Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3132302e35322e3132382e302f31372d3137203d3e20313333313139.roa
File:                     3132302e35322e3132382e302f31372d3137203d3e20313333313139.roa (raw, json)
Hash identifier:          uFOfohZk9A/UaKLNvNgYstYqj7nDfW1AbiiPFY8mFqg=
Subject key identifier:   31:51:D3:51:B6:EA:5A:F8:80:7C:3F:C3:CF:EC:53:11:9F:F8:01:1E
Certificate issuer:       /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial:       6BC14CFD34BE0F55F8159C54908F9CE8554FBA3B
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3132302e35322e3132382e302f31372d3137203d3e20313333313139.roa
Signing time:             Fri 15 May 2026 09:13:50 +0000
ROA not before:           Fri 15 May 2026 09:08:50 +0000
ROA not after:            Fri 14 May 2027 09:13:50 +0000
asID:                     133119
IP address blocks:        120.52.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c1:4c:fd:34:be:0f:55:f8:15:9c:54:90:8f:9c:e8:55:4f:ba:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
        Validity
            Not Before: May 15 09:08:50 2026 GMT
            Not After : May 14 09:13:50 2027 GMT
        Subject: CN=3151D351B6EA5AF8807C3FC3CFEC53119FF8011E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2f:77:04:99:3f:97:bb:e8:37:87:e5:e4:f7:
                    9f:10:6d:26:e5:3e:fe:01:6b:02:95:a5:d2:30:36:
                    d8:d5:0b:59:e3:c8:02:12:d3:f6:44:de:ad:3d:66:
                    b3:c3:db:b9:84:10:89:cf:ab:db:1c:24:de:8a:74:
                    dc:ee:48:00:2d:ef:cf:b6:3c:05:3f:2a:cf:47:f6:
                    45:2a:0d:b1:14:45:6b:77:8d:20:6e:ad:a4:cb:ac:
                    b0:02:d9:5f:bf:ab:d2:1d:e3:1e:e6:ea:9e:c2:bc:
                    11:8f:f4:e6:0d:f0:f4:48:55:25:7c:8f:e8:4a:4c:
                    81:72:06:71:2f:2a:8c:cf:63:ce:61:37:ce:ac:38:
                    a8:84:f1:b0:0e:c8:23:28:f0:e9:e1:7e:f4:2c:37:
                    2a:22:d3:5e:b8:aa:c1:2a:ef:95:32:0f:f4:9b:fa:
                    3d:06:61:90:fa:1d:4a:f3:af:14:20:3f:8b:0d:a0:
                    3f:00:4b:c4:db:ce:fd:44:a1:28:6a:5f:3b:cd:a4:
                    a6:39:4e:6b:8c:d3:7f:05:51:d7:8a:9c:f4:5f:af:
                    dc:9f:38:57:a7:6e:ce:c4:e8:f4:a8:ab:4d:9f:13:
                    2d:75:d0:48:b8:f7:ea:9f:27:a7:d5:54:2a:cb:d5:
                    05:e4:67:65:b8:49:bb:a4:8f:78:54:28:c3:f1:85:
                    08:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:51:D3:51:B6:EA:5A:F8:80:7C:3F:C3:CF:EC:53:11:9F:F8:01:1E
            X509v3 Authority Key Identifier:
                keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3132302e35322e3132382e302f31372d3137203d3e20313333313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.52.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         78:19:2e:65:2a:13:97:90:ea:c9:bf:76:4b:6e:d4:7c:f6:b0:
         e5:67:71:f6:14:69:73:eb:65:2d:89:1d:2e:4e:bf:75:0f:6a:
         74:e6:86:13:3d:69:68:28:d0:e2:82:9e:d9:af:51:16:37:52:
         f7:28:5a:37:3a:8a:0a:e2:56:50:90:c0:21:f6:b4:af:08:de:
         63:d4:1b:9c:53:8b:ef:95:c2:0e:e0:2b:6d:3c:31:bc:62:27:
         04:ef:11:f6:e1:0f:a8:6a:58:da:9f:41:21:4a:66:ae:f7:c7:
         2b:b9:41:05:dc:f6:ba:19:9d:06:b5:b7:72:d4:2f:67:8d:14:
         32:c0:7b:09:7e:94:16:79:86:30:dc:ab:4a:90:e3:5c:27:73:
         c3:68:90:57:df:1a:32:cc:00:35:23:63:5b:31:81:64:73:25:
         c8:8a:24:4e:90:41:b1:50:a0:3a:85:18:11:ff:12:3b:57:a3:
         4b:22:04:9a:f3:ea:55:73:df:15:20:d3:a7:37:2f:f3:81:35:
         9f:88:e1:23:ad:d6:2a:2b:02:50:9f:73:46:9b:fd:fd:ee:4e:
         f3:f8:d5:10:5d:fa:57:90:6d:b6:1f:ff:a9:c6:c3:f8:a0:03:
         87:3f:8c:ca:46:89:dc:6f:06:2f:e7:52:50:27:75:df:b1:c2:
         f2:92:21:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:57:49 2026 by rpki-client