Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3132322e3131352e3232342e302f32312d3231203d3e203233373234.roa
File:                     3132322e3131352e3232342e302f32312d3231203d3e203233373234.roa (raw, json)
Hash identifier:          XKCCKHOJXdoTfyJSt90L9RE9US1lrhykFNrY4HPiUNA=
Subject key identifier:   67:47:21:64:E5:D9:65:86:6F:02:E5:D6:95:40:20:8C:3B:D2:21:09
Certificate issuer:       /CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
Certificate serial:       16D0E32B400A6962469290421AF7DBA410FA58A9
Authority key identifier: BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3132322e3131352e3232342e302f32312d3231203d3e203233373234.roa
Signing time:             Tue 12 May 2026 08:34:54 +0000
ROA not before:           Tue 12 May 2026 08:29:54 +0000
ROA not after:            Tue 11 May 2027 08:34:54 +0000
asID:                     23724
IP address blocks:        122.115.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d0:e3:2b:40:0a:69:62:46:92:90:42:1a:f7:db:a4:10:fa:58:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
        Validity
            Not Before: May 12 08:29:54 2026 GMT
            Not After : May 11 08:34:54 2027 GMT
        Subject: CN=67472164E5D965866F02E5D69540208C3BD22109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:72:8e:a8:77:b7:2a:a8:9f:a2:34:cb:2f:
                    bd:73:bf:7e:f1:8b:6f:0c:20:68:bb:50:d1:5e:34:
                    3a:aa:3a:01:26:5a:f5:79:17:41:41:fd:36:9f:37:
                    7d:43:18:39:0f:3e:66:a4:d3:01:bf:c5:83:0a:21:
                    f9:17:a9:a4:2c:2a:7c:c0:ba:58:22:21:2c:65:0d:
                    68:e1:f2:56:53:6f:e0:ea:dc:55:6f:2f:66:90:e2:
                    f4:b2:3a:1f:48:f5:bc:39:27:e9:97:b9:5b:5e:58:
                    b4:1e:51:7e:eb:ed:2f:a4:32:0f:df:14:c7:ee:89:
                    0f:6a:f9:58:77:62:1a:a1:61:9d:bf:e8:1a:9c:a1:
                    7a:ff:4d:1f:7f:02:37:22:96:8e:ee:65:c5:86:19:
                    72:4b:5a:fb:c9:cb:23:82:83:2c:73:27:a6:d0:f0:
                    5c:07:e6:df:b2:aa:14:5d:f2:ab:45:42:94:69:9d:
                    e6:26:6a:e7:09:8e:5e:ee:37:cc:e0:53:23:8d:a4:
                    e7:01:60:5b:64:6c:6b:0b:07:f4:fc:ec:05:ea:8c:
                    5f:79:98:58:55:ca:60:f2:43:5e:0b:b4:9e:ee:0e:
                    d7:a1:17:7f:be:48:ca:07:d9:01:c9:af:70:69:cf:
                    2d:72:d5:03:8d:85:ac:a3:c7:9b:01:d8:b4:ae:51:
                    b4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:47:21:64:E5:D9:65:86:6F:02:E5:D6:95:40:20:8C:3B:D2:21:09
            X509v3 Authority Key Identifier:
                keyid:BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3132322e3131352e3232342e302f32312d3231203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.115.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         83:6e:a5:e1:cb:96:62:94:80:1e:9a:25:3c:0a:d3:f0:db:18:
         ad:c5:a9:e3:1c:6f:c9:fc:e7:d1:0a:18:66:00:26:40:50:82:
         e1:aa:dd:48:2d:b1:b8:e0:c4:75:e0:79:48:28:f9:a6:a0:c9:
         04:a5:ff:3d:d8:a0:8e:48:b8:25:fb:74:78:df:e9:3d:aa:fb:
         fc:7d:22:51:d3:1b:1b:28:90:53:c9:b7:86:da:34:82:28:5d:
         99:7c:95:98:f5:49:c0:9e:5a:c4:86:a7:b9:d7:3e:de:14:dc:
         8c:7a:89:b8:a6:84:67:db:d8:73:d2:53:ba:51:d9:f5:d6:64:
         85:a7:6a:b6:ac:83:2c:1c:cd:1b:e7:cc:30:cb:63:0b:9c:a2:
         79:fc:56:a6:74:99:72:5a:84:30:ae:42:df:67:b9:c3:a9:25:
         da:f6:ef:86:14:7a:77:75:cb:e4:2a:4b:45:7c:ad:47:11:74:
         d2:de:78:21:2a:06:ad:c9:3b:61:61:40:03:f2:11:b0:ee:fd:
         78:03:b0:28:f4:ea:88:03:52:03:3d:ef:61:ec:8f:7a:dc:94:
         12:43:e3:31:0b:66:77:49:db:46:5a:e0:ce:d1:bf:2c:ce:be:
         e1:7f:c3:98:95:eb:82:70:3d:a4:ab:b9:e8:a0:98:89:42:d0:
         e3:a5:e3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:57:40 2026 by rpki-client