Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e32362e302f32342d3234203d3e20313339303939.roa
File:                     3132302e3133312e32362e302f32342d3234203d3e20313339303939.roa (raw, json)
Hash identifier:          wH8z8CKW7uEoQPjfHSlwgXnhsDPuyQf70qPeV9PeGM4=
Subject key identifier:   49:24:85:FF:3F:31:80:3E:C8:4C:CD:FA:95:11:94:93:92:49:FD:90
Certificate issuer:       /CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Certificate serial:       41DCB8C2E1E307A2729FCF4931F81B3F59014689
Authority key identifier: 9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e32362e302f32342d3234203d3e20313339303939.roa
Signing time:             Thu 07 May 2026 05:31:24 +0000
ROA not before:           Thu 07 May 2026 05:26:24 +0000
ROA not after:            Thu 06 May 2027 05:31:24 +0000
asID:                     139099
IP address blocks:        120.131.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:17:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:dc:b8:c2:e1:e3:07:a2:72:9f:cf:49:31:f8:1b:3f:59:01:46:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
        Validity
            Not Before: May  7 05:26:24 2026 GMT
            Not After : May  6 05:31:24 2027 GMT
        Subject: CN=492485FF3F31803EC84CCDFA951194939249FD90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:e1:4e:d4:c4:f3:d5:36:36:f4:ec:f4:18:
                    c1:d0:76:8e:10:d7:d0:53:2a:e2:e5:92:f8:b8:57:
                    b9:f9:15:ec:6a:ac:50:a1:bd:a4:4e:91:32:43:3d:
                    5c:e8:7b:10:c9:b4:26:fb:41:c9:bd:23:54:73:7b:
                    f1:3b:32:e9:67:14:d5:9f:a7:ee:5e:e3:66:4d:5f:
                    8c:e8:58:0b:03:0c:d0:45:43:f8:65:6d:69:18:87:
                    24:e3:1b:63:c4:b7:19:c9:fc:df:4c:5d:4a:ae:80:
                    fa:58:9e:80:66:09:7f:5f:f3:11:49:f5:8e:97:1e:
                    0a:23:50:ee:08:2e:d2:fa:e8:1d:6b:e8:f5:10:b6:
                    79:ee:fd:aa:f5:65:f6:38:66:02:5b:f1:66:c0:59:
                    ae:b8:5e:e9:02:a2:96:8c:c4:8c:4f:9c:a6:df:b6:
                    27:f8:48:7b:e5:42:fc:e7:50:42:07:d9:16:6f:5c:
                    55:20:0c:e6:27:71:9f:84:97:39:82:c4:ee:83:9d:
                    40:2c:90:81:19:dd:23:10:40:e0:32:fa:95:a4:ca:
                    8e:1e:79:34:ab:ab:c3:1b:1a:18:51:ee:6a:83:1a:
                    1e:85:53:e9:d1:89:e4:63:c2:eb:09:6d:23:d2:18:
                    f4:fa:b4:96:3c:46:c6:e1:0c:e3:1e:a8:5a:13:2d:
                    7a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:24:85:FF:3F:31:80:3E:C8:4C:CD:FA:95:11:94:93:92:49:FD:90
            X509v3 Authority Key Identifier:
                keyid:9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e32362e302f32342d3234203d3e20313339303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.131.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:0e:1c:47:28:65:53:5c:32:b7:fa:a2:96:cc:25:de:78:da:
         b9:c5:2a:a5:b6:51:2c:7a:f6:c5:a2:66:71:97:e9:e2:7b:fa:
         6e:ff:e6:bc:9c:a4:22:4c:62:6f:12:e1:33:20:df:b6:34:4a:
         2f:a6:b8:7c:8a:b7:60:e8:d5:a1:29:a4:b5:d4:f0:49:33:e4:
         d6:15:72:f2:5e:87:f7:27:fd:ca:8a:59:1a:c1:47:6e:d0:53:
         5f:f4:f5:e0:ad:9f:bd:ae:1d:92:c9:89:d2:1a:b7:c1:8a:00:
         3a:a3:c8:7d:d3:75:39:89:27:47:86:89:39:0e:17:92:82:27:
         42:f2:4d:ec:8a:7c:cc:a1:84:79:be:3c:89:7a:1d:d7:e2:07:
         ad:ec:de:01:59:79:35:5e:73:5d:2e:5f:c3:62:a1:60:eb:f1:
         a6:dd:bb:22:83:aa:7d:14:aa:68:0c:77:2f:8c:f9:8d:c3:00:
         1e:22:e2:58:72:eb:24:50:08:af:94:22:73:b2:88:87:a1:71:
         b2:f6:5b:b6:f7:d9:70:d4:ed:55:e8:59:0e:8c:31:69:8e:11:
         56:f8:56:40:55:49:c5:4d:d0:43:0b:a9:2d:16:7d:a2:9e:51:
         6b:01:07:5c:73:cf:6d:81:e5:82:a6:62:8e:05:cd:66:60:05:
         3a:ca:05:cb
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUQdy4wuHjB6Jyn89JMfgbP1kBRokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJBNDQ0MkY2QjA3MDU0NjVBRTU0RkI1Q0E4MUIzOENB
REE1NzhGNTAeFw0yNjA1MDcwNTI2MjRaFw0yNzA1MDYwNTMxMjRaMDMxMTAvBgNV
BAMTKDQ5MjQ4NUZGM0YzMTgwM0VDODRDQ0RGQTk1MTE5NDkzOTI0OUZEOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9buFO1MTz1TY29Oz0GMHQdo4Q
19BTKuLlkvi4V7n5FexqrFChvaROkTJDPVzoexDJtCb7Qcm9I1Rze/E7MulnFNWf
p+5e42ZNX4zoWAsDDNBFQ/hlbWkYhyTjG2PEtxnJ/N9MXUqugPpYnoBmCX9f8xFJ
9Y6XHgojUO4ILtL66B1r6PUQtnnu/ar1ZfY4ZgJb8WbAWa64XukCopaMxIxPnKbf
tif4SHvlQvznUEIH2RZvXFUgDOYncZ+ElzmCxO6DnUAskIEZ3SMQQOAy+pWkyo4e
eTSrq8MbGhhR7mqDGh6FU+nRieRjwusJbSPSGPT6tJY8RsbhDOMeqFoTLXonAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUSSSF/z8xgD7ITM36lRGUk5JJ/ZAwHwYDVR0j
BBgwFoAUm6REL2sHBUZa5U+1yoGzjK2lePUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NDYzOTQyOTAzMDQ0NTA2My8wLzlCQTQ0NDJGNkIwNzA1NDY1QUU1NEZCNUNBODFC
MzhDQURBNTc4RjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOUJBNDQ0MkY2QjA3MDU0NjVBRTU0RkI1Q0E4MUIzOENBREE1NzhGNS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDQ2Mzk0MjkwMzA0NDUwNjMvMC8zMTMyMzAyZTMx
MzMzMTJlMzIzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzOTMwMzkzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAHiDGjANBgkqhkiG9w0BAQsFAAOCAQEAyQ4cRyhlU1wyt/qilswl
3njaucUqpbZRLHr2xaJmcZfp4nv6bv/mvJykIkxibxLhMyDftjRKL6a4fIq3YOjV
oSmktdTwSTPk1hVy8l6H9yf9yopZGsFHbtBTX/T14K2fva4dksmJ0hq3wYoAOqPI
fdN1OYknR4aJOQ4XkoInQvJN7Ip8zKGEeb48iXod1+IHrezeAVl5NV5zXS5fw2Kh
YOvxpt27IoOqfRSqaAx3L4z5jcMAHiLiWHLrJFAIr5Qic7KIh6FxsvZbtvfZcNTt
VehZDowxaY4RVvhWQFVJxU3QQwupLRZ9op5RawEHXHPPbYHlgqZijgXNZmAFOsoF
yw==
-----END CERTIFICATE-----
Generated at Wed May 13 21:32:07 2026 by rpki-client