Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113606036054343699/0/3132322e302e39362e302f32302d3230203d3e203234343232.roa
File:                     3132322e302e39362e302f32302d3230203d3e203234343232.roa (raw, json)
Hash identifier:          Ja8cOr88YvnZATrU28wxxZEEKg9qD+UwbHDMP26tZ0Q=
Subject key identifier:   17:A2:03:90:76:D5:D3:AB:56:1B:F2:31:5F:76:C7:6C:E8:72:CF:60
Certificate issuer:       /CN=644DEF11BE48198BC5CBDC05F25E712AB41AE3B6
Certificate serial:       3A160CB0149F23A77F28315DC8DE96FD9176E547
Authority key identifier: 64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/3132322e302e39362e302f32302d3230203d3e203234343232.roa
Signing time:             Sun 31 May 2026 23:26:03 +0000
ROA not before:           Sun 31 May 2026 23:21:03 +0000
ROA not after:            Sun 30 May 2027 23:26:03 +0000
asID:                     24422
IP address blocks:        122.0.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 18:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:16:0c:b0:14:9f:23:a7:7f:28:31:5d:c8:de:96:fd:91:76:e5:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644DEF11BE48198BC5CBDC05F25E712AB41AE3B6
        Validity
            Not Before: May 31 23:21:03 2026 GMT
            Not After : May 30 23:26:03 2027 GMT
        Subject: CN=17A2039076D5D3AB561BF2315F76C76CE872CF60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6b:4b:db:6a:99:0d:03:f7:11:60:89:e7:96:
                    a8:44:23:c7:08:0b:a2:71:2c:ca:40:e4:fc:a1:ba:
                    93:a4:2b:86:85:d2:96:00:a2:f7:c0:e7:8e:83:d9:
                    97:27:65:6a:d8:71:2d:c4:b7:cb:56:05:a5:d5:fb:
                    5e:c3:bc:56:31:4d:6a:c8:19:30:bf:f1:0a:63:1c:
                    ab:f0:14:cf:90:fd:a0:1a:0f:47:e3:32:13:17:67:
                    26:a5:ff:28:5c:3a:d5:7f:fe:e2:da:4d:88:d3:b4:
                    6f:47:4b:36:a4:df:cd:4a:69:09:40:53:9a:e8:01:
                    ab:89:13:ed:8c:21:c5:ad:b6:45:58:55:b5:29:be:
                    d0:18:b4:e0:6c:23:49:90:e0:f5:16:e4:95:0d:a3:
                    eb:cd:1a:9f:e2:9c:1a:52:0a:45:9e:9e:d4:4c:80:
                    11:e0:fb:02:a4:8a:cf:fe:9b:42:ea:c4:3e:51:34:
                    9b:46:4d:e5:89:e2:db:e0:6f:5e:1e:bc:1e:e7:a9:
                    25:83:3a:c3:29:c9:71:43:47:6d:6a:ec:e3:82:d5:
                    29:8c:53:a7:1f:0a:c1:4d:af:f8:2f:25:d8:c6:cb:
                    7f:17:36:1c:98:24:a1:77:8b:e8:dd:24:89:fb:6b:
                    11:f2:9f:5f:f8:87:fc:a3:96:6f:8a:3a:97:aa:26:
                    73:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A2:03:90:76:D5:D3:AB:56:1B:F2:31:5F:76:C7:6C:E8:72:CF:60
            X509v3 Authority Key Identifier:
                keyid:64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/3132322e302e39362e302f32302d3230203d3e203234343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.0.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         98:24:fe:9b:bc:bb:c8:17:a2:aa:5b:0e:44:77:83:72:90:9d:
         b5:21:e0:b1:fc:46:4e:a1:a1:d8:1f:b6:76:4e:0c:e7:d2:18:
         b3:ba:5b:03:51:59:3a:9d:0d:6c:d2:95:20:04:53:3f:59:c5:
         33:d4:ff:02:23:53:cf:db:c6:33:79:ac:8a:d1:5b:dd:5a:04:
         5c:79:8e:f6:35:f3:22:9d:a3:f1:d5:1d:f3:5a:3b:0b:05:dd:
         5f:d4:e3:10:c5:2b:83:63:83:ce:b4:8c:ca:b6:7f:d5:df:37:
         fd:10:e6:bf:57:30:96:60:79:3e:7e:95:33:57:ba:98:e5:3f:
         da:18:1d:98:73:7b:7e:dc:d6:8f:60:76:3c:14:79:4c:94:2a:
         a1:fa:fa:cf:a5:a6:61:54:22:6d:01:d2:fb:a5:cd:ea:f4:62:
         f3:f5:f9:c0:22:b7:34:a8:b1:38:a0:c5:35:b7:bc:d4:6b:4e:
         e2:d8:5d:e7:1b:ca:80:25:00:4d:88:35:1b:03:2f:ad:32:22:
         63:ac:99:4f:c7:47:6a:80:26:f0:f1:94:91:e3:80:9d:c1:a7:
         23:9a:62:c0:56:ab:ab:6e:fe:2a:b2:af:b8:60:c5:4b:7b:86:
         fc:f3:10:17:4a:d4:28:37:00:a0:d8:88:c2:fa:16:43:0b:e3:
         f3:43:1c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:03 2026 by rpki-client