Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e3130302e302f32332d3233203d3e2034383437.roa
File:                     3131392e35372e3130302e302f32332d3233203d3e2034383437.roa (raw, json)
Hash identifier:          Orfkkw48SSeSwjyaGj3QNBFsYJHeA1ZXh5iWXzJsxXM=
Subject key identifier:   14:4B:D8:C7:3F:51:C1:8B:90:16:FE:E1:A6:59:33:83:1D:8F:30:C2
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       22038A8B56442D82DFE09A1A6BFEA45CCEC09990
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e3130302e302f32332d3233203d3e2034383437.roa
Signing time:             Fri 22 May 2026 08:46:40 +0000
ROA not before:           Fri 22 May 2026 08:41:40 +0000
ROA not after:            Fri 21 May 2027 08:46:40 +0000
asID:                     4847
IP address blocks:        119.57.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:03:8a:8b:56:44:2d:82:df:e0:9a:1a:6b:fe:a4:5c:ce:c0:99:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 22 08:41:40 2026 GMT
            Not After : May 21 08:46:40 2027 GMT
        Subject: CN=144BD8C73F51C18B9016FEE1A65933831D8F30C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c4:8f:65:4b:33:41:eb:da:36:ac:8c:2d:86:
                    51:40:c8:d2:5a:07:3d:21:82:70:11:ae:c9:56:fe:
                    f2:63:cc:dc:a9:9a:4e:63:b8:f0:dc:01:54:44:c8:
                    fe:f2:81:31:17:71:a5:71:d2:ed:a3:a0:66:c4:2d:
                    94:ce:70:cd:3b:ae:60:ac:ee:e4:69:09:8d:f5:91:
                    f6:86:96:49:2a:31:36:e8:3c:02:31:9f:b9:ab:fa:
                    16:36:8c:19:3d:17:42:d4:e7:0d:87:dd:13:75:6b:
                    26:2a:71:02:24:86:73:ba:8c:bf:10:1a:2a:6c:0a:
                    8e:61:74:65:02:09:17:dd:48:07:46:ae:d1:c3:81:
                    70:81:e4:00:af:df:f9:0f:3b:22:fd:12:db:98:09:
                    a6:f7:59:c5:96:c4:9e:ca:27:90:8b:fe:39:e3:74:
                    b9:54:f0:bd:17:03:6a:43:9a:09:a5:4e:ec:0d:c0:
                    84:37:cc:d3:4a:11:7a:d2:93:e9:2c:1f:c9:2a:b0:
                    41:6b:ad:f5:1b:27:6e:9a:cc:56:be:e8:b6:b7:0c:
                    d2:4b:5c:c7:33:95:c8:21:02:08:a8:70:90:6b:dd:
                    7d:19:0b:b5:21:6a:01:92:08:08:12:96:35:ff:a1:
                    ce:b6:cc:92:57:c4:c4:a7:2a:40:03:6c:b5:96:4c:
                    57:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4B:D8:C7:3F:51:C1:8B:90:16:FE:E1:A6:59:33:83:1D:8F:30:C2
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e3130302e302f32332d3233203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.57.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:17:3d:4d:f8:c8:38:05:35:b5:13:b5:cf:12:6a:ec:18:4d:
         9a:46:25:4c:c7:bf:f0:20:4b:51:04:60:58:93:4c:91:cd:91:
         af:f5:a7:0b:7c:41:12:16:61:9d:4c:f1:b9:a6:27:d9:63:68:
         07:1c:7b:a8:f9:27:f7:08:e0:dd:bc:73:49:7b:15:34:bd:62:
         a7:23:a2:2b:2a:4f:2b:60:f3:8b:18:20:ef:3c:d9:c3:68:68:
         41:68:97:d6:96:aa:3a:73:99:e6:cd:e5:f3:18:b0:17:05:8e:
         7e:c6:76:f9:44:99:10:5d:42:28:0e:39:df:9e:e5:4f:05:6a:
         3a:8d:94:a7:71:38:e1:97:a0:b4:8e:a2:66:2f:d0:cc:43:54:
         f5:b1:8b:54:78:5a:b5:e5:90:cc:a0:08:20:af:0d:76:55:69:
         05:61:20:43:28:4d:bd:9f:14:ee:49:9e:e3:34:2a:a4:e2:d2:
         28:e0:df:0d:9a:0f:55:4e:9a:09:dd:22:a9:9d:f8:34:50:77:
         0c:c8:7e:05:42:e9:71:a7:e3:f7:9b:cd:7d:55:79:1d:0b:d0:
         ba:97:db:80:c9:ff:3b:f6:ae:7b:41:2a:1f:75:5b:28:57:bb:
         c3:0a:d2:fd:38:a4:d4:cd:4e:bc:17:5f:ca:28:26:d6:53:0c:
         b7:17:2a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:38 2026 by rpki-client