Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3131392e31352e3134302e302f32342d3234203d3e2034383132.roa
File:                     3131392e31352e3134302e302f32342d3234203d3e2034383132.roa (raw, json)
Hash identifier:          HnuA7sY67JCdIKygqMB5pRKk8VyJBnV37OTStjv4ilI=
Subject key identifier:   4D:07:F1:27:2A:93:7B:6A:4E:AF:C4:38:56:93:14:8D:68:83:4B:E1
Certificate issuer:       /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
Certificate serial:       735CE9F26BCAFE0EB8E5F0B560A22A3E6F0603FE
Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3131392e31352e3134302e302f32342d3234203d3e2034383132.roa
Signing time:             Mon 13 Apr 2026 02:50:26 +0000
ROA not before:           Mon 13 Apr 2026 02:45:26 +0000
ROA not after:            Mon 12 Apr 2027 02:50:26 +0000
asID:                     4812
IP address blocks:        119.15.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:5c:e9:f2:6b:ca:fe:0e:b8:e5:f0:b5:60:a2:2a:3e:6f:06:03:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
        Validity
            Not Before: Apr 13 02:45:26 2026 GMT
            Not After : Apr 12 02:50:26 2027 GMT
        Subject: CN=4D07F1272A937B6A4EAFC4385693148D68834BE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8a:63:6b:ff:ee:02:a6:0d:21:7a:c5:16:0c:
                    d3:fe:46:83:44:87:60:6e:54:e2:70:dc:d0:80:54:
                    68:4e:c2:ec:0f:ee:f9:91:7d:64:0d:51:ad:30:be:
                    38:96:af:38:74:5f:23:17:67:a0:0c:7b:35:cd:79:
                    57:38:b7:30:6b:07:66:b5:06:34:ae:7d:ed:ad:9e:
                    ab:6a:27:6e:b9:11:de:06:ce:ec:19:59:e4:11:0b:
                    f0:02:56:00:73:85:92:aa:e9:9d:d7:2f:34:b1:d6:
                    71:30:c1:b3:dd:06:d8:41:f4:2e:77:f7:f7:ab:df:
                    54:cb:d4:a2:32:06:4f:d9:99:f7:f5:0d:b5:ce:0c:
                    c7:20:de:8a:41:24:a3:80:10:8f:58:7c:23:c5:c0:
                    c7:b1:80:22:51:b5:4d:1d:57:a1:85:50:7d:b5:ab:
                    d2:5a:22:1d:8c:73:0a:d8:42:4f:19:cd:da:17:af:
                    bb:3c:d6:6a:33:6b:57:0b:af:fa:1f:13:5f:19:3d:
                    40:10:a0:4e:1b:a2:9d:46:a0:fe:09:87:02:ae:fe:
                    12:34:1e:fa:63:d6:e4:c6:e0:87:0a:a2:61:cb:72:
                    c9:3f:ce:6a:98:43:03:a8:59:33:4e:e0:07:e1:05:
                    75:ec:cc:41:6d:e2:36:48:ab:2e:e9:3e:38:cd:ed:
                    77:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:07:F1:27:2A:93:7B:6A:4E:AF:C4:38:56:93:14:8D:68:83:4B:E1
            X509v3 Authority Key Identifier:
                keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3131392e31352e3134302e302f32342d3234203d3e2034383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:31:c9:12:cb:69:9f:85:fe:1f:72:0b:2e:d6:85:1b:46:48:
         1f:7c:3c:e9:41:19:0b:54:92:13:b6:29:cb:3c:b1:71:ef:4b:
         fc:71:bb:20:ad:14:ed:22:21:c4:f6:1a:50:2a:56:d3:ea:49:
         a6:6e:75:0c:c5:f6:90:78:4d:89:37:ef:26:ac:06:f2:74:55:
         d1:6b:29:6d:0a:9b:ca:4a:b8:d2:c6:e7:99:62:ef:fd:9d:c4:
         6e:7a:46:e9:2f:8b:32:9d:78:1f:dd:64:89:a0:85:88:95:27:
         0d:d5:ac:d1:e6:73:ab:be:e8:0b:6e:5e:00:43:ba:09:d0:39:
         59:f8:db:75:4a:34:cc:69:fe:c1:b3:23:f2:53:27:f3:21:c8:
         42:99:e3:40:6d:f3:57:c4:d0:7a:2e:6a:f1:c0:32:23:4d:7c:
         3a:d0:70:ce:d1:d9:8d:9c:34:7e:ea:93:94:c0:43:89:8e:c0:
         c1:3e:88:90:96:e2:49:d9:b8:d3:b0:e2:10:4e:de:bd:33:bc:
         5b:96:e6:14:a9:65:3b:d7:60:fd:88:9f:c1:98:f7:99:58:af:
         b3:0c:ae:50:05:6f:52:e2:45:50:5c:1e:be:3f:f8:3d:08:25:
         35:05:a4:d9:e5:19:79:08:5c:72:46:1c:16:43:cf:6b:ad:ed:
         82:71:4f:c7
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUc1zp8mvK/g645fC1YKIqPm8GA/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG
NzU0QkYzRjAeFw0yNjA0MTMwMjQ1MjZaFw0yNzA0MTIwMjUwMjZaMDMxMTAvBgNV
BAMTKDREMDdGMTI3MkE5MzdCNkE0RUFGQzQzODU2OTMxNDhENjg4MzRCRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeimNr/+4Cpg0hesUWDNP+RoNE
h2BuVOJw3NCAVGhOwuwP7vmRfWQNUa0wvjiWrzh0XyMXZ6AMezXNeVc4tzBrB2a1
BjSufe2tnqtqJ265Ed4GzuwZWeQRC/ACVgBzhZKq6Z3XLzSx1nEwwbPdBthB9C53
9/er31TL1KIyBk/Zmff1DbXODMcg3opBJKOAEI9YfCPFwMexgCJRtU0dV6GFUH21
q9JaIh2McwrYQk8ZzdoXr7s81moza1cLr/ofE18ZPUAQoE4bop1GoP4JhwKu/hI0
Hvpj1uTG4IcKomHLcsk/zmqYQwOoWTNO4AfhBXXszEFt4jZIqy7pPjjN7XctAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUTQfxJyqTe2pOr8Q4VpMUjWiDS+EwHwYDVR0j
BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD
NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk1ODg3ODgwMDgzMDEzNjM1LzAvMzEzMTM5MmUzMTM1
MmUzMTM0MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzEzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAHcPjDANBgkqhkiG9w0BAQsFAAOCAQEAAzHJEstpn4X+H3ILLtaFG0ZIH3w8
6UEZC1SSE7Ypyzyxce9L/HG7IK0U7SIhxPYaUCpW0+pJpm51DMX2kHhNiTfvJqwG
8nRV0WspbQqbykq40sbnmWLv/Z3EbnpG6S+LMp14H91kiaCFiJUnDdWs0eZzq77o
C25eAEO6CdA5WfjbdUo0zGn+wbMj8lMn8yHIQpnjQG3zV8TQei5q8cAyI018OtBw
ztHZjZw0fuqTlMBDiY7AwT6IkJbiSdm407DiEE7evTO8W5bmFKllO9dg/YifwZj3
mVivswyuUAVvUuJFUFwevj/4PQglNQWk2eUZeQhcckYcFkPPa63tgnFPxw==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:20:55 2026 by rpki-client