Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3132322e3131322e33322e302f31392d3139203d3e203233373234.roa
File:                     3132322e3131322e33322e302f31392d3139203d3e203233373234.roa (raw, json)
Hash identifier:          J1t6jrr9/Dx/y+pREjqwUAfEYU0QsXL8mABzjmSsKUE=
Subject key identifier:   C9:84:89:94:8B:BA:76:7A:D7:60:D8:D7:5F:66:7C:1E:A4:85:AD:26
Certificate issuer:       /CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
Certificate serial:       48C7C2DB9CBDF5653BB4F1DF9E4956FA23BEBA44
Authority key identifier: BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3132322e3131322e33322e302f31392d3139203d3e203233373234.roa
Signing time:             Tue 12 May 2026 08:34:54 +0000
ROA not before:           Tue 12 May 2026 08:29:54 +0000
ROA not after:            Tue 11 May 2027 08:34:54 +0000
asID:                     23724
IP address blocks:        122.112.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c7:c2:db:9c:bd:f5:65:3b:b4:f1:df:9e:49:56:fa:23:be:ba:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
        Validity
            Not Before: May 12 08:29:54 2026 GMT
            Not After : May 11 08:34:54 2027 GMT
        Subject: CN=C98489948BBA767AD760D8D75F667C1EA485AD26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:a9:26:c2:03:b2:ad:9b:9f:42:59:37:04:
                    4b:3f:44:ea:80:0b:5b:54:30:33:21:dc:7d:3c:ab:
                    5a:c0:56:91:51:0c:0e:eb:99:1b:9a:60:44:e7:a2:
                    ff:8e:9d:49:16:60:7f:e0:5d:c8:01:9d:3e:8d:72:
                    0c:a4:1e:a5:48:10:54:77:a5:c1:19:cd:71:04:08:
                    40:64:0f:ed:29:0e:59:fc:31:8b:5d:31:5f:8e:e7:
                    91:db:52:1a:d5:2b:de:96:06:54:f9:9b:26:58:1a:
                    3b:9f:b6:f9:4a:6f:ae:7e:f0:43:06:d7:6f:7c:b4:
                    ff:6d:8b:8d:81:32:f5:df:ed:81:70:14:1e:ab:dd:
                    e7:37:c0:c6:85:6d:d7:0c:0e:24:cf:3b:85:22:25:
                    77:7b:66:31:48:db:8e:fa:90:28:0b:00:f4:05:a5:
                    b6:56:24:ad:7c:34:85:15:e3:87:d1:bd:d5:97:3b:
                    98:c6:40:75:2d:52:e5:19:e0:c9:42:f1:51:d3:c5:
                    85:7a:b3:ee:f4:50:11:03:c3:3e:ac:07:78:11:37:
                    c8:07:99:94:f7:c0:5d:27:ec:5a:bd:7b:92:3b:0d:
                    ff:d4:0d:76:fc:75:36:7d:36:75:22:bf:4a:3e:60:
                    89:4e:7b:2a:b7:84:e1:ee:2f:ae:4a:88:bb:1d:4f:
                    d7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:84:89:94:8B:BA:76:7A:D7:60:D8:D7:5F:66:7C:1E:A4:85:AD:26
            X509v3 Authority Key Identifier:
                keyid:BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3132322e3131322e33322e302f31392d3139203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.112.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         15:98:a4:d7:80:fa:67:bf:78:ec:71:6b:2a:e5:0a:4a:17:f5:
         a4:de:d7:a5:8a:14:f6:b2:04:65:60:c2:71:01:de:75:24:88:
         c3:9a:43:42:3a:df:38:c4:da:4a:17:7a:cd:d6:eb:3d:1e:57:
         cc:6f:90:28:d1:56:cc:f0:de:86:9e:14:bd:11:dd:e9:44:0e:
         e9:fc:25:8e:8d:b2:35:9c:a3:55:ed:92:8e:38:22:16:65:fe:
         a4:03:ff:89:d4:1b:54:e1:9d:c6:e4:d3:27:82:9a:25:5c:cb:
         9a:80:83:f2:27:63:f6:c7:07:8b:ec:60:f2:0e:b5:fc:8c:8f:
         5d:b4:39:2b:9b:e2:5b:3c:ed:b1:1d:6c:cd:91:f0:e8:01:a2:
         b5:2b:68:b4:4b:95:dd:73:61:e5:61:43:28:57:9a:26:c7:8e:
         a3:d5:93:b7:35:3a:6b:fb:99:60:ad:0d:5a:a4:95:bc:78:1f:
         4a:2d:a3:0f:28:62:b7:2d:0f:5e:93:25:27:12:79:1a:b4:8f:
         1a:98:ea:ed:a0:89:f5:ff:6f:fd:ce:bb:0a:f2:8c:8a:76:a8:
         0b:de:dc:4b:5b:99:26:8f:3b:6f:09:6a:51:1e:d6:f0:58:d5:
         c3:b5:c3:87:77:4a:f6:c1:41:03:c2:c6:56:b5:c1:71:d4:55:
         89:e4:6f:f3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:24:04 2026 by rpki-client