Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/0/AS132203.roa
File:                     AS132203.roa (raw, json)
Hash identifier:          85U9PUKtgzK21mXgmH+zCyipvQ1Xpn9enMGmBC1soLA=
Subject key identifier:   8E:88:FA:A1:77:BE:BE:08:BB:1B:B9:43:77:81:CC:60:3B:F4:C4:76
Certificate issuer:       /CN=4F94A5F36F866F21180775DFFF3827990F956B62
Certificate serial:       57C44AF30C8D5863814228C52D76F55F9790BAD0
Authority key identifier: 4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/AS132203.roa
Signing time:             Fri 05 Jun 2026 02:46:43 +0000
ROA not before:           Fri 05 Jun 2026 02:41:43 +0000
ROA not after:            Fri 04 Jun 2027 02:46:43 +0000
asID:                     132203
IP address blocks:        49.51.128.0/19 maxlen: 24
                          49.51.146.0/23 maxlen: 24
                          49.51.160.0/20 maxlen: 24
                          119.28.164.0/24 maxlen: 24
                          119.28.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 05:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c4:4a:f3:0c:8d:58:63:81:42:28:c5:2d:76:f5:5f:97:90:ba:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F94A5F36F866F21180775DFFF3827990F956B62
        Validity
            Not Before: Jun  5 02:41:43 2026 GMT
            Not After : Jun  4 02:46:43 2027 GMT
        Subject: CN=8E88FAA177BEBE08BB1BB9437781CC603BF4C476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9b:f7:62:07:3f:77:88:e9:be:ea:d3:28:90:
                    93:00:76:8e:ef:ab:bc:72:c6:c7:9e:7b:d3:dd:fb:
                    37:bd:f0:c7:ec:66:10:5a:ff:7c:9d:af:26:1d:16:
                    78:14:0d:6e:b3:f5:14:e8:cf:9b:5e:e2:79:17:1e:
                    d2:90:aa:99:e1:5b:80:42:bd:6e:67:0f:dc:63:e4:
                    a8:07:37:42:4c:c9:a0:06:7b:65:35:57:54:4d:e8:
                    ef:86:6b:bd:88:30:4c:e5:54:b7:9d:ae:dd:51:1e:
                    32:e3:a7:8e:f8:be:1c:c3:78:c7:81:f7:55:0c:6d:
                    eb:13:ca:6b:32:c7:bf:07:93:2d:4a:b0:79:1c:6c:
                    18:7f:01:a3:6f:11:84:4a:20:31:89:0c:c6:ed:37:
                    b7:c4:de:5c:34:ba:d2:7b:b1:89:47:10:2c:cc:42:
                    2e:47:db:96:36:6e:ca:4a:8a:ed:34:34:88:3f:5e:
                    c0:c5:07:a6:de:f9:eb:e7:e7:5b:c7:9f:0a:e7:5d:
                    7b:94:2c:8d:fd:c0:e1:38:9a:4a:36:5f:5a:9f:6a:
                    e0:36:0f:4f:51:be:3d:54:af:a6:86:21:e4:4a:c5:
                    eb:1c:64:fa:ed:5c:bd:bf:54:5c:16:d6:66:85:3b:
                    93:2f:45:b0:84:06:39:6c:ab:07:8c:34:6c:41:8b:
                    51:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:88:FA:A1:77:BE:BE:08:BB:1B:B9:43:77:81:CC:60:3B:F4:C4:76
            X509v3 Authority Key Identifier:
                keyid:4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/AS132203.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.51.128.0-49.51.175.255
                  119.28.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:42:c3:41:34:0b:32:77:f2:cc:bf:89:36:81:fc:aa:3f:9c:
         f4:67:be:f1:9c:80:40:66:55:ae:72:5b:be:3f:5e:5d:38:b2:
         f7:2f:fc:04:b9:57:ff:84:7a:12:8c:18:9b:78:f9:b3:16:a7:
         e8:3c:79:b0:f5:d2:15:73:41:77:d8:0a:95:0a:03:56:8d:12:
         99:9c:a7:48:c4:2c:8e:05:54:33:40:b3:b4:c8:e4:99:c1:32:
         14:46:49:6b:12:d9:eb:b1:b0:d2:5b:a5:32:4f:47:9d:b5:25:
         6a:b0:a9:85:91:fa:c9:89:c8:7c:46:b9:88:88:70:f4:e8:9f:
         1e:5c:4d:09:76:10:f3:36:91:eb:92:57:7a:09:e3:1a:60:8c:
         0f:d3:7e:85:41:f2:c0:73:ae:84:eb:f3:61:a4:1a:44:d8:7b:
         7c:d5:98:24:79:b7:c0:60:bd:99:e0:c3:b4:a9:aa:32:cd:03:
         ed:cd:a0:fe:10:eb:03:1d:2d:f1:d0:12:a1:9a:f4:2a:92:4e:
         d1:ab:5f:9d:7b:02:e2:c3:a2:dd:5c:36:be:b5:39:a6:a7:d8:
         ed:83:d0:3e:9d:29:40:ea:cf:f7:bf:49:1f:fa:cc:49:90:c0:
         26:35:74:c2:68:77:ec:10:c2:97:b9:13:aa:fd:a2:38:3e:fa:
         df:f1:0b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:01:30 2026 by rpki-client