Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e31392e302f32342d3234203d3e20313339303939.roa
File:                     3132302e3133312e31392e302f32342d3234203d3e20313339303939.roa (raw, json)
Hash identifier:          gFKYwJKOqZKKQPpUOYFHwiPbsrAs7XTTjNMgNcv1148=
Subject key identifier:   FF:29:16:DC:0C:4A:FD:90:C0:6F:7A:61:1A:91:FB:D9:A7:43:C1:1B
Certificate issuer:       /CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Certificate serial:       641671654B79DE4D60AA2F30490D2BC9405034B3
Authority key identifier: 9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e31392e302f32342d3234203d3e20313339303939.roa
Signing time:             Thu 07 May 2026 05:31:24 +0000
ROA not before:           Thu 07 May 2026 05:26:24 +0000
ROA not after:            Thu 06 May 2027 05:31:24 +0000
asID:                     139099
IP address blocks:        120.131.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:17:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:16:71:65:4b:79:de:4d:60:aa:2f:30:49:0d:2b:c9:40:50:34:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
        Validity
            Not Before: May  7 05:26:24 2026 GMT
            Not After : May  6 05:31:24 2027 GMT
        Subject: CN=FF2916DC0C4AFD90C06F7A611A91FBD9A743C11B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f8:7a:aa:80:e6:1d:08:f0:0d:df:d2:5b:1d:
                    96:24:df:8e:20:5a:8f:2e:ec:7f:5d:09:17:c5:de:
                    58:ec:f1:5b:a9:80:09:19:61:07:7e:ae:c3:f7:5a:
                    87:59:dd:b9:74:75:79:72:a2:4b:0e:4d:81:c5:8a:
                    7d:78:80:8c:0b:5e:66:0b:ef:0f:40:23:37:7a:dc:
                    e6:24:2a:d1:ec:f0:67:15:b0:cd:f6:89:ac:cf:19:
                    57:72:18:b3:bf:fd:37:ca:ec:58:30:ec:97:a0:df:
                    5a:02:45:18:df:32:be:b1:ae:f6:59:55:6e:d6:39:
                    a1:6c:bc:64:4e:44:06:d1:93:65:0d:27:82:d1:5d:
                    4b:1e:36:d7:e7:a4:85:15:d6:7a:b2:44:cd:92:b0:
                    c2:6c:4a:fd:58:8d:ec:78:6f:be:0d:e9:b8:1a:0c:
                    19:2c:a9:e4:dd:21:44:9b:27:c4:9d:e9:f8:c9:64:
                    a6:45:26:70:df:cd:5f:6b:c4:a2:36:eb:a2:6a:82:
                    90:5b:e0:99:7a:9a:76:15:bb:d3:c1:a2:83:e1:79:
                    ba:4b:59:f7:3a:7f:f9:03:32:30:13:e9:61:68:6c:
                    67:cd:07:87:00:5a:49:fd:6e:d0:a8:30:5e:1f:df:
                    7e:ea:7e:f0:c3:61:50:a4:6e:b7:6e:50:6f:39:8e:
                    fa:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:29:16:DC:0C:4A:FD:90:C0:6F:7A:61:1A:91:FB:D9:A7:43:C1:1B
            X509v3 Authority Key Identifier:
                keyid:9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e31392e302f32342d3234203d3e20313339303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.131.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:91:cf:29:9a:f1:3a:d4:a6:7d:c2:d0:0d:38:dc:22:a6:af:
         41:f1:4e:e2:e9:88:86:7e:1c:7d:a8:fb:11:db:68:d1:b6:b5:
         28:59:45:6e:01:46:39:81:7f:b7:d3:d5:82:bb:a1:74:8a:8c:
         4e:2b:79:94:4e:da:2b:87:ca:d7:32:19:48:4b:b6:4d:ee:a6:
         bd:c5:b9:cb:74:ed:e1:7b:76:50:f7:d1:93:35:6e:b5:08:99:
         82:0a:2a:01:ed:e3:cb:3d:80:46:ee:fb:17:53:f0:ed:c2:61:
         4c:39:8e:15:ce:48:a5:56:e4:9a:45:57:04:96:2a:5e:1a:e1:
         04:f0:f8:73:9c:21:01:72:2d:e4:57:3b:9c:42:de:ee:c3:a1:
         d8:11:d0:d4:1c:7b:67:46:6e:54:2e:90:ba:83:7e:58:df:0f:
         87:8f:86:6a:e7:7a:07:ab:d3:14:d0:dc:0f:ad:28:d6:5b:65:
         52:8e:09:8e:61:c4:2f:90:65:55:87:00:89:25:67:92:7f:56:
         1b:44:de:04:9d:e1:99:4a:88:89:d8:95:a7:c3:e4:fd:f1:b8:
         d8:ff:c4:f9:ba:dc:17:61:1e:d9:a1:8e:46:ff:a8:fe:ef:4a:
         fc:cb:ba:d5:54:e4:e9:58:62:ae:30:d9:f7:d7:06:d2:6a:1c:
         03:58:71:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:32:09 2026 by rpki-client