Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3132322e3131352e3232342e302f32302d3230203d3e203233373234.roa
File:                     3132322e3131352e3232342e302f32302d3230203d3e203233373234.roa (raw, json)
Hash identifier:          Ye+DTXHIkz3eHMSsk/ucrcfrIgGZEAsakJtm/xjeJpg=
Subject key identifier:   D0:5E:37:A7:03:20:4B:8E:CE:46:0F:D0:FB:62:D5:CA:6C:C7:84:F9
Certificate issuer:       /CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
Certificate serial:       0D43EC7A82F47636C0A487E213E9E5509D1CA8E3
Authority key identifier: BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3132322e3131352e3232342e302f32302d3230203d3e203233373234.roa
Signing time:             Tue 12 May 2026 08:34:54 +0000
ROA not before:           Tue 12 May 2026 08:29:54 +0000
ROA not after:            Tue 11 May 2027 08:34:54 +0000
asID:                     23724
IP address blocks:        122.115.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:43:ec:7a:82:f4:76:36:c0:a4:87:e2:13:e9:e5:50:9d:1c:a8:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
        Validity
            Not Before: May 12 08:29:54 2026 GMT
            Not After : May 11 08:34:54 2027 GMT
        Subject: CN=D05E37A703204B8ECE460FD0FB62D5CA6CC784F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2c:1e:fe:24:99:e7:86:31:a5:ac:fc:3b:e4:
                    6b:9b:30:84:bc:20:e2:22:67:dd:bd:a8:0a:3f:da:
                    ce:62:c1:11:51:e6:e0:e9:5f:4e:e1:41:54:8f:1a:
                    1e:59:a6:e4:70:bf:e5:4d:0a:c0:a5:43:17:28:74:
                    3b:48:56:cb:6a:10:7b:3d:b7:50:0f:19:8b:73:4c:
                    fe:60:74:47:ee:80:1c:14:20:27:5b:bd:40:fa:0a:
                    f1:0b:d2:ac:db:ec:64:7d:ff:c8:6d:ed:f0:28:d1:
                    f1:8c:01:f2:b8:bb:d5:29:8c:0e:d4:6e:88:0c:f2:
                    c5:c8:f3:60:0d:c8:43:f3:14:4d:78:80:64:f8:bb:
                    33:d0:03:6c:c1:24:2a:74:86:cd:30:84:42:49:19:
                    7d:dd:0e:a2:c2:a1:f3:ad:52:96:6d:5f:e3:45:69:
                    3e:24:ef:b4:94:67:7b:68:c9:ed:04:50:7c:b2:94:
                    3a:33:67:f9:1a:2d:80:5c:94:d5:78:01:7d:fe:39:
                    46:9d:94:36:b6:a5:f8:82:47:13:6e:05:20:a5:42:
                    bf:0e:76:72:4f:50:88:61:bd:f9:3f:fe:b9:21:94:
                    8e:1b:94:7d:79:e5:e9:61:09:e5:73:33:07:e3:2e:
                    46:70:f4:aa:a5:5d:c0:80:5f:84:0a:27:d6:c4:0d:
                    d4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5E:37:A7:03:20:4B:8E:CE:46:0F:D0:FB:62:D5:CA:6C:C7:84:F9
            X509v3 Authority Key Identifier:
                keyid:BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3132322e3131352e3232342e302f32302d3230203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.115.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:b9:9d:9c:7f:d6:a9:4a:8a:56:26:47:cf:7e:fb:e2:dd:30:
         b4:77:53:5a:2a:a2:36:b0:da:f3:01:1e:42:c5:88:c5:27:bd:
         41:ea:3d:51:e6:ee:0a:e8:ee:fd:82:a5:9c:ca:fe:e8:b7:1b:
         f3:84:e7:61:5a:f6:00:cf:4d:47:df:e3:57:e4:bd:fb:65:cb:
         a5:e3:b9:1b:c1:c8:c2:09:ae:05:53:8e:f4:a9:73:c6:24:bd:
         93:7e:db:ad:d8:fd:1e:d4:d1:c6:c1:22:0a:33:8b:bf:a1:03:
         10:46:1d:b5:60:3a:7c:0e:d8:6b:e2:81:71:39:9c:6d:20:77:
         52:b0:ab:3c:a6:63:16:89:e1:75:a4:b0:77:56:01:39:ac:a8:
         1d:94:4a:6a:37:da:fc:e1:f0:bb:62:a7:a6:b1:31:be:26:28:
         59:09:10:00:2c:b7:79:00:93:6a:c5:9c:55:63:05:b1:14:0a:
         e1:ff:d8:c3:5c:77:9f:f1:f9:cf:b7:4e:5c:5e:80:dc:b6:68:
         45:b0:25:3c:cc:15:85:bc:88:40:80:6e:b7:d2:32:15:94:ac:
         a0:4e:87:f9:02:d4:0f:c4:13:36:bc:1d:9f:b4:22:ab:6c:33:
         6b:e6:18:45:92:c6:b3:80:f2:23:e1:a3:57:d3:a8:c9:c1:1f:
         0e:b2:f8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:47:34 2026 by rpki-client