Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e32322e302f32342d3234203d3e203338333831.roa
File:                     3132322e3131392e32322e302f32342d3234203d3e203338333831.roa (raw, json)
Hash identifier:          6WNfl2tkARi4XWsENWARVsOPuBilS3mZ8xEAn5D2+fY=
Subject key identifier:   79:2C:DD:71:A8:41:D1:FF:42:CC:AF:12:B6:AB:15:C6:B6:61:95:96
Certificate issuer:       /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Certificate serial:       0AAA0145AAE021F6BB05EC46D47F85D33D343F0A
Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e32322e302f32342d3234203d3e203338333831.roa
Signing time:             Wed 22 Apr 2026 07:57:30 +0000
ROA not before:           Wed 22 Apr 2026 07:52:30 +0000
ROA not after:            Wed 21 Apr 2027 07:57:30 +0000
asID:                     38381
IP address blocks:        122.119.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:aa:01:45:aa:e0:21:f6:bb:05:ec:46:d4:7f:85:d3:3d:34:3f:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
        Validity
            Not Before: Apr 22 07:52:30 2026 GMT
            Not After : Apr 21 07:57:30 2027 GMT
        Subject: CN=792CDD71A841D1FF42CCAF12B6AB15C6B6619596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:5b:e9:16:8f:a8:54:31:67:e6:2b:8f:22:
                    4a:be:3a:f5:aa:46:69:42:3d:34:b8:3f:8b:5a:61:
                    c8:9a:0d:d8:94:8d:40:05:89:73:c0:10:d4:e0:1f:
                    c5:12:7f:b1:a6:5e:f2:cb:6c:17:ef:47:d1:9d:f3:
                    4d:36:09:d8:95:3f:88:a6:a2:d1:96:89:7a:17:c6:
                    53:07:ab:e4:85:7f:e7:a2:4a:3d:20:c9:6d:74:49:
                    b4:4b:ff:b8:54:35:6a:40:3d:95:c5:d4:18:6c:5d:
                    d5:64:af:69:d1:5a:01:e3:b1:44:24:a3:e9:2e:4a:
                    7a:0f:f5:dd:6d:3f:86:0c:c3:d2:19:c0:3f:f4:29:
                    38:a1:63:01:23:fb:9e:20:e9:49:e2:02:4e:61:95:
                    10:51:d2:78:e9:25:67:d8:c3:74:65:d8:0b:d3:23:
                    0e:c7:d8:d0:90:55:ff:68:25:ed:70:ee:61:17:6b:
                    55:d9:76:fc:b0:56:5d:fd:25:21:6c:8a:72:22:d0:
                    89:34:79:bf:09:23:b6:82:6a:e4:a0:b7:95:aa:6d:
                    29:f7:ea:18:eb:45:32:1f:ae:43:6d:7c:20:20:25:
                    63:60:92:49:cf:e9:57:7b:57:19:34:b8:f4:c9:ff:
                    13:c9:cf:d7:70:53:3c:1c:69:7a:4a:b7:d6:bd:af:
                    e7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2C:DD:71:A8:41:D1:FF:42:CC:AF:12:B6:AB:15:C6:B6:61:95:96
            X509v3 Authority Key Identifier:
                keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e32322e302f32342d3234203d3e203338333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.119.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:db:bf:4c:56:00:46:9d:e4:61:02:30:0d:68:21:ff:86:1a:
         54:9f:a3:6e:6d:75:a8:bb:63:8c:6d:0e:56:8f:e0:23:e0:ca:
         79:0e:12:cb:d5:0b:58:27:c6:89:b1:8b:e2:bc:ad:fa:00:3c:
         7b:9a:09:8b:c9:57:f0:54:f6:fd:4c:fe:0a:1b:9e:9f:41:b9:
         67:8c:c8:79:04:c1:11:e3:73:58:48:5b:a0:bd:9a:2f:9e:9a:
         43:52:1f:2a:eb:5b:25:10:bc:6c:40:67:47:5e:b2:bb:ea:cc:
         a1:af:bd:71:b7:54:53:b6:a0:f2:05:f0:44:50:29:65:49:76:
         01:6f:b0:74:2f:39:90:b4:b3:d9:48:84:d2:ae:14:c0:32:7e:
         83:f6:6c:cf:92:2f:71:8e:d9:2d:bd:d5:70:8a:56:34:62:e5:
         ef:a9:18:60:32:63:48:5e:89:73:39:06:58:bf:ed:54:48:ae:
         79:12:d0:92:0d:61:64:e6:19:e0:8e:cf:2c:04:05:84:b6:54:
         e3:d2:04:6d:48:4a:30:5c:f9:96:7e:22:ec:8e:8d:2e:13:da:
         1a:73:70:20:45:9c:4d:75:39:d6:e3:50:58:a2:58:07:23:2a:
         fe:9a:e9:11:65:c7:7c:63:4e:28:48:96:d4:00:09:74:c4:f1:
         14:84:9a:68
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:35 2026 by rpki-client