:21:ba:1a:1b:18:
                    1d:b7:4c:7a:82:94:8f:4f:ce:b9:af:d2:5e:eb:d6:
                    f2:7a:9e:a9:63:2f:5a:5f:dd:c6:e5:09:47:4b:ba:
                    5d:0d:6b:81:10:88:06:e7:c7:ef:ee:16:09:61:bb:
                    56:9a:55:7c:ef:df:7f:4e:70:95:60:fc:f0:13:94:
                    9f:c1:2e:a4:d7:bd:5e:e2:37:79:b4:71:08:ec:98:
                    6c:0d:96:39:23:03:c7:eb:e5:be:76:ec:5b:28:71:
                    cf:87:9a:35:2f:9b:bd:54:2d:ea:db:2b:b8:0a:c6:
                    85:1c:ec:d8:28:cd:d7:e2:f1:64:aa:97:54:37:85:
                    19:31:d5:8f:97:6e:77:d9:be:08:e4:0e:20:0b:dd:
                    c4:0a:5e:ce:cf:59:20:67:00:39:b2:11:ab:f9:4d:
                    1d:2a:55:3f:94:ba:1a:1b:24:6f:b4:68:2f:d1:ce:
                    96:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:12:A8:C8:A7:1D:EB:50:A0:16:7E:33:E6:9F:51:46:48:CF:CF:44
            X509v3 Authority Key Identifier:
                keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3131322e302f32342d3234203d3e203338333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.119.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:91:e8:31:05:02:9b:36:8b:87:16:72:bd:87:69:73:40:f8:
         1c:cb:65:3f:e2:61:e4:67:d6:ac:3a:34:0c:7a:05:95:d3:38:
         0b:21:0b:c2:d1:e3:0a:14:22:79:2c:76:1b:f9:53:5d:75:ee:
         59:62:59:b7:ff:c6:4f:1e:de:db:10:e9:7a:e3:6e:29:c5:11:
         73:ba:ea:86:98:2e:62:41:bd:de:3e:d3:32:e3:54:38:9a:24:
         cd:0e:02:6b:72:63:3a:fe:db:03:4d:86:8a:00:ed:83:97:ba:
         ee:e2:91:82:0d:d3:87:e6:30:6f:b8:cd:4e:a9:ce:b2:0f:90:
         41:dc:9c:35:98:d2:66:8e:a9:40:54:fa:cb:56:be:dc:6f:e9:
         40:ff:e8:d3:4e:d9:5f:1e:60:4c:48:98:3c:1a:24:38:02:20:
         77:d8:f7:1a:9a:05:68:e6:47:8d:15:c3:b0:15:7c:2f:02:39:
         9a:0c:c0:16:6d:57:c8:b7:f7:d3:2c:c4:f0:83:23:c6:01:91:
         f8:a2:6a:ef:0b:1c:39:f2:21:40:5b:ca:e7:ac:93:c6:bd:86:
         eb:97:aa:86:be:7f:3b:ba:e4:f9:bc:0b:27:d1:b5:bc:c8:0a:
         8c:b9:a2:62:10:e1:7b:67:77:29:c1:59:e8:e0:60:9e:4e:44:
         8b:93:6c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:46 2026 by rpki-client