Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e31332e302f32342d3234203d3e203338333831.roa
File:                     3132322e3131392e31332e302f32342d3234203d3e203338333831.roa (raw, json)
Hash identifier:          nEgf8GcGhaWXod95fdtf8zZLdzJjND24Myo1B6TuNU8=
Subject key identifier:   B4:2A:5E:91:F8:61:0F:AF:B9:3F:A2:A5:5E:D3:2E:A4:89:1A:C0:AD
Certificate issuer:       /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Certificate serial:       428A48359E74B2808BF38EC3EAB4C346536C3EC1
Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e31332e302f32342d3234203d3e203338333831.roa
Signing time:             Wed 22 Apr 2026 07:54:59 +0000
ROA not before:           Wed 22 Apr 2026 07:49:59 +0000
ROA not after:            Wed 21 Apr 2027 07:54:59 +0000
asID:                     38381
IP address blocks:        122.119.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:8a:48:35:9e:74:b2:80:8b:f3:8e:c3:ea:b4:c3:46:53:6c:3e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
        Validity
            Not Before: Apr 22 07:49:59 2026 GMT
            Not After : Apr 21 07:54:59 2027 GMT
        Subject: CN=B42A5E91F8610FAFB93FA2A55ED32EA4891AC0AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bd:55:e2:0b:65:db:39:67:05:21:05:77:c6:
                    ca:1e:45:a0:8b:96:d4:4a:0f:5e:29:a4:12:65:08:
                    c7:a3:49:65:0e:64:29:94:f9:36:2f:7d:45:c1:fc:
                    11:ba:45:15:d1:9d:21:87:9e:74:0c:7a:a9:ff:07:
                    ed:2f:dc:a1:e0:e0:37:f6:1c:64:6d:15:af:a3:9e:
                    20:c5:1f:5d:98:a1:3c:b9:a0:85:81:5c:fd:9d:6e:
                    11:36:99:92:4a:82:e4:a5:fc:4a:1b:6d:bd:82:a8:
                    ba:65:68:62:71:11:bb:0d:14:d4:68:71:b5:7e:d6:
                    61:57:53:4f:1c:ae:a7:4e:0c:87:a7:c6:c4:1d:60:
                    df:a5:a7:72:0f:7f:20:34:af:df:28:0a:75:56:a7:
                    bd:09:3e:1c:e8:95:5a:3c:59:f6:d8:a7:26:bc:06:
                    f9:da:56:55:db:36:29:f0:00:0f:a5:42:5c:84:d6:
                    88:21:13:84:7c:af:72:57:09:e7:e8:af:b7:bd:7c:
                    85:84:38:52:1b:b2:ed:3d:5b:17:5e:30:f2:24:2c:
                    7e:2e:55:7a:b9:39:34:39:6f:b1:47:1f:65:46:73:
                    ab:72:2f:94:75:07:4c:e5:ba:bb:0a:9f:a5:86:8d:
                    98:c1:3a:c8:ad:9d:be:ca:0d:54:9f:3a:ef:27:bf:
                    2b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2A:5E:91:F8:61:0F:AF:B9:3F:A2:A5:5E:D3:2E:A4:89:1A:C0:AD
            X509v3 Authority Key Identifier:
                keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e31332e302f32342d3234203d3e203338333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.119.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:d1:89:72:b3:1f:a5:61:7d:f2:5d:de:7d:2a:6e:7f:fd:c4:
         66:bd:44:34:d3:39:65:09:79:3e:6d:c1:ed:47:81:10:14:77:
         67:7f:13:70:7d:f7:da:1d:54:6e:87:5e:84:94:2f:92:71:54:
         5f:6d:9c:06:1d:40:77:49:2f:87:df:03:e5:5e:1d:49:9e:84:
         18:ea:97:57:df:e4:55:51:e8:54:89:ac:7f:8d:5e:06:71:8a:
         63:ed:ab:5c:93:f4:d5:2a:7a:83:e4:44:6c:20:d2:8b:fc:96:
         f7:ab:0d:76:36:e2:60:ec:5f:85:1e:00:a5:50:2d:51:88:c1:
         51:17:9a:ac:c9:5c:13:3d:7c:0f:57:54:eb:66:3f:33:1e:24:
         08:3b:90:f9:b6:6f:5b:5b:ac:6a:79:79:dd:bc:6f:26:50:ef:
         b5:99:19:20:c4:ee:f1:30:bd:ef:f8:86:ee:fb:e6:5c:66:c2:
         8e:85:3e:f3:b6:54:af:3b:d4:58:5d:2c:a4:04:68:c4:a5:f3:
         7d:62:4d:75:e2:21:c4:72:6b:14:75:10:96:bb:88:cf:e2:a1:
         1d:09:72:44:fa:e5:ad:0a:74:36:cc:dc:30:1c:dd:51:b4:f5:
         b4:b1:8e:f5:ba:55:4f:34:4b:1d:67:8d:ab:59:ee:53:21:b4:
         9a:8b:57:6a
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUQopINZ50soCL847D6rTDRlNsPsEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExNTk2NkZCNjJBMkJEQjRENjVEOTc0REYwREQ5QjAy
MDgxMUQ4RDAeFw0yNjA0MjIwNzQ5NTlaFw0yNzA0MjEwNzU0NTlaMDMxMTAvBgNV
BAMTKEI0MkE1RTkxRjg2MTBGQUZCOTNGQTJBNTVFRDMyRUE0ODkxQUMwQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEvVXiC2XbOWcFIQV3xsoeRaCL
ltRKD14ppBJlCMejSWUOZCmU+TYvfUXB/BG6RRXRnSGHnnQMeqn/B+0v3KHg4Df2
HGRtFa+jniDFH12YoTy5oIWBXP2dbhE2mZJKguSl/Eobbb2CqLplaGJxEbsNFNRo
cbV+1mFXU08crqdODIenxsQdYN+lp3IPfyA0r98oCnVWp70JPhzolVo8WfbYpya8
BvnaVlXbNinwAA+lQlyE1oghE4R8r3JXCefor7e9fIWEOFIbsu09WxdeMPIkLH4u
VXq5OTQ5b7FHH2VGc6tyL5R1B0zlursKn6WGjZjBOsitnb7KDVSfOu8nvys/AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUtCpekfhhD6+5P6KlXtMupIkawK0wHwYDVR0j
BBgwFoAUURWWb7YqK9tNZdl03w3ZsCCBHY0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTkwMzg0MTMyMjI3MDcyMS8wLzUxMTU5NjZGQjYyQTJCREI0RDY1RDk3NERGMERE
OUIwMjA4MTFEOEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTExNTk2NkZCNjJBMkJEQjRENjVEOTc0REYwREQ5QjAyMDgxMUQ4RC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NTkwMzg0MTMyMjI3MDcyMS8wLzMxMzIzMjJlMzEz
MTM5MmUzMTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzODMzMzgzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAHp3DTANBgkqhkiG9w0BAQsFAAOCAQEArdGJcrMfpWF98l3efSpuf/3E
Zr1ENNM5ZQl5Pm3B7UeBEBR3Z38TcH332h1UbodehJQvknFUX22cBh1Ad0kvh98D
5V4dSZ6EGOqXV9/kVVHoVImsf41eBnGKY+2rXJP01Sp6g+REbCDSi/yW96sNdjbi
YOxfhR4ApVAtUYjBURearMlcEz18D1dU62Y/Mx4kCDuQ+bZvW1usanl53bxvJlDv
tZkZIMTu8TC97/iG7vvmXGbCjoU+87ZUrzvUWF0spARoxKXzfWJNdeIhxHJrFHUQ
lruIz+KhHQlyRPrlrQp0NszcMBzdUbT1tLGO9bpVTzRLHWeNq1nuUyG0motXag==
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:24 2026 by rpki-client