Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3131302e3137332e33322e302f32302d3230203d3e203233373234.roa
File:                     3131302e3137332e33322e302f32302d3230203d3e203233373234.roa (raw, json)
Hash identifier:          zqjN713mX9h2lmV5neJpe1TEpqF+no7deYXjv5XjMXk=
Subject key identifier:   FD:A4:D7:BA:1B:8B:E8:8A:CC:AB:1B:3E:D9:2C:91:4F:50:19:01:6B
Certificate issuer:       /CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
Certificate serial:       4D41A057B621E4218175E56065103D703A31B557
Authority key identifier: BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3131302e3137332e33322e302f32302d3230203d3e203233373234.roa
Signing time:             Tue 12 May 2026 08:34:54 +0000
ROA not before:           Tue 12 May 2026 08:29:54 +0000
ROA not after:            Tue 11 May 2027 08:34:54 +0000
asID:                     23724
IP address blocks:        110.173.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:41:a0:57:b6:21:e4:21:81:75:e5:60:65:10:3d:70:3a:31:b5:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
        Validity
            Not Before: May 12 08:29:54 2026 GMT
            Not After : May 11 08:34:54 2027 GMT
        Subject: CN=FDA4D7BA1B8BE88ACCAB1B3ED92C914F5019016B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ab:be:0a:04:f0:54:fb:6b:73:fd:42:46:da:
                    59:46:c0:6c:cf:8d:1a:5c:3e:74:1c:0f:3c:36:c0:
                    a7:99:b9:8d:29:dd:7a:bb:ae:9d:b3:d5:68:47:e6:
                    b6:92:69:fc:d7:4d:68:61:df:38:79:94:0f:70:42:
                    99:ea:ff:91:fe:15:b0:e3:71:68:50:f5:77:61:27:
                    e3:4c:68:68:40:5a:d6:a9:23:32:6f:20:cf:f6:fc:
                    f3:19:aa:ed:a8:29:48:2e:15:d9:e4:9f:a8:31:20:
                    78:ef:b1:8c:1c:47:88:48:cd:98:c2:f0:09:e0:30:
                    d2:9e:c1:fd:df:48:55:df:0f:ef:fa:62:a1:40:73:
                    c2:62:71:1d:6a:d0:ba:10:d4:63:68:c8:d5:91:bb:
                    83:b2:e6:78:93:e8:7d:41:22:f6:2c:68:66:0b:6c:
                    a4:ff:e8:c1:51:29:e8:3c:61:8d:22:a0:ac:15:17:
                    55:56:b6:1d:d0:21:1b:04:eb:27:4d:d1:0f:23:c1:
                    c1:f5:39:b4:3c:be:50:d4:f7:0b:01:2b:ee:f6:df:
                    8f:29:14:dd:45:d2:6b:87:f3:49:9a:16:a9:1e:5e:
                    ef:17:0f:74:e3:cc:fa:de:1d:a6:ba:a8:a5:e7:52:
                    65:81:58:8f:4e:65:32:68:00:e6:49:d6:49:d8:91:
                    d1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A4:D7:BA:1B:8B:E8:8A:CC:AB:1B:3E:D9:2C:91:4F:50:19:01:6B
            X509v3 Authority Key Identifier:
                keyid:BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3131302e3137332e33322e302f32302d3230203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.173.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:ae:c6:ae:af:24:7a:f0:18:47:dd:d8:7a:16:6f:ef:b8:7b:
         f9:20:aa:c9:c5:51:e1:09:a7:fb:e7:9c:ec:42:a0:cd:fb:1a:
         80:e5:c7:af:ec:ed:ee:83:63:90:62:a0:9e:76:3e:d8:3b:34:
         a3:63:eb:9f:19:a9:43:a8:32:7e:14:78:c2:3d:a6:87:19:ed:
         50:b1:02:b1:76:5b:7e:31:40:3d:a1:9d:0b:aa:c1:a6:da:d5:
         e5:64:16:26:ce:c5:fe:60:93:6e:78:d1:7d:dd:01:a7:94:db:
         97:e4:e9:7a:64:e4:7b:f2:cd:4f:c9:bc:bd:37:d2:cf:06:e4:
         7a:e3:60:75:5e:81:68:08:cc:85:21:e1:8f:c5:a3:92:ee:80:
         03:6e:e6:2a:3e:f5:03:b5:bb:f0:a6:bc:e2:a0:0b:db:6a:70:
         a3:b5:8b:ba:37:56:8f:ef:16:03:44:7c:2b:13:11:67:35:75:
         87:1b:bd:8d:41:1a:24:44:be:98:4f:33:13:07:26:24:10:75:
         b2:fa:46:be:56:c6:39:c7:2a:71:31:f7:71:40:13:24:ad:fe:
         a3:aa:f3:cf:9d:c6:be:a5:ce:23:70:c9:ba:a5:e8:fb:ba:51:
         3d:d7:6f:9e:90:15:29:7a:ab:1e:05:bb:49:52:fb:7c:74:2f:
         25:d7:b2:c6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 12:08:31 2026 by rpki-client