Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3132322e3131352e302e302f32302d3230203d3e203233373234.roa
File:                     3132322e3131352e302e302f32302d3230203d3e203233373234.roa (raw, json)
Hash identifier:          DI1kyNXEr04OL+sHpbhHy+X6wizP6k5iogstAkRv4Ro=
Subject key identifier:   6C:8D:55:88:EA:34:E7:9C:FD:68:D1:19:79:AA:71:06:11:D6:C6:AF
Certificate issuer:       /CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
Certificate serial:       2A85CC50B8BA1BB9EFDEBB3484BE7622F5742173
Authority key identifier: BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3132322e3131352e302e302f32302d3230203d3e203233373234.roa
Signing time:             Tue 12 May 2026 08:34:54 +0000
ROA not before:           Tue 12 May 2026 08:29:54 +0000
ROA not after:            Tue 11 May 2027 08:34:54 +0000
asID:                     23724
IP address blocks:        122.115.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:85:cc:50:b8:ba:1b:b9:ef:de:bb:34:84:be:76:22:f5:74:21:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
        Validity
            Not Before: May 12 08:29:54 2026 GMT
            Not After : May 11 08:34:54 2027 GMT
        Subject: CN=6C8D5588EA34E79CFD68D11979AA710611D6C6AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:83:56:77:05:54:05:55:cb:fd:e0:f1:3e:1d:
                    43:b2:2a:30:74:b6:52:90:65:7c:dc:87:f6:b2:9e:
                    84:2e:14:c3:32:02:cb:2a:2b:60:cf:eb:4a:69:3c:
                    8f:77:a7:e6:42:01:cd:7c:eb:40:e4:bc:0c:fe:2b:
                    f9:8b:d6:9c:14:53:eb:71:4d:67:2e:12:a2:68:9c:
                    13:65:53:80:e3:6b:8e:c1:4f:97:fe:83:54:8a:ed:
                    94:cc:b5:37:d2:b0:26:dd:76:7b:47:a5:d2:56:f3:
                    9d:c3:6d:71:01:07:b6:4b:d6:88:21:5e:2a:6a:89:
                    3e:ed:80:df:c6:0f:62:4a:2c:7d:1c:25:c6:da:83:
                    45:7a:eb:b2:c0:de:a8:f8:8b:be:73:24:08:d6:a2:
                    7e:86:ed:65:d0:ca:f3:fa:9e:b3:9d:3e:5a:7a:72:
                    83:d3:c7:18:28:d5:2e:06:f8:a9:16:7e:4f:2f:15:
                    c8:37:ca:5f:33:c0:5d:10:36:81:73:12:83:92:e0:
                    13:94:29:ba:e2:30:33:28:9e:e0:a1:a3:16:4b:2d:
                    30:26:fd:73:59:df:d9:44:d0:bd:43:61:0c:ff:32:
                    fd:bb:98:73:41:07:53:6c:95:31:80:b3:7e:5d:14:
                    4c:51:a5:cc:25:91:af:f2:82:36:f5:da:e2:17:43:
                    e0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8D:55:88:EA:34:E7:9C:FD:68:D1:19:79:AA:71:06:11:D6:C6:AF
            X509v3 Authority Key Identifier:
                keyid:BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3132322e3131352e302e302f32302d3230203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.115.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8e:83:86:e7:4f:d8:5e:60:21:29:98:79:3c:99:e3:64:1d:fd:
         83:71:b5:bb:25:15:ff:e8:4e:5a:a5:0a:32:2f:c7:cd:5b:7f:
         a9:51:8a:14:25:9f:5c:fb:aa:b4:c8:a5:ab:85:b1:38:3f:33:
         ef:72:a7:95:3b:cc:96:bf:ec:b9:f3:2e:16:15:09:9f:f0:59:
         e1:50:fd:de:fc:82:37:7c:b5:e6:2c:44:4d:71:9b:e2:19:f0:
         6e:5e:e3:8e:a2:15:be:d7:4e:43:8f:77:80:e8:70:4b:85:15:
         ee:b8:03:d0:8c:e8:88:f2:85:78:a6:c2:d1:96:1d:f5:1c:f0:
         67:2a:1d:5c:c4:73:a2:3b:fd:f8:85:5d:c1:87:11:62:31:2d:
         0c:bc:b9:ac:e9:ff:86:00:4e:f5:0d:e9:bc:4a:6c:0b:9e:13:
         21:e2:18:7d:e2:49:54:e7:c3:88:f1:94:30:7e:e6:06:78:33:
         17:64:90:63:b9:8d:5e:10:d2:e9:f0:ae:97:e7:bb:d1:71:2f:
         90:92:39:ba:0a:df:87:dd:14:6a:08:2e:72:c7:27:88:fd:8c:
         44:60:1d:da:87:68:57:95:12:5b:5c:48:c1:1b:4f:8b:d8:89:
         a1:2a:58:19:e1:a8:39:bd:77:22:72:8c:00:77:aa:6b:31:5f:
         2f:53:43:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:48:47 2026 by rpki-client