Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3132302e35322e302e302f31372d3137203d3e20313333313139.roa
File:                     3132302e35322e302e302f31372d3137203d3e20313333313139.roa (raw, json)
Hash identifier:          cxw4m2E6QDxJOytBH3MdiW9BjckPX/nI4ZY9XabVFVA=
Subject key identifier:   3F:C3:15:BD:5D:25:82:EE:C1:F9:15:1D:DD:C3:DF:E5:08:03:EC:92
Certificate issuer:       /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial:       77AB4811DFBAD9A0593F30D18207953FF01F7961
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3132302e35322e302e302f31372d3137203d3e20313333313139.roa
Signing time:             Fri 15 May 2026 09:13:26 +0000
ROA not before:           Fri 15 May 2026 09:08:26 +0000
ROA not after:            Fri 14 May 2027 09:13:26 +0000
asID:                     133119
IP address blocks:        120.52.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ab:48:11:df:ba:d9:a0:59:3f:30:d1:82:07:95:3f:f0:1f:79:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
        Validity
            Not Before: May 15 09:08:26 2026 GMT
            Not After : May 14 09:13:26 2027 GMT
        Subject: CN=3FC315BD5D2582EEC1F9151DDDC3DFE50803EC92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cc:79:b3:7e:33:de:1f:95:14:9f:36:55:d2:
                    b7:3a:12:18:78:31:56:64:d3:2e:9f:0c:3b:9f:51:
                    28:44:17:a6:ca:e8:97:f9:ff:53:6b:ac:3b:9a:7e:
                    4e:34:27:e8:ab:de:b0:ee:22:cd:95:09:51:04:a1:
                    31:25:eb:dd:0e:ed:87:4f:a7:a8:05:19:92:dd:98:
                    fa:dc:26:75:7f:fe:6b:dc:8d:71:a9:ab:d7:d0:57:
                    c7:80:3f:72:42:19:fe:55:a9:30:08:25:fe:fb:ec:
                    5a:ee:17:0e:60:46:fd:a3:7d:fc:5f:13:1b:02:38:
                    4f:8a:17:fa:51:f4:18:40:4c:84:87:5b:36:04:a7:
                    8c:a2:e7:78:e7:01:47:33:3e:1f:f8:df:26:9d:0d:
                    94:d9:a1:6b:07:42:c9:51:d1:4a:37:1f:d7:48:d3:
                    a5:10:1a:e3:70:d1:b0:c8:7c:e3:91:7c:72:89:4f:
                    30:7f:fe:67:51:d6:3d:5c:30:2f:7e:c8:db:6f:eb:
                    22:3c:74:15:a0:1b:55:3b:44:42:14:39:f0:0a:7b:
                    23:51:1c:da:f6:ed:0f:dd:14:f9:f1:b3:a8:31:ba:
                    0f:b7:3d:2d:1a:e6:3b:87:ff:c8:35:f2:b4:f8:89:
                    0e:25:92:a0:fe:65:74:8c:d5:7e:e8:b7:01:61:80:
                    59:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C3:15:BD:5D:25:82:EE:C1:F9:15:1D:DD:C3:DF:E5:08:03:EC:92
            X509v3 Authority Key Identifier:
                keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3132302e35322e302e302f31372d3137203d3e20313333313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.52.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1d:18:e7:9b:97:2d:db:48:03:9e:ca:56:f8:2a:cc:7f:39:eb:
         70:e4:22:8d:e3:ba:7e:2f:ff:f9:ee:37:70:75:5f:27:5b:b7:
         c1:48:9c:84:dc:7c:7c:39:81:16:88:9c:a0:91:3d:14:f6:37:
         db:8d:f8:01:e3:08:72:a9:53:a8:58:d4:ed:a3:73:5a:af:5f:
         22:c0:b7:e0:6e:47:93:5f:66:18:6a:63:5c:d6:14:f0:65:5b:
         d3:b8:b7:98:54:ff:69:98:49:68:4d:6c:f4:a6:37:75:87:51:
         02:27:2d:3f:b0:59:67:9a:59:75:10:31:5d:d6:f4:cc:6d:c9:
         d8:07:cd:15:9e:ce:a4:6c:ab:95:ef:f6:f4:db:82:59:9b:8f:
         80:b9:a2:07:8d:a3:94:0d:84:33:07:50:eb:94:30:0e:3a:e6:
         44:e2:b1:16:81:5e:66:49:c1:15:67:20:06:bd:2f:ed:0b:08:
         b0:ac:79:8f:41:aa:d1:04:5c:8f:ab:39:98:8e:2e:9e:44:cb:
         8b:14:bd:2d:0e:e2:f7:3a:b5:79:1f:76:28:fd:06:61:a6:01:
         ba:68:12:1f:d7:21:b4:62:8e:46:db:5d:a7:5c:03:5e:78:7d:
         18:61:f1:1e:b9:f9:50:12:86:b4:fa:56:41:15:1b:9b:08:95:
         c2:09:2a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:57:29 2026 by rpki-client