Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e31382e302f32342d3234203d3e20313339303939.roa
File:                     3132302e3133312e31382e302f32342d3234203d3e20313339303939.roa (raw, json)
Hash identifier:          ZhL9/4i3ODs6aX7o53WQ/DaiGBL27xevMOs/uL/pP1A=
Subject key identifier:   0F:C6:C3:70:29:33:F1:B8:1D:A5:2D:06:FB:F1:F3:36:DE:55:54:7F
Certificate issuer:       /CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Certificate serial:       293BC88A370DCD00D17CF1ED7FB1F52D5EA94A2C
Authority key identifier: 9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e31382e302f32342d3234203d3e20313339303939.roa
Signing time:             Thu 07 May 2026 05:31:23 +0000
ROA not before:           Thu 07 May 2026 05:26:23 +0000
ROA not after:            Thu 06 May 2027 05:31:23 +0000
asID:                     139099
IP address blocks:        120.131.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:17:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:3b:c8:8a:37:0d:cd:00:d1:7c:f1:ed:7f:b1:f5:2d:5e:a9:4a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
        Validity
            Not Before: May  7 05:26:23 2026 GMT
            Not After : May  6 05:31:23 2027 GMT
        Subject: CN=0FC6C3702933F1B81DA52D06FBF1F336DE55547F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:10:22:6c:ed:58:92:56:e4:f8:ae:8a:f2:79:
                    7e:77:b8:1e:94:fe:bb:30:dc:a0:78:3d:a5:af:24:
                    f7:d8:93:5c:5b:80:40:a9:24:eb:24:4c:d4:73:43:
                    ad:e2:c1:f8:b2:d7:6b:62:cf:8d:62:40:8b:1b:83:
                    26:4c:e4:c5:a8:56:97:4a:e8:31:66:91:b9:d9:3f:
                    94:13:60:36:5c:69:bf:0e:11:0a:7b:7c:82:fa:21:
                    04:60:b0:6b:d7:f8:7d:ce:bc:7b:8d:bb:e2:63:af:
                    1e:e6:bd:6d:fe:23:6b:1b:05:51:15:cb:49:1a:bb:
                    d8:d3:bf:2c:b2:0f:1d:fe:1a:b9:9b:89:5a:a4:40:
                    92:84:d5:4a:47:2b:27:06:73:ff:b9:30:5c:bc:82:
                    18:fd:48:60:e5:93:21:33:42:26:76:38:94:5e:ca:
                    2a:f8:95:26:2e:1f:d8:dd:00:e9:f6:e2:a4:af:a0:
                    da:88:7f:3f:53:11:da:31:04:f0:1f:5b:a9:07:43:
                    11:32:69:df:65:5d:f5:ed:8d:fc:b7:6a:05:3c:37:
                    dc:fc:cf:91:05:e2:19:84:be:2a:dd:54:f5:8a:9a:
                    95:d5:f3:37:a1:a3:4d:58:10:0e:a5:ae:4b:7e:7e:
                    2a:00:cf:45:32:86:6d:97:eb:d1:c4:b7:04:93:2e:
                    a5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C6:C3:70:29:33:F1:B8:1D:A5:2D:06:FB:F1:F3:36:DE:55:54:7F
            X509v3 Authority Key Identifier:
                keyid:9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e31382e302f32342d3234203d3e20313339303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.131.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:b0:ae:62:28:56:9c:32:03:1c:22:e2:31:29:9f:14:ae:1e:
         57:19:a8:f1:2b:57:4f:ee:5e:ff:08:42:f8:47:13:36:5c:ef:
         bd:f5:1c:60:81:2f:81:d6:4b:c0:55:bd:f8:c6:0a:73:25:61:
         bc:a3:32:82:a7:64:58:56:3f:7d:dd:a2:c4:21:10:f1:db:20:
         dc:0e:c7:53:23:d0:cc:38:6f:fa:1a:78:21:02:a3:1d:73:38:
         9b:cc:72:37:1d:ce:d1:b0:e8:04:ba:c7:15:22:94:ef:71:c9:
         c3:dd:2a:2c:19:75:9a:36:00:0d:65:fe:03:0f:f6:6d:18:fe:
         14:42:23:f9:c0:78:e8:02:27:6e:27:43:9c:0a:4a:50:13:ef:
         1e:5c:a0:ef:55:7e:75:ff:64:14:77:c3:11:fe:df:03:a3:b1:
         55:b0:49:22:c3:1c:00:6f:a8:ee:28:9a:43:74:0e:f7:9f:bb:
         8f:b1:65:0e:15:8a:5d:e8:49:8a:af:68:39:e0:d0:c2:f8:9d:
         8e:40:23:de:02:89:3e:18:e6:e9:4d:52:ca:65:52:ed:47:f8:
         79:78:d5:15:54:6c:e2:8f:f0:53:5c:80:f8:d2:bd:47:ae:f5:
         ac:89:7a:fe:b4:0f:0c:c8:fe:2b:f4:e3:95:b1:a5:a6:51:93:
         3f:eb:b6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:32:08 2026 by rpki-client