Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e32352e302f32342d3234203d3e20313339303939.roa
File:                     3132302e3133312e32352e302f32342d3234203d3e20313339303939.roa (raw, json)
Hash identifier:          jaUN8w1uCkO8pF2L476a3dLINbH+eUPrcR66NG/n09Q=
Subject key identifier:   77:5A:17:B5:B1:1F:E5:A4:4C:BB:32:F9:40:B0:5C:DF:1B:BF:1A:DD
Certificate issuer:       /CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Certificate serial:       60F6673AEEEAD9BA9C5C8086FA30A555EF9A04F7
Authority key identifier: 9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e32352e302f32342d3234203d3e20313339303939.roa
Signing time:             Thu 07 May 2026 05:31:24 +0000
ROA not before:           Thu 07 May 2026 05:26:24 +0000
ROA not after:            Thu 06 May 2027 05:31:24 +0000
asID:                     139099
IP address blocks:        120.131.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:17:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f6:67:3a:ee:ea:d9:ba:9c:5c:80:86:fa:30:a5:55:ef:9a:04:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
        Validity
            Not Before: May  7 05:26:24 2026 GMT
            Not After : May  6 05:31:24 2027 GMT
        Subject: CN=775A17B5B11FE5A44CBB32F940B05CDF1BBF1ADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4c:96:19:8d:48:f5:a9:fb:85:aa:77:6b:40:
                    ff:22:01:28:a5:6a:5f:75:e6:13:99:35:12:91:0e:
                    97:50:68:3a:be:11:7f:15:74:e9:1d:ca:a9:4d:1f:
                    c0:d1:5a:75:fd:f1:79:2b:c3:b3:02:2b:8f:04:52:
                    36:1b:c3:d9:1d:cd:57:f2:be:b6:c1:a1:10:81:89:
                    67:b1:55:21:3d:59:95:51:ac:73:16:ea:ae:aa:73:
                    46:8d:a4:79:27:9b:88:b1:51:4a:03:1e:a0:f5:1d:
                    f6:0b:47:81:a0:26:f6:37:76:e0:29:15:ed:e5:dd:
                    90:52:de:75:55:64:f4:b7:06:f2:ca:d4:1b:0d:16:
                    8d:e8:a4:57:0d:ef:d7:53:b1:94:fa:a6:c3:90:e9:
                    eb:e2:f4:53:a2:47:fb:42:22:8a:74:fc:5c:b0:ce:
                    0a:12:7a:2d:1a:f4:43:ce:8b:65:7f:7a:5d:ac:a4:
                    93:0c:fd:68:8d:09:bc:48:44:18:72:84:3e:53:54:
                    b0:33:4f:16:11:c1:ff:65:b2:2b:e5:de:e0:e3:2f:
                    5e:9e:05:35:78:b3:77:8e:6f:db:4c:37:53:ef:e8:
                    0e:b1:b6:2a:d3:a9:c3:13:00:9c:b9:14:33:34:7d:
                    04:08:95:8e:90:e2:89:21:28:d9:3a:58:87:bc:36:
                    e3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5A:17:B5:B1:1F:E5:A4:4C:BB:32:F9:40:B0:5C:DF:1B:BF:1A:DD
            X509v3 Authority Key Identifier:
                keyid:9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e32352e302f32342d3234203d3e20313339303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.131.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:2a:8e:23:f1:03:41:4d:1e:b1:ea:7b:7d:c6:2e:e3:7c:29:
         64:44:22:7e:d3:8c:39:71:08:6d:d1:02:2f:ca:da:c8:88:49:
         23:3a:df:23:e7:ee:2f:bf:e9:9d:ed:d7:fc:fd:cd:ce:69:ba:
         25:1e:8d:46:dc:c4:c9:bb:10:d7:ac:0a:cb:6b:a6:33:04:e7:
         b6:75:73:b6:8a:2f:8a:a6:85:dc:c1:49:37:81:9d:da:d9:d3:
         25:3d:6b:ae:04:4f:af:7c:df:30:26:a0:69:04:00:66:73:0e:
         25:d5:c3:0d:9c:b1:d9:c6:90:ad:15:86:06:b1:db:65:33:c2:
         8c:86:b3:cb:20:9e:a2:25:ef:cd:27:3c:5e:92:f8:f1:7f:bb:
         fe:18:3e:0b:2c:66:37:dc:90:4e:7f:24:5f:94:70:eb:9c:0d:
         89:da:a9:6c:dc:d0:97:c5:76:f0:79:b5:87:dc:7f:76:cd:37:
         52:ad:2b:2a:b7:34:5e:6c:73:b3:de:97:c0:b8:14:a1:a1:12:
         97:84:91:fc:a3:e6:16:0b:b2:6b:4d:c0:b5:dc:b6:68:1a:45:
         46:19:b3:4c:4a:b5:a5:66:8e:bb:de:2c:4f:9e:57:bf:84:8f:
         72:f9:ad:0d:01:8b:12:c6:98:14:e5:bd:17:d0:22:50:9a:0d:
         5c:6f:19:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:32:19 2026 by rpki-client