Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131362e3235352e3132382e302f31372d3137203d3e2034383337.roa
File:                     3131362e3235352e3132382e302f31372d3137203d3e2034383337.roa (raw, json)
Hash identifier:          OIQNHYoSLKIBpe7rvo4tbhbbjhiqeDEZ0gkKtToT+JM=
Subject key identifier:   D5:14:27:6D:83:B8:C3:86:B4:5E:B6:6C:6F:84:10:6D:7F:35:86:C0
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       1585DA4A3345E69BB5182273378F23B544C1E5FA
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131362e3235352e3132382e302f31372d3137203d3e2034383337.roa
Signing time:             Mon 13 Apr 2026 02:00:55 +0000
ROA not before:           Mon 13 Apr 2026 01:55:55 +0000
ROA not after:            Mon 12 Apr 2027 02:00:55 +0000
asID:                     4837
IP address blocks:        116.255.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 08:35:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:85:da:4a:33:45:e6:9b:b5:18:22:73:37:8f:23:b5:44:c1:e5:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: Apr 13 01:55:55 2026 GMT
            Not After : Apr 12 02:00:55 2027 GMT
        Subject: CN=D514276D83B8C386B45EB66C6F84106D7F3586C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5d:c4:f7:53:17:ff:82:bd:77:60:d5:9d:2b:
                    1d:68:0f:12:e9:3a:31:56:e6:65:5a:76:e2:5a:de:
                    e4:a9:3a:d4:87:cf:ad:57:a4:58:fa:b0:e0:1d:77:
                    39:da:5c:94:30:2b:5e:76:83:ba:3b:87:21:33:09:
                    ff:38:6c:e6:0d:cf:19:47:5d:35:94:5c:5b:3c:57:
                    3e:cb:ea:fe:d3:e3:a9:e2:f0:e5:ce:e6:a2:8b:d7:
                    c2:27:d5:44:f8:dd:b1:a8:f9:00:d4:79:c7:30:3f:
                    b3:b4:77:98:57:01:e6:92:61:71:92:a1:05:52:f8:
                    07:34:bf:b8:37:b3:6a:ea:5d:26:f6:11:c7:c5:c0:
                    e2:b8:64:68:6c:54:c1:b3:f7:af:c8:ba:f9:0d:ef:
                    90:a6:3a:5a:a7:69:e7:da:f5:0a:fe:3b:2b:bf:49:
                    1c:f9:63:5e:d0:0a:b7:61:75:f5:ba:ac:13:a2:3b:
                    1b:89:a0:30:6e:58:81:9d:67:d2:2e:cc:87:9e:ea:
                    cf:81:7c:90:78:f1:00:d7:90:53:1c:f8:65:45:53:
                    ab:4f:aa:1e:6b:20:2b:fe:78:ea:7f:6f:44:7f:47:
                    b3:56:b8:8c:b9:3a:8c:b3:df:f1:ae:b0:5a:e3:c5:
                    9c:45:f2:67:28:93:fe:62:77:0b:1a:21:89:18:98:
                    de:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:14:27:6D:83:B8:C3:86:B4:5E:B6:6C:6F:84:10:6D:7F:35:86:C0
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131362e3235352e3132382e302f31372d3137203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.255.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         54:5e:99:a6:28:4a:18:4c:10:99:82:fe:99:a9:83:1a:be:5f:
         12:cb:59:c5:10:8b:5e:18:3f:29:70:15:70:51:87:35:72:03:
         7f:d3:db:e9:fc:7a:33:20:50:1b:3b:8b:a4:e5:26:83:c6:96:
         4b:f0:29:99:06:d1:87:3d:0d:a3:42:18:a7:c6:3a:f3:a6:b6:
         e4:5d:b9:49:f3:e7:8d:08:08:56:48:f2:16:82:6a:92:e6:3a:
         a7:1c:5b:04:90:e3:3a:a0:f2:55:71:c3:b8:41:45:39:de:71:
         51:d5:ad:35:f3:d2:ac:52:01:c4:31:2c:20:5e:f2:c7:69:2c:
         0c:d5:82:01:f0:97:97:ce:5e:56:da:be:11:53:02:29:c5:0e:
         15:b1:d2:f5:69:8a:76:9f:7c:86:c3:ee:35:4a:61:87:ce:67:
         e9:a7:bb:1c:fd:89:f8:ba:c3:80:7f:dc:94:32:86:fe:85:a1:
         81:d8:3a:9f:33:c6:98:75:73:4b:97:88:bb:04:d9:aa:d3:24:
         ab:a6:de:36:91:01:81:c5:91:c8:90:9a:ee:54:f1:d8:57:d1:
         8b:5b:d0:d4:6d:96:b8:8f:4d:bb:0f:86:96:1f:2f:b4:f0:c7:
         a7:1f:c1:5e:4a:d9:13:b1:eb:b0:73:3d:0d:eb:11:9e:53:63:
         b0:f0:02:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:34 2026 by rpki-client