Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3131392e31352e3133362e302f32332d3233203d3e2034383132.roa
File:                     3131392e31352e3133362e302f32332d3233203d3e2034383132.roa (raw, json)
Hash identifier:          iyslGkiLEqEVdSW+oe1E81pt4IuqOMx8h6+odH4uEqQ=
Subject key identifier:   EE:C2:A9:C6:DB:65:05:22:CC:89:A3:C1:D9:3A:45:80:D8:B8:65:EB
Certificate issuer:       /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
Certificate serial:       7CAC2B70CB36382129E1EF9136217B2521DBC3B3
Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3131392e31352e3133362e302f32332d3233203d3e2034383132.roa
Signing time:             Mon 13 Apr 2026 02:50:26 +0000
ROA not before:           Mon 13 Apr 2026 02:45:26 +0000
ROA not after:            Mon 12 Apr 2027 02:50:26 +0000
asID:                     4812
IP address blocks:        119.15.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ac:2b:70:cb:36:38:21:29:e1:ef:91:36:21:7b:25:21:db:c3:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
        Validity
            Not Before: Apr 13 02:45:26 2026 GMT
            Not After : Apr 12 02:50:26 2027 GMT
        Subject: CN=EEC2A9C6DB650522CC89A3C1D93A4580D8B865EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c0:69:4b:67:b2:8f:3b:74:fa:64:bc:14:44:
                    08:42:d0:64:ef:af:eb:67:8d:ba:44:fe:14:96:d9:
                    8e:cf:09:9f:99:cd:26:6d:b1:56:5c:22:25:9f:d6:
                    8c:0d:d2:cc:c6:f7:eb:c9:0b:6e:45:cf:69:b1:4b:
                    23:a5:48:ae:de:3c:5f:e0:89:aa:e7:eb:15:0c:01:
                    fb:8a:1d:86:31:15:f6:a0:64:a7:a5:12:a3:a5:cd:
                    28:b8:26:9e:e2:8e:c4:11:3f:33:92:62:74:a5:7e:
                    64:a0:9a:69:90:d9:8f:a9:49:1e:62:10:6e:26:89:
                    8e:42:20:8f:be:2e:8e:44:26:11:82:92:5e:c9:2e:
                    16:ad:3b:4b:dd:fe:08:e0:a0:39:89:1b:34:a3:7c:
                    c6:45:14:e5:b8:91:85:c6:9d:82:bb:01:81:84:c9:
                    6f:95:f7:af:b6:e9:de:a8:14:23:bb:30:99:3e:c3:
                    dc:07:03:39:38:43:5b:10:09:cf:c2:54:7a:e3:0b:
                    6c:f7:28:dd:c8:7f:30:be:8a:e7:39:8e:a5:6c:64:
                    86:7e:8d:b9:bf:3b:dd:5f:24:a1:b9:60:65:5d:8e:
                    1f:13:8b:20:8f:d3:eb:5c:64:2a:91:ad:8b:25:39:
                    ab:98:8b:1c:20:5e:a4:7e:15:dc:47:09:97:c7:f7:
                    15:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C2:A9:C6:DB:65:05:22:CC:89:A3:C1:D9:3A:45:80:D8:B8:65:EB
            X509v3 Authority Key Identifier:
                keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3131392e31352e3133362e302f32332d3233203d3e2034383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:6f:b4:a5:b0:ad:80:cf:39:c7:5f:50:b5:3c:23:bb:ee:31:
         a5:3b:2c:7b:89:6c:dd:ba:41:e1:e6:2d:7e:bb:60:f1:96:82:
         42:f4:d2:8a:07:46:a8:1f:87:84:49:af:d7:44:27:a2:70:da:
         d5:d8:27:4f:e9:a2:6c:c3:92:fe:cb:80:d3:d2:9f:81:d4:55:
         a6:84:b9:d5:3f:50:c7:53:f7:c0:11:ca:6d:9e:0d:ae:03:fb:
         1a:d2:01:da:22:20:c0:20:c5:b3:42:dd:26:1a:d2:72:57:e2:
         23:33:62:4c:56:36:25:e8:0f:d5:0e:f3:e7:a8:36:5b:5a:59:
         fe:7f:a9:1d:95:f5:70:81:0c:42:f4:ac:6f:ad:87:6c:0d:50:
         ed:e4:50:70:48:0a:7a:2d:36:f8:2f:41:04:47:84:f0:b6:73:
         e6:5d:c8:26:cd:d2:8e:36:8f:28:a0:48:87:7d:55:86:08:e8:
         88:01:e2:d8:4a:3e:f4:6c:c3:b9:ed:27:78:81:aa:66:7f:69:
         4a:cf:a5:b2:47:99:d6:2e:56:47:81:c8:9c:e0:e9:d7:26:8d:
         94:9c:a9:53:61:09:ed:6a:b2:28:0c:f9:12:73:ca:b8:ec:5e:
         6d:f7:e3:d8:4a:38:b9:fa:68:11:d5:21:a6:fd:41:0e:f4:7f:
         f4:45:de:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:16 2026 by rpki-client