Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3131392e31352e3134312e302f32342d3234203d3e2034383132.roa
File:                     3131392e31352e3134312e302f32342d3234203d3e2034383132.roa (raw, json)
Hash identifier:          iiZs9oCDJ3ydR1g9N7+3kpsirBvuQMlUfkeknyeUI0Y=
Subject key identifier:   2F:A0:96:6F:F8:37:9B:64:FC:45:FD:DC:0D:82:F2:00:F3:62:38:BE
Certificate issuer:       /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
Certificate serial:       3E10D3738E3BDFF231D68486499EDC45E2E2CDA4
Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3131392e31352e3134312e302f32342d3234203d3e2034383132.roa
Signing time:             Mon 13 Apr 2026 02:50:25 +0000
ROA not before:           Mon 13 Apr 2026 02:45:25 +0000
ROA not after:            Mon 12 Apr 2027 02:50:25 +0000
asID:                     4812
IP address blocks:        119.15.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:10:d3:73:8e:3b:df:f2:31:d6:84:86:49:9e:dc:45:e2:e2:cd:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
        Validity
            Not Before: Apr 13 02:45:25 2026 GMT
            Not After : Apr 12 02:50:25 2027 GMT
        Subject: CN=2FA0966FF8379B64FC45FDDC0D82F200F36238BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:99:7d:15:ea:b1:fb:55:04:6a:83:0c:4d:94:
                    1d:97:d0:19:cf:63:bc:60:2d:3d:cc:d4:88:3f:2c:
                    93:df:81:08:06:bf:ec:d7:74:5d:2c:af:e7:84:ff:
                    9f:ac:9c:66:ca:88:f5:72:b2:6a:f8:b3:69:16:f8:
                    e2:d4:eb:bc:fd:c0:aa:c7:d8:e2:72:c4:ad:96:fa:
                    97:cc:ed:d4:11:7f:1a:ee:6f:2c:45:a4:22:b8:c3:
                    cf:1e:3c:85:36:27:68:ba:65:af:7e:26:8b:58:52:
                    9e:7b:0d:26:41:f0:55:7e:a0:ca:b9:d3:8a:55:aa:
                    03:ed:ab:82:a5:56:1a:8e:56:be:66:65:a0:0a:b0:
                    2b:fe:a9:41:a3:ed:9c:5b:f9:aa:0b:c3:79:c7:de:
                    93:db:33:f2:88:62:93:e8:62:d0:1e:47:46:cc:5e:
                    c1:61:f4:a1:0c:1d:6c:99:b8:ca:d4:86:7e:0f:2d:
                    6a:2d:09:f7:ba:32:26:90:d5:28:00:a9:f0:8a:be:
                    37:85:1d:d7:7f:3f:4f:9d:2a:c3:3d:26:63:13:ff:
                    8d:0f:14:11:66:69:d8:25:50:b8:7b:94:7b:98:e2:
                    1a:4f:1d:88:55:97:63:19:09:ce:9c:e8:47:65:7a:
                    58:d9:b0:dc:77:98:f4:15:bc:09:ad:fa:de:88:71:
                    da:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A0:96:6F:F8:37:9B:64:FC:45:FD:DC:0D:82:F2:00:F3:62:38:BE
            X509v3 Authority Key Identifier:
                keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3131392e31352e3134312e302f32342d3234203d3e2034383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:9d:a7:54:08:73:0a:e6:55:0a:43:a4:00:ba:14:08:82:89:
         60:8d:f5:e1:54:2b:fe:aa:92:26:bc:11:01:52:ca:5d:a9:83:
         59:c5:d6:f9:7e:0b:52:f6:a3:a8:37:0a:f1:5b:f1:ab:78:d9:
         39:6d:4a:15:d8:7e:d8:21:2c:a4:a9:20:42:96:de:45:7d:1e:
         0a:3f:5c:52:b7:b7:19:f5:93:3a:90:7d:fc:b0:0b:f0:19:f4:
         e5:df:ff:1e:0c:98:21:5d:70:dc:8a:ab:29:6a:b9:81:15:0c:
         85:27:1b:e9:71:dc:2c:ae:ca:54:69:4c:69:a3:23:60:a3:5c:
         e7:d9:4b:ac:83:83:27:eb:a5:77:9d:7a:ea:e7:4d:0a:f5:ee:
         af:74:82:11:54:36:2d:7b:d9:5c:8f:97:85:fb:60:bf:fb:d6:
         51:c1:d4:4b:05:9f:01:e9:36:f3:99:59:06:5c:45:2c:21:f7:
         ff:5a:0f:cb:5a:e1:d5:57:27:87:3f:00:a0:5b:0c:94:72:d3:
         66:3b:a9:47:2f:32:60:85:72:7e:cd:f4:76:7c:69:65:3f:08:
         b4:a5:78:7f:c1:0b:5d:50:a9:9e:29:49:cc:0d:48:33:2a:19:
         2b:4e:93:ca:5f:75:5d:c0:b2:93:13:f6:bf:5f:42:30:60:81:
         7b:60:96:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:28 2026 by rpki-client