Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e35302e302f32342d3234203d3e203338333831.roa
File:                     3132322e3131392e35302e302f32342d3234203d3e203338333831.roa (raw, json)
Hash identifier:          I3TM+BwNHtqjJl/0ZjEe46ZVuQoCMNsOx+nGyirWyNE=
Subject key identifier:   7C:CE:3F:3E:8B:73:8A:00:62:E8:86:D7:D5:42:F9:49:7E:FE:D0:48
Certificate issuer:       /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Certificate serial:       4E179A91F09A9C0428AF7D59A46ACF752A4D7D59
Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e35302e302f32342d3234203d3e203338333831.roa
Signing time:             Wed 22 Apr 2026 07:57:30 +0000
ROA not before:           Wed 22 Apr 2026 07:52:30 +0000
ROA not after:            Wed 21 Apr 2027 07:57:30 +0000
asID:                     38381
IP address blocks:        122.119.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:17:9a:91:f0:9a:9c:04:28:af:7d:59:a4:6a:cf:75:2a:4d:7d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
        Validity
            Not Before: Apr 22 07:52:30 2026 GMT
            Not After : Apr 21 07:57:30 2027 GMT
        Subject: CN=7CCE3F3E8B738A0062E886D7D542F9497EFED048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:10:4d:9b:9d:46:1b:a5:13:3d:bf:5f:8a:7d:
                    82:bf:ee:60:3a:a1:5a:e6:56:72:b5:52:e9:11:12:
                    56:76:db:fd:e2:de:c6:71:6b:e8:8b:89:1f:18:7d:
                    8a:f1:eb:34:0e:1f:7f:67:5d:65:0f:a8:04:0e:eb:
                    6c:e0:b1:70:f7:e6:a4:98:46:8d:5a:3f:cc:28:ee:
                    67:fb:ed:4e:ac:e6:f8:9d:8c:75:ca:f8:6a:b1:19:
                    98:f0:2b:45:9d:3d:0e:42:1e:fc:a5:a9:2d:54:3f:
                    c6:fb:8c:44:0c:34:2d:3b:11:9c:8b:ce:4a:79:b3:
                    b7:9e:98:b9:f8:29:bd:c8:fe:8f:9a:2e:04:ac:e7:
                    26:f6:95:99:ac:ac:16:a4:ec:2f:cd:01:35:a9:14:
                    43:6d:6c:c3:bf:c6:cd:d6:79:98:78:91:07:e6:7b:
                    1b:b6:bb:c4:fc:2c:10:09:33:2f:18:38:e6:2c:de:
                    14:7a:16:7e:05:4b:e7:11:64:ad:32:2e:d7:c7:26:
                    59:60:14:9e:a6:05:78:37:d3:c9:67:44:04:df:86:
                    e1:a1:0d:d4:87:ce:d1:e0:8d:b5:23:e6:cc:01:0e:
                    16:e5:2a:ab:a0:42:f1:cc:40:a4:3d:20:90:b7:16:
                    2c:73:24:8d:e5:79:46:d5:36:35:1f:36:45:37:0b:
                    dc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CE:3F:3E:8B:73:8A:00:62:E8:86:D7:D5:42:F9:49:7E:FE:D0:48
            X509v3 Authority Key Identifier:
                keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e35302e302f32342d3234203d3e203338333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.119.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:05:05:4e:59:a1:13:8e:16:7a:40:b6:96:c7:db:c6:1f:c9:
         21:c2:f8:3d:c1:15:73:f4:24:61:72:b0:f4:61:9a:5f:b7:db:
         fb:bb:09:e9:7d:42:23:1a:e6:f4:05:1a:f9:f5:98:b8:dc:11:
         c5:3e:d8:c0:78:ca:73:74:0f:19:74:3f:2b:9f:bb:ad:ad:82:
         d0:6d:83:4a:c3:a2:55:37:f5:eb:d8:c6:ae:15:1c:a0:b3:c4:
         b3:4e:70:47:d8:aa:04:a8:8a:1c:2c:a5:89:fe:a6:7b:49:90:
         2c:d8:e9:87:d2:4c:bd:3e:fc:7c:69:eb:6a:73:81:d2:42:60:
         d1:d0:fe:f4:5a:30:b3:44:91:2b:cd:c4:5c:b9:06:1a:1d:f0:
         7e:97:9d:28:47:66:d2:d4:42:1b:ed:7d:49:c0:25:4d:d4:39:
         c2:aa:56:6a:6e:90:32:40:a6:a7:aa:54:84:bb:35:0c:72:ed:
         ce:2e:fe:b6:ba:c8:a9:9d:26:66:94:df:7f:b7:c9:9b:e6:e7:
         1b:ea:12:c5:c3:2e:5e:fd:44:87:85:26:58:a2:a8:70:fc:d9:
         e4:bd:96:da:1a:6a:00:b2:29:68:ef:0e:18:72:1c:62:44:26:
         79:00:bf:f9:d8:a7:fd:fe:3c:87:ca:ac:69:47:70:0e:76:34:
         70:3b:26:7d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:24 2026 by rpki-client