Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e33302e302f32342d3234203d3e20313339303939.roa
File:                     3132302e3133312e33302e302f32342d3234203d3e20313339303939.roa (raw, json)
Hash identifier:          Tkspm1nyfAj09MFCGZ2HBjswbzx/Z6VReAzGEzENDuM=
Subject key identifier:   B0:DE:AE:55:B4:35:C3:E6:53:56:50:01:78:FD:4A:B5:58:FE:5A:E8
Certificate issuer:       /CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Certificate serial:       2BA14F25D113BE2DC5F8F25F53FB9FF793ADC742
Authority key identifier: 9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e33302e302f32342d3234203d3e20313339303939.roa
Signing time:             Thu 07 May 2026 05:31:24 +0000
ROA not before:           Thu 07 May 2026 05:26:24 +0000
ROA not after:            Thu 06 May 2027 05:31:24 +0000
asID:                     139099
IP address blocks:        120.131.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:17:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a1:4f:25:d1:13:be:2d:c5:f8:f2:5f:53:fb:9f:f7:93:ad:c7:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
        Validity
            Not Before: May  7 05:26:24 2026 GMT
            Not After : May  6 05:31:24 2027 GMT
        Subject: CN=B0DEAE55B435C3E65356500178FD4AB558FE5AE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0b:70:6d:fb:9a:05:e3:17:b5:eb:a4:7a:58:
                    ab:04:86:68:25:b7:81:8d:a2:30:c3:d8:60:49:d4:
                    09:1e:5b:91:b2:a5:42:b7:f0:65:6e:a8:11:13:b6:
                    ae:33:e9:55:96:b5:08:be:c3:33:14:97:8d:bb:39:
                    8c:3f:63:9a:ab:da:5f:a0:c2:44:e0:6d:94:09:9c:
                    74:49:e8:85:53:15:26:1d:94:1b:98:18:a8:14:83:
                    c0:44:f1:c0:af:57:ee:00:01:1b:f7:96:7a:85:2c:
                    86:de:e4:64:49:eb:37:73:d2:20:8a:fd:98:cc:5e:
                    eb:ec:bc:fc:52:b6:c3:3d:7f:b3:cb:f3:3f:b3:7e:
                    dc:0e:fa:b8:09:b4:1f:4e:ef:89:2d:f0:15:d4:43:
                    14:5a:cb:9a:1b:cc:48:d7:fa:21:0c:60:bc:c0:9b:
                    38:ff:19:e2:d4:71:5b:77:b4:7b:54:a6:65:2e:66:
                    0a:bd:a0:d5:d1:05:72:17:44:9b:90:65:38:d6:07:
                    46:7a:b9:c0:2f:44:94:e5:1f:dd:29:d4:96:bc:df:
                    a3:32:f9:26:31:8a:86:27:33:80:29:46:b9:3b:49:
                    10:55:17:89:f9:98:7d:2d:e9:1e:97:2f:5d:c7:3d:
                    95:02:96:a5:7d:6c:b0:83:3c:ec:b4:6d:78:6c:91:
                    99:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DE:AE:55:B4:35:C3:E6:53:56:50:01:78:FD:4A:B5:58:FE:5A:E8
            X509v3 Authority Key Identifier:
                keyid:9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e33302e302f32342d3234203d3e20313339303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.131.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:fa:d6:4e:df:53:33:29:1a:84:40:35:28:92:e9:e0:dc:a7:
         4c:15:42:51:0d:1b:f8:47:d0:85:9a:ac:51:f6:83:dc:1b:7d:
         62:b2:ea:45:68:ef:1f:8c:47:9a:46:f1:e4:89:db:9d:5a:03:
         ff:2a:02:8a:18:96:eb:00:eb:c7:24:fa:5e:53:33:19:c7:d6:
         7c:54:83:48:34:fb:e6:5e:69:ec:a5:d8:2f:6b:60:af:99:e0:
         11:c7:0d:9e:32:21:9a:7c:d8:03:2e:64:e4:f9:56:68:f2:9e:
         e0:73:04:4f:50:0b:8b:b9:66:de:ad:f8:6e:1a:94:03:2a:96:
         cc:6e:f2:56:14:03:b6:9e:08:64:18:b0:34:40:0a:fc:f9:51:
         c4:c9:6b:b3:ac:60:c5:59:48:4b:95:6f:8e:67:77:ed:fb:64:
         7d:c0:b6:d9:ff:cb:07:ff:78:2d:6e:83:0c:66:ff:2f:ee:a7:
         40:10:27:28:6d:b1:da:dd:81:ca:4a:d3:3b:78:9d:27:b1:67:
         b7:f9:01:e9:0b:90:5e:fd:e1:42:fe:21:7d:02:4c:f2:15:3e:
         6f:70:c4:53:07:48:ba:36:3b:b2:3f:87:68:23:bf:c7:52:45:
         ac:ff:4d:df:c3:7a:ed:c5:05:d9:68:fa:8a:1a:30:3b:fb:1e:
         81:6f:83:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:32:12 2026 by rpki-client