Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e32372e302f32342d3234203d3e20313339303939.roa
File:                     3132302e3133312e32372e302f32342d3234203d3e20313339303939.roa (raw, json)
Hash identifier:          KUFaQVC1MHjM4zq/+lDuE235IOW8JbYZFTmixvWFaqM=
Subject key identifier:   D6:2F:3C:07:4E:15:6A:57:8E:09:BB:A8:D4:67:8E:D0:8A:C0:B6:15
Certificate issuer:       /CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Certificate serial:       381C8F32AD8096EB2A9C21640AFE2E41E9017BB2
Authority key identifier: 9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e32372e302f32342d3234203d3e20313339303939.roa
Signing time:             Thu 07 May 2026 05:31:23 +0000
ROA not before:           Thu 07 May 2026 05:26:23 +0000
ROA not after:            Thu 06 May 2027 05:31:23 +0000
asID:                     139099
IP address blocks:        120.131.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:17:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1c:8f:32:ad:80:96:eb:2a:9c:21:64:0a:fe:2e:41:e9:01:7b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
        Validity
            Not Before: May  7 05:26:23 2026 GMT
            Not After : May  6 05:31:23 2027 GMT
        Subject: CN=D62F3C074E156A578E09BBA8D4678ED08AC0B615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3d:94:b3:50:79:a8:09:e6:ba:07:07:2a:eb:
                    32:09:5a:7d:37:8a:d8:9b:c6:92:00:2f:dc:3d:da:
                    80:95:74:ff:cf:38:19:6f:d2:f0:38:e1:8c:7c:a2:
                    55:b0:3d:0b:93:ca:d3:a4:f8:48:60:31:7c:e1:97:
                    e4:41:b0:2c:7e:5c:61:e3:9f:2d:42:15:67:1d:37:
                    c8:dd:8e:7b:c1:99:76:75:13:84:f0:34:86:87:24:
                    49:eb:df:63:c8:04:f7:2b:79:91:aa:d2:2c:fe:b5:
                    44:42:c6:58:5c:55:78:c5:f0:67:b0:ad:8d:be:48:
                    d8:de:5a:ea:89:2f:b9:d3:9a:b0:07:4b:4c:b1:d1:
                    6d:b4:e0:8a:d7:c0:58:10:0a:ea:ed:60:bc:63:50:
                    ec:c0:e5:5e:38:f0:a5:f7:6b:e6:0f:ed:78:e9:75:
                    0b:59:73:ad:4a:47:34:fe:df:69:ce:7a:9f:ae:d8:
                    0f:a0:5c:62:ef:ea:7a:57:0f:e8:82:b0:ed:bb:7b:
                    46:02:9b:0d:ce:a2:3d:fa:ac:aa:97:8c:38:3d:95:
                    22:8b:b2:6a:15:7e:50:49:a8:b5:27:d2:a4:70:58:
                    4d:6c:48:ce:96:56:6e:36:9a:a7:81:c8:68:26:9b:
                    d4:c5:d4:1b:31:b3:a0:3d:85:b5:7b:f5:1d:96:7d:
                    59:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2F:3C:07:4E:15:6A:57:8E:09:BB:A8:D4:67:8E:D0:8A:C0:B6:15
            X509v3 Authority Key Identifier:
                keyid:9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e32372e302f32342d3234203d3e20313339303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.131.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:1a:a9:bc:af:c5:03:95:ee:f5:08:96:17:0f:5a:6f:a4:a0:
         71:17:a5:95:cb:a0:7c:1b:fe:06:58:db:98:90:a2:63:2d:36:
         70:81:be:52:3b:f5:4b:b0:05:e3:2c:2b:fc:72:07:26:4e:a7:
         4c:51:a1:a6:e2:4f:cd:79:eb:e8:e2:ae:03:a3:7d:df:b0:68:
         c9:70:c7:da:c7:61:dc:cd:ca:09:7b:03:ce:23:f5:37:90:74:
         ff:e9:1c:f0:79:77:f6:ba:e8:1e:94:41:9b:16:bd:8d:ed:16:
         02:c2:05:06:9f:7a:03:8c:38:e8:c3:ea:d3:24:d0:57:f6:75:
         e1:92:62:35:b0:aa:11:bf:19:b7:9c:b0:08:57:93:74:8a:2b:
         b1:76:bb:c9:39:e0:38:72:a1:61:51:45:4c:0b:9a:c4:12:15:
         b1:19:ea:e7:c4:50:00:aa:46:6c:7f:30:8d:87:c5:53:0f:5a:
         26:2e:3e:fc:a4:0a:c8:13:2a:7e:da:49:70:fa:c9:b9:f3:35:
         9d:5a:d1:77:9a:52:d6:23:09:c8:e2:83:ff:e3:0c:7d:73:b5:
         c9:83:13:a6:07:76:26:29:86:86:56:1d:0d:c0:e5:9e:d0:85:
         12:7a:f8:96:ba:d8:3b:08:e7:34:e0:b6:29:e5:09:b5:29:7b:
         ec:db:17:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:32:07 2026 by rpki-client