Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3132302e35322e39352e302f32342d3234203d3e20313333313139.roa
File:                     3132302e35322e39352e302f32342d3234203d3e20313333313139.roa (raw, json)
Hash identifier:          R51nQLKw2HptpiaPCgfsEfm4QqyyaGazDDe6wunLOZY=
Subject key identifier:   26:B3:71:AF:43:5D:4E:20:3B:43:49:89:E2:CC:61:84:F2:48:9F:85
Certificate issuer:       /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial:       0E5AFE424CD8B26DE85ECA341D9E90B963679C85
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3132302e35322e39352e302f32342d3234203d3e20313333313139.roa
Signing time:             Fri 15 May 2026 09:11:37 +0000
ROA not before:           Fri 15 May 2026 09:06:37 +0000
ROA not after:            Fri 14 May 2027 09:11:37 +0000
asID:                     133119
IP address blocks:        120.52.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:5a:fe:42:4c:d8:b2:6d:e8:5e:ca:34:1d:9e:90:b9:63:67:9c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
        Validity
            Not Before: May 15 09:06:37 2026 GMT
            Not After : May 14 09:11:37 2027 GMT
        Subject: CN=26B371AF435D4E203B434989E2CC6184F2489F85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2d:7c:c6:49:81:f6:2a:94:0b:df:4a:07:bb:
                    a2:7e:f7:78:10:1c:42:7d:4b:2c:b9:42:ea:81:38:
                    4d:a7:b5:36:da:7c:15:ea:83:d9:c7:2b:ef:72:79:
                    ff:ed:a0:a9:b1:13:9b:cb:bf:07:ae:e2:30:17:49:
                    19:70:21:4f:9c:f3:b1:1d:d0:02:3a:ce:24:db:17:
                    53:4d:18:48:0e:7f:14:dc:99:ac:80:13:42:c9:e5:
                    4d:d6:37:cd:be:af:01:b9:76:3e:86:8a:01:25:4b:
                    fd:6c:35:e8:34:f8:29:27:a6:ef:34:56:a8:bb:20:
                    62:3a:66:db:7b:f2:c8:dc:65:31:7b:73:ab:db:09:
                    7b:af:3d:da:3b:28:8c:ff:fb:f3:73:ef:37:9f:73:
                    62:f1:5c:34:75:65:d5:f6:68:0d:de:b0:8b:75:a7:
                    3c:7b:9a:57:dc:16:33:02:a9:44:2d:3b:73:81:2c:
                    91:38:f0:f2:43:a7:1e:06:3e:7d:c2:5a:3a:90:88:
                    af:66:1e:d7:e7:7c:3d:ba:73:b0:8d:12:e4:53:ea:
                    2a:f5:5a:79:2a:39:c0:22:eb:e9:f4:ef:5f:1d:95:
                    07:6d:ae:f2:db:2b:cc:ab:20:99:ff:b6:1b:d1:df:
                    48:37:b5:e7:29:95:ec:35:ba:50:66:d4:29:e8:ba:
                    0b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B3:71:AF:43:5D:4E:20:3B:43:49:89:E2:CC:61:84:F2:48:9F:85
            X509v3 Authority Key Identifier:
                keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3132302e35322e39352e302f32342d3234203d3e20313333313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.52.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:1c:93:44:09:6d:c3:5a:a1:a4:28:0a:95:48:f3:4b:b3:95:
         08:61:17:0c:19:ab:fb:a1:70:cd:f8:8b:fa:31:a9:9b:73:14:
         74:e1:ab:f9:d1:b3:9f:db:12:3a:4e:be:92:6e:1a:f2:af:66:
         fa:f0:91:a5:98:59:8d:6f:df:b7:58:2b:9d:9c:53:10:ef:06:
         4a:f5:ee:a1:53:ba:35:4b:ac:80:95:e9:a0:47:90:ac:89:03:
         3e:da:f2:6d:6f:a3:0b:ce:9b:2c:64:db:95:96:f8:15:0e:65:
         1f:a0:6e:8c:b3:a9:42:cf:0c:7b:a9:d7:6a:ba:30:60:e6:5c:
         e3:be:cc:55:e1:be:1e:4e:65:6c:73:11:fa:d5:95:ee:05:a5:
         51:4c:9f:36:3b:10:12:bb:b9:2f:ea:ed:80:13:b7:ac:9a:a7:
         6f:d3:49:5e:03:05:bf:1c:92:b8:b2:18:f1:5f:60:b1:0f:da:
         99:e1:26:e0:a1:96:99:81:2d:d2:52:a5:6f:e1:36:70:12:a6:
         a0:ef:31:92:08:e2:83:04:f5:80:ba:1d:1d:cf:b4:5d:dc:e5:
         9c:9e:96:ba:dc:8a:25:f9:af:39:04:03:75:d0:6a:56:60:a8:
         0b:e8:48:d6:40:e9:69:80:22:09:cc:c4:50:a1:61:6f:d7:ee:
         91:52:0c:45
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:32 2026 by rpki-client