Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3132302e35322e34342e302f32322d3232203d3e20313333313139.roa
File:                     3132302e35322e34342e302f32322d3232203d3e20313333313139.roa (raw, json)
Hash identifier:          5eoePW4FsHA6+AGMUCbvO5+q+BzlDmfc4YZWtysdweA=
Subject key identifier:   ED:24:0C:2D:5C:9F:3D:67:E6:7D:7D:0F:2C:E6:61:8A:C8:AC:3A:EF
Certificate issuer:       /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial:       26C28911D57FF9CB86602FB7676E7D06B4115B91
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3132302e35322e34342e302f32322d3232203d3e20313333313139.roa
Signing time:             Fri 15 May 2026 09:11:07 +0000
ROA not before:           Fri 15 May 2026 09:06:07 +0000
ROA not after:            Fri 14 May 2027 09:11:07 +0000
asID:                     133119
IP address blocks:        120.52.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c2:89:11:d5:7f:f9:cb:86:60:2f:b7:67:6e:7d:06:b4:11:5b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
        Validity
            Not Before: May 15 09:06:07 2026 GMT
            Not After : May 14 09:11:07 2027 GMT
        Subject: CN=ED240C2D5C9F3D67E67D7D0F2CE6618AC8AC3AEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d6:1f:bc:f5:f1:7c:14:84:b2:50:89:3a:53:
                    82:64:12:2c:26:f3:20:80:be:09:0c:0d:9c:f5:ae:
                    44:2d:36:54:01:5c:d9:a1:86:ac:1b:7f:0f:8d:7e:
                    2a:56:3e:c2:c9:79:10:27:de:b5:88:5e:af:a0:ef:
                    18:3a:eb:bf:8e:ab:7b:4a:89:7a:7e:2d:aa:af:16:
                    2b:2b:f0:06:ff:bf:6b:b9:e7:4e:99:17:bd:50:5d:
                    3d:d6:7e:db:3d:bf:a1:8e:e4:a3:b2:91:1a:88:47:
                    85:68:3e:48:dc:67:bc:f6:5e:4b:95:01:29:3e:79:
                    91:d0:ff:c4:9f:e8:d9:d4:c6:90:d0:2f:b9:29:3d:
                    8d:3f:ec:43:76:aa:dc:e9:5b:9d:f8:85:9e:f0:51:
                    bb:e7:d5:26:cc:49:fe:74:91:49:50:f9:03:0f:62:
                    4a:19:e8:c0:f5:7a:74:5b:f2:ad:14:a1:f3:dd:c6:
                    d2:b4:32:2a:3d:77:b7:64:cf:b9:cb:9f:a6:15:88:
                    b2:d0:3e:8b:8b:48:37:02:b2:09:c6:77:4b:4b:b9:
                    2d:23:c0:ca:64:0c:a8:e1:86:7d:25:bc:fd:7e:38:
                    d2:e1:34:83:03:0f:4b:63:31:b9:28:00:7e:4d:a4:
                    e9:b9:2a:ae:95:60:e6:16:fa:5a:ce:24:f7:08:b4:
                    6a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:24:0C:2D:5C:9F:3D:67:E6:7D:7D:0F:2C:E6:61:8A:C8:AC:3A:EF
            X509v3 Authority Key Identifier:
                keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3132302e35322e34342e302f32322d3232203d3e20313333313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.52.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:62:6f:a3:e5:e1:0c:e4:c4:45:48:a0:59:b3:04:01:cb:b3:
         d6:4b:09:cb:f2:e2:fb:af:c7:40:9b:2f:64:f0:2e:ba:4a:33:
         25:78:c0:5d:96:a2:fb:0e:1f:5a:75:09:46:43:66:c5:ea:00:
         84:e4:ac:bd:9c:3c:df:cb:f5:54:34:c2:54:29:16:3e:c0:07:
         2e:93:29:51:ec:35:a8:72:2a:2c:6f:75:f6:0a:d6:87:f9:f4:
         5d:29:af:23:bf:bb:e0:ca:e0:4a:4d:c1:0f:70:4e:69:2c:e3:
         16:3e:dd:84:bf:97:7a:2f:3e:c2:30:05:08:2d:5b:94:97:de:
         9f:e0:6a:fe:bc:df:b9:d6:cb:22:86:f4:46:e0:90:29:49:fc:
         36:93:4a:ca:b5:40:36:22:9a:84:92:dd:29:79:e0:5f:76:e3:
         74:af:c9:b8:e8:a9:4f:6f:9a:7a:cb:fa:66:d0:9b:bd:2f:e7:
         22:b4:2b:48:6b:b3:2a:ed:86:65:87:9c:94:7c:92:ed:70:5b:
         e3:a4:96:81:ea:9e:6f:67:b6:7b:cc:88:b6:c7:e4:9e:5c:4c:
         73:b4:74:03:e7:99:73:ac:42:df:1c:1d:dd:63:43:cc:08:0f:
         57:61:34:ad:b1:4d:f8:ef:e2:a6:12:9e:13:97:ed:3b:8b:eb:
         2c:94:7b:d3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:46 2026 by rpki-client