Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3135302e3234322e382e302f32322d3232203d3e20313333313139.roa
File:                     3135302e3234322e382e302f32322d3232203d3e20313333313139.roa (raw, json)
Hash identifier:          7RypYRKKe0fw2Cb95+LcCm5M/kLtsXSlBiw488J9xcc=
Subject key identifier:   44:5A:BC:E2:9B:1C:84:42:F6:33:AC:EF:BA:73:DE:03:64:B7:9C:D3
Certificate issuer:       /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial:       1D0AA4190AB8E884AF53E7D03A06FFBB1492091B
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3135302e3234322e382e302f32322d3232203d3e20313333313139.roa
Signing time:             Fri 15 May 2026 09:14:24 +0000
ROA not before:           Fri 15 May 2026 09:09:24 +0000
ROA not after:            Fri 14 May 2027 09:14:24 +0000
asID:                     133119
IP address blocks:        150.242.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0a:a4:19:0a:b8:e8:84:af:53:e7:d0:3a:06:ff:bb:14:92:09:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
        Validity
            Not Before: May 15 09:09:24 2026 GMT
            Not After : May 14 09:14:24 2027 GMT
        Subject: CN=445ABCE29B1C8442F633ACEFBA73DE0364B79CD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fe:d2:8f:a6:2d:22:95:ee:bb:3a:8c:a0:66:
                    a9:9f:af:b4:98:a3:09:f9:ca:d4:e5:47:fc:4a:1e:
                    7d:55:f4:92:1a:70:6d:3c:7a:ec:97:fe:af:e0:0e:
                    2a:f5:cb:3c:aa:fe:05:24:37:88:1c:55:f2:eb:5d:
                    ef:1a:88:5d:1a:f5:40:a9:42:f2:c2:ce:ed:6b:2c:
                    93:2b:a4:32:13:2c:dd:ec:99:66:fb:cc:e6:bb:d7:
                    ac:2a:08:57:48:31:f0:6d:1b:a4:47:f8:16:a7:59:
                    cb:4e:08:e3:25:b7:6a:8a:60:54:1a:ed:e3:8f:8f:
                    e5:02:75:c3:3e:7d:e7:0d:22:61:55:63:ab:cb:e5:
                    1a:58:a0:0e:62:99:7a:ba:36:28:38:dc:37:5e:7a:
                    db:8a:93:46:3c:d9:10:3b:b7:f5:1c:2e:4a:34:d9:
                    6c:92:e0:f0:c4:f7:a4:09:df:36:06:a7:6e:ac:aa:
                    e3:d1:ce:a8:4a:e1:7d:c5:c9:4d:18:96:ad:7c:46:
                    79:1b:cd:18:6d:33:7b:07:ce:6c:5e:3b:18:5f:b5:
                    07:47:73:fd:bd:af:10:f9:0b:2a:7e:c9:82:64:73:
                    c9:2a:79:e6:3b:bf:86:c4:64:49:5c:a8:01:1c:0d:
                    26:44:37:c9:86:58:18:11:e4:4b:1a:c5:f9:4a:a9:
                    70:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5A:BC:E2:9B:1C:84:42:F6:33:AC:EF:BA:73:DE:03:64:B7:9C:D3
            X509v3 Authority Key Identifier:
                keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3135302e3234322e382e302f32322d3232203d3e20313333313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.242.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:fb:a8:db:41:84:86:ec:3b:f0:d0:fc:4c:ed:79:4b:63:a6:
         f6:6c:f6:17:76:03:16:88:d5:73:3c:8f:f0:4b:8a:ba:69:33:
         7b:34:c5:f2:05:f9:82:37:7c:4e:bb:3d:9d:81:fa:be:db:2e:
         aa:a2:a6:03:af:e7:ab:f8:ec:59:62:c9:a8:0b:d5:53:84:7f:
         fd:9f:ae:4b:a3:fa:9d:5e:0a:75:a5:f0:ce:65:00:80:44:ca:
         9e:0f:f6:ad:7d:d4:c4:db:d6:a1:9e:a2:ef:8d:c1:67:ff:66:
         ff:77:d9:d2:78:aa:8b:aa:d7:57:c3:5a:6e:3e:84:a9:ff:e4:
         b9:6f:9b:a7:e6:21:9d:f3:e0:a8:11:dd:02:3c:b6:cb:9c:11:
         37:4e:3a:95:64:9b:8e:41:e1:38:38:af:c3:c0:0a:85:d7:2a:
         10:73:85:d9:aa:83:d8:3b:6c:74:10:5f:78:a9:3f:21:2c:ee:
         4a:4a:2d:91:24:00:c5:06:f0:ba:09:43:f9:2a:b5:f2:16:cd:
         32:89:d8:7a:c0:fa:c0:4f:ae:93:fb:08:d8:00:3f:da:d8:7b:
         1e:d9:35:6d:20:22:44:fa:3a:cb:e7:35:ef:88:22:89:b1:f7:
         80:52:59:68:b6:21:db:d5:fc:f0:84:03:58:3a:a7:37:6b:27:
         b0:83:2c:75
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:58 2026 by rpki-client