Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3233322e302f32332d3233203d3e203338333831.roa
File:                     3132322e3131392e3233322e302f32332d3233203d3e203338333831.roa (raw, json)
Hash identifier:          P7pCoOB8iaimfeH1P7+AUpcLI+1RvDBkLNDVjOwAhoY=
Subject key identifier:   C1:3B:85:FD:8C:E0:2C:B5:BC:10:27:98:00:79:AF:F8:81:E1:A4:5F
Certificate issuer:       /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Certificate serial:       24368E15E41C87F2AAF90D30E35F77EF296B7772
Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3233322e302f32332d3233203d3e203338333831.roa
Signing time:             Wed 22 Apr 2026 07:57:29 +0000
ROA not before:           Wed 22 Apr 2026 07:52:29 +0000
ROA not after:            Wed 21 Apr 2027 07:57:29 +0000
asID:                     38381
IP address blocks:        122.119.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:36:8e:15:e4:1c:87:f2:aa:f9:0d:30:e3:5f:77:ef:29:6b:77:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
        Validity
            Not Before: Apr 22 07:52:29 2026 GMT
            Not After : Apr 21 07:57:29 2027 GMT
        Subject: CN=C13B85FD8CE02CB5BC1027980079AFF881E1A45F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1c:18:51:1c:a4:fa:7c:7d:dc:a9:4f:cc:77:
                    cb:12:3d:6f:7c:cb:7c:47:cb:ae:7e:00:d0:e3:b2:
                    69:7e:2d:4a:0b:a1:32:d0:18:ca:c3:23:19:8e:ce:
                    a7:08:37:69:41:bd:ab:c0:80:3c:bd:34:63:5c:63:
                    ed:40:43:e0:55:d7:e3:10:8c:d7:30:57:fd:dd:26:
                    f5:04:f5:d4:bf:1d:27:ad:f9:07:46:f2:37:3a:f8:
                    ca:42:bc:66:e3:71:66:a9:8b:fe:46:83:07:8d:bf:
                    26:0d:7e:49:ee:41:70:e1:f3:46:66:01:7e:cf:76:
                    55:3b:ea:fb:56:2b:46:fb:98:ee:63:17:8f:ba:5d:
                    fc:b8:30:3f:b1:c7:48:ff:ca:1e:75:01:ce:93:a0:
                    bd:ae:f9:14:20:f2:45:9f:90:83:81:6e:d7:f3:cc:
                    83:7d:e8:a2:63:15:53:37:90:49:3f:86:06:d1:25:
                    33:e7:03:94:f2:b0:dd:41:3f:3f:00:51:94:7d:e9:
                    42:3b:f9:cd:d0:b9:96:07:bf:7f:86:28:de:78:d0:
                    68:87:ae:a4:4e:5b:1f:96:bc:48:67:53:4b:f1:4b:
                    9e:f0:e6:55:fa:c1:45:bc:e6:7d:5f:28:c0:48:b0:
                    40:97:6f:28:3e:de:67:10:af:97:7b:14:3c:20:f5:
                    77:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3B:85:FD:8C:E0:2C:B5:BC:10:27:98:00:79:AF:F8:81:E1:A4:5F
            X509v3 Authority Key Identifier:
                keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3233322e302f32332d3233203d3e203338333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.119.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:d2:6f:67:51:35:d3:eb:e0:a8:1d:6d:43:2a:c9:b0:b8:80:
         46:91:72:f0:34:a1:e3:6f:24:31:a5:bf:47:ff:cc:2a:07:51:
         b1:fd:5f:c8:37:21:d7:80:e3:cb:9a:95:5d:77:00:02:c2:cc:
         32:df:33:42:d6:92:cb:41:ee:b4:20:2f:b6:83:95:a6:ec:b9:
         10:80:c9:6b:55:55:b7:19:19:c2:70:f1:f7:d0:17:9d:aa:f5:
         d6:9f:29:99:0a:3d:05:06:ae:f6:dd:66:7f:fd:7d:c8:bb:11:
         c8:eb:81:c1:46:5a:13:fb:b0:7f:f7:d3:11:fb:15:da:12:d1:
         28:35:1a:0d:5f:10:18:42:2a:81:7d:3e:12:db:75:3a:30:22:
         4e:8a:d1:0b:ad:05:07:86:36:4b:f6:94:37:d0:e5:23:fa:06:
         8f:7b:9f:08:9a:b1:12:26:7b:25:f0:91:64:5b:26:27:2c:bc:
         2b:c2:e0:13:c8:ee:a2:f9:4e:36:98:cc:0b:79:0b:90:d7:c2:
         ce:fc:c2:1d:ec:38:cf:fe:75:ff:b1:4e:38:65:44:6b:11:06:
         33:81:e6:17:2b:13:0d:75:24:47:cb:db:89:8f:12:e1:78:2c:
         5f:4c:ef:1b:01:1d:6f:ba:09:14:18:24:e7:a1:9d:ac:38:9c:
         a3:10:06:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:27 2026 by rpki-client