Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3132302e35322e33322e302f32312d3231203d3e20313333313139.roa
File:                     3132302e35322e33322e302f32312d3231203d3e20313333313139.roa (raw, json)
Hash identifier:          VWkEGs3EU7wTTWkNqmaBHpGIHrmBPJJ4zbD7jaxGHe4=
Subject key identifier:   4A:6E:BF:1E:EC:E5:26:2D:BC:20:F5:0B:2D:4E:DB:72:11:A0:5F:69
Certificate issuer:       /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial:       4525E74B791FEC022887DA474D7D84215808CF40
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3132302e35322e33322e302f32312d3231203d3e20313333313139.roa
Signing time:             Mon 01 Jun 2026 06:36:53 +0000
ROA not before:           Mon 01 Jun 2026 06:31:53 +0000
ROA not after:            Mon 31 May 2027 06:36:53 +0000
asID:                     133119
IP address blocks:        120.52.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 14:27:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:25:e7:4b:79:1f:ec:02:28:87:da:47:4d:7d:84:21:58:08:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
        Validity
            Not Before: Jun  1 06:31:53 2026 GMT
            Not After : May 31 06:36:53 2027 GMT
        Subject: CN=4A6EBF1EECE5262DBC20F50B2D4EDB7211A05F69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ca:4b:c5:da:b4:14:05:ef:05:48:db:47:71:
                    ed:50:ed:30:69:1f:e1:34:5c:f8:3a:8e:f9:1b:f3:
                    94:ac:7d:36:71:72:99:9e:21:fb:d5:b9:6c:8b:ce:
                    c5:59:27:13:34:fa:a5:e1:1e:73:c0:7f:5f:16:f2:
                    bc:a3:fc:68:ab:0c:90:ff:26:d0:1a:40:43:d0:a7:
                    7d:40:51:11:ac:78:b0:ec:95:fe:99:64:93:45:6d:
                    19:7b:76:e3:9d:c9:f5:f6:4c:16:5e:bd:96:40:fd:
                    2f:76:ee:e2:ce:4e:04:af:72:3d:9a:71:9d:d3:f9:
                    5e:77:0f:63:67:ee:43:02:c1:c3:da:32:d7:7f:ae:
                    1a:d5:9c:bf:b7:a3:5f:56:c5:c8:df:52:36:51:ab:
                    92:14:49:1c:87:c2:e9:6b:2e:8d:5f:e4:fb:74:6e:
                    a8:70:49:65:21:a9:dc:4b:d2:47:d0:e1:09:e8:cc:
                    59:2e:1f:e4:6b:d5:04:e8:58:ed:bc:0f:85:06:98:
                    f9:c3:eb:aa:81:42:b7:cd:ae:85:e7:22:8b:9e:33:
                    8e:16:82:8a:d8:37:70:3f:10:6b:97:c1:ad:41:f1:
                    2c:ca:77:d6:36:e1:4c:0d:bf:c9:79:55:5a:be:cb:
                    b0:78:f5:b2:0c:bf:32:b0:ec:c6:72:69:a6:70:fc:
                    4c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6E:BF:1E:EC:E5:26:2D:BC:20:F5:0B:2D:4E:DB:72:11:A0:5F:69
            X509v3 Authority Key Identifier:
                keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3132302e35322e33322e302f32312d3231203d3e20313333313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.52.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5f:fb:31:52:19:7a:fd:a4:e1:d9:b0:25:f0:06:a3:f1:62:9b:
         02:46:80:e8:be:cc:de:d5:48:11:ca:d5:0f:6f:e6:8e:35:c3:
         85:df:43:69:6d:29:ba:a4:4a:7e:14:3d:04:a2:bf:17:5b:c1:
         35:42:fd:37:02:26:0f:f6:55:1f:82:8c:03:cb:75:66:73:da:
         5e:18:1a:5b:26:6a:e1:18:f9:ca:ff:6b:c8:87:c1:b7:3c:e3:
         42:72:74:8d:2b:4e:a4:20:f3:96:13:b8:ee:8a:ad:92:a1:6a:
         5a:f0:72:2e:29:49:c8:40:7b:33:a5:4e:05:69:fc:a0:e4:a7:
         4d:1c:7b:66:99:88:9f:e1:24:42:db:92:45:99:68:48:27:a9:
         12:ab:da:09:a4:cb:63:49:d2:35:83:4b:00:5f:fc:c3:11:1b:
         fd:c1:0e:aa:a4:f0:d2:c0:1a:9e:c2:ca:9d:12:ec:23:6e:3c:
         c1:ff:af:53:a1:77:dd:9f:00:a9:37:70:4e:12:3c:0c:45:4f:
         51:6a:62:5d:75:bd:54:e8:41:5b:d1:9d:ac:72:8f:41:e3:43:
         68:1f:1a:49:20:c9:f4:86:ac:69:8c:8e:84:eb:74:89:0a:ba:
         1e:a9:f8:3d:4f:6c:7c:c3:8c:f9:bb:11:ec:99:63:59:5f:60:
         ff:a1:0e:5f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:06:51 2026 by rpki-client