Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106106457318752269/0/3132302e3133312e38382e302f32312d3231203d3e203536303438.roa
File:                     3132302e3133312e38382e302f32312d3231203d3e203536303438.roa (raw, json)
Hash identifier:          Xg2thkOsk2CbJRKJ/2cEUsiCpzVdz6ialh9JNpJ7MMY=
Subject key identifier:   18:D6:39:26:C8:EA:70:94:6B:F1:A1:5D:2F:DC:EB:8C:51:86:F4:C3
Certificate issuer:       /CN=6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52
Certificate serial:       092A89AB6488C047B00A08F1CA6A98C5C1641B65
Authority key identifier: 6B:23:1F:5D:F7:53:5B:F8:6C:FF:EB:85:A0:B2:8E:0A:44:7C:BD:52
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/3132302e3133312e38382e302f32312d3231203d3e203536303438.roa
Signing time:             Mon 11 May 2026 08:06:31 +0000
ROA not before:           Mon 11 May 2026 08:01:31 +0000
ROA not after:            Mon 10 May 2027 08:06:31 +0000
asID:                     56048
IP address blocks:        120.131.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:52:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:2a:89:ab:64:88:c0:47:b0:0a:08:f1:ca:6a:98:c5:c1:64:1b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52
        Validity
            Not Before: May 11 08:01:31 2026 GMT
            Not After : May 10 08:06:31 2027 GMT
        Subject: CN=18D63926C8EA70946BF1A15D2FDCEB8C5186F4C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e4:73:2c:5e:1b:64:50:14:b2:8a:43:2b:ad:
                    ae:76:3c:b0:c0:39:34:01:4e:be:41:fa:4c:e6:72:
                    31:2a:49:11:b0:18:d2:17:9f:bc:31:e8:0f:0b:06:
                    69:97:67:22:a1:70:93:0c:ff:00:a4:9c:b3:4e:5f:
                    db:d2:02:66:77:ce:d7:3a:7b:39:61:73:0b:dc:53:
                    71:85:5b:9a:42:e0:a5:ff:31:7f:94:97:e8:3a:80:
                    42:6c:86:b4:75:d9:3c:b0:cb:de:cc:da:64:22:96:
                    66:3f:c8:e5:2c:a4:6f:58:6a:03:bc:8e:f6:27:b7:
                    a7:a8:a2:9e:fd:86:66:39:8f:88:90:d7:ee:c1:a9:
                    43:4d:f7:5a:c2:7f:47:d0:21:18:12:d6:a9:53:09:
                    a9:b1:d7:7b:e4:f8:aa:ad:5d:11:ba:ed:cd:19:2c:
                    e2:00:82:29:41:d6:f2:e7:75:82:27:b7:13:1b:ea:
                    c9:d2:c2:63:f3:e5:db:68:03:de:7d:1e:70:fe:89:
                    82:3b:48:fa:50:59:fe:b0:dc:2a:dd:3c:79:7c:99:
                    a0:e1:10:97:ab:eb:72:5e:bb:b6:90:f2:6e:4a:80:
                    b8:b5:f2:9f:eb:fe:c6:fb:f3:42:11:a5:47:15:f0:
                    0d:76:11:7e:de:7e:b3:80:45:4a:f6:a3:4a:67:19:
                    a7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D6:39:26:C8:EA:70:94:6B:F1:A1:5D:2F:DC:EB:8C:51:86:F4:C3
            X509v3 Authority Key Identifier:
                keyid:6B:23:1F:5D:F7:53:5B:F8:6C:FF:EB:85:A0:B2:8E:0A:44:7C:BD:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/3132302e3133312e38382e302f32312d3231203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.131.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9f:28:b5:5b:28:a6:bd:bb:54:e2:49:be:4d:29:d8:28:03:f8:
         67:47:85:3b:f0:20:47:15:a7:37:67:d1:f9:64:a4:85:ed:de:
         28:22:48:a6:32:dc:0a:ec:4f:5b:72:d8:53:c1:5d:ed:09:21:
         b2:3b:27:27:5a:da:94:b1:a9:9e:74:27:14:d9:33:8c:00:1b:
         41:31:14:79:6f:ba:03:a8:f5:b5:68:7a:1d:62:24:09:1a:40:
         3f:18:37:37:e9:d1:c9:6c:d5:78:14:97:49:ac:c7:76:8a:e9:
         14:d6:b6:85:d0:41:53:5d:4f:5e:2e:4e:99:0c:d7:dc:f7:39:
         e4:df:e5:dd:c6:2d:e3:04:35:04:a1:38:01:c8:cf:da:09:2f:
         4d:66:b4:3f:b0:4c:4a:a7:ae:1d:df:f0:48:b1:58:40:4f:9e:
         6a:2a:80:9a:23:b4:32:c1:dd:1f:fd:11:14:6a:ae:d3:6e:56:
         e9:de:80:cc:db:74:42:df:a4:c5:47:7a:5a:2f:56:53:df:8d:
         61:91:4f:49:18:57:88:33:d8:de:06:d1:f5:c6:13:26:86:df:
         f1:17:85:a5:81:fd:19:24:9d:94:1f:ca:1e:1a:1f:af:72:04:
         c9:6e:c8:73:14:04:9a:1b:6a:bf:53:e3:8a:5c:6c:36:ac:d4:
         c5:1f:cf:c4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:09:12 2026 by rpki-client