Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3132322e302f32342d3234203d3e203338333831.roa
File:                     3132322e3131392e3132322e302f32342d3234203d3e203338333831.roa (raw, json)
Hash identifier:          RdefovAvS01S7LEVio77zimBdOmmPsXs2JAQPRDqW94=
Subject key identifier:   E1:07:78:02:12:39:86:D4:D6:F0:84:FB:54:F5:FF:08:98:70:95:86
Certificate issuer:       /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Certificate serial:       1FFC34647B20C3C6E870A163D9B193BDB6529D86
Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3132322e302f32342d3234203d3e203338333831.roa
Signing time:             Wed 22 Apr 2026 07:54:59 +0000
ROA not before:           Wed 22 Apr 2026 07:49:59 +0000
ROA not after:            Wed 21 Apr 2027 07:54:59 +0000
asID:                     38381
IP address blocks:        122.119.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:fc:34:64:7b:20:c3:c6:e8:70:a1:63:d9:b1:93:bd:b6:52:9d:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
        Validity
            Not Before: Apr 22 07:49:59 2026 GMT
            Not After : Apr 21 07:54:59 2027 GMT
        Subject: CN=E1077802123986D4D6F084FB54F5FF0898709586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6d:0a:1d:f1:24:15:18:28:db:ce:a6:fa:99:
                    79:82:22:be:c2:1e:c0:94:ec:ce:ee:a4:b8:aa:ea:
                    c4:c5:47:6b:94:3c:e4:d3:50:99:c5:81:86:a1:49:
                    dc:61:59:07:29:70:e7:e1:f5:38:df:e8:59:2d:ed:
                    53:a7:56:93:05:c2:df:e4:77:10:f4:09:91:8f:6a:
                    d7:79:21:0f:3b:4e:4b:a4:f4:bb:98:a2:c5:cd:ab:
                    2b:cc:31:2d:62:0a:ad:e1:13:32:f6:b0:45:c0:35:
                    08:16:56:a6:cd:2e:6d:18:9a:69:81:3c:27:47:11:
                    74:5f:eb:cd:6f:e0:06:cc:f4:c5:ff:f9:aa:02:ed:
                    b0:eb:f5:3e:bd:14:26:f9:84:3f:91:a3:6d:d7:c0:
                    06:6b:fe:b1:1f:57:70:9d:17:e3:c8:e6:66:fc:f2:
                    44:57:40:9b:f8:36:50:2c:2d:d9:e3:1f:ea:64:ee:
                    2d:7e:fb:00:7d:01:a8:c2:4d:71:6c:97:11:38:d3:
                    03:9c:20:1f:6f:97:f4:e9:37:65:37:54:eb:96:30:
                    74:52:7a:1d:ac:f2:7d:8a:8c:1b:bc:b9:46:64:2a:
                    64:07:d3:ae:94:9b:22:a1:ae:b2:16:04:bd:9d:c3:
                    c1:ec:1b:3a:f4:03:83:06:02:ff:70:08:8f:62:62:
                    48:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:07:78:02:12:39:86:D4:D6:F0:84:FB:54:F5:FF:08:98:70:95:86
            X509v3 Authority Key Identifier:
                keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3132322e302f32342d3234203d3e203338333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.119.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:c0:e2:c3:ab:cc:74:40:d5:66:f1:26:bc:d4:a2:8b:dc:1f:
         80:c0:07:9f:bf:32:fa:4f:41:f8:e7:c1:9a:e5:98:9c:fc:be:
         55:83:b8:6d:df:63:48:8f:dd:6f:20:ed:16:ef:ef:39:34:a7:
         db:c8:de:43:fe:30:71:55:87:7e:31:58:75:e0:41:11:df:62:
         d2:69:89:28:c3:5c:ba:23:74:53:8c:fc:c5:78:27:d5:fc:ad:
         80:c6:c2:20:be:ce:bc:64:e8:39:64:4b:8f:72:43:ec:04:d9:
         23:0c:e5:b7:3f:91:b7:b3:65:0d:7a:48:4e:15:ce:9e:5a:de:
         be:0d:ca:83:3e:0b:c8:44:36:f8:19:9c:c6:5a:a7:e6:4b:bd:
         23:47:9a:e1:78:66:8a:b3:58:2e:29:96:df:8f:ff:e9:00:3c:
         63:4b:2d:4b:6f:4f:8e:f3:95:41:43:5d:92:e8:83:37:50:c5:
         b6:78:97:e9:db:a2:63:de:16:7d:5d:2a:28:c4:9a:89:84:fc:
         5e:ee:52:b2:9b:ab:0d:fd:1c:ed:e4:59:1f:1f:9a:ea:b1:cf:
         a8:53:7b:72:e6:9b:14:d8:99:dd:16:45:85:71:e2:81:4f:70:
         70:70:0f:4f:23:55:f8:62:a7:d0:a1:50:d6:e4:5c:34:c1:2d:
         43:6e:b8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:47 2026 by rpki-client