Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e3130322e302f32342d3234203d3e2034383437.roa
File:                     3131392e35372e3130322e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          rzdNF4V3gKNSgnPlvS2zE/uSqYz/f4xTJdIrMYMnQAg=
Subject key identifier:   37:D3:BE:D5:19:26:8A:B1:FF:D2:4C:43:56:1D:AC:A3:1F:C7:7F:DA
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       386CC68B22C38819D43FB7636BAD8FE9C2C532F7
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e3130322e302f32342d3234203d3e2034383437.roa
Signing time:             Fri 22 May 2026 08:51:32 +0000
ROA not before:           Fri 22 May 2026 08:46:32 +0000
ROA not after:            Fri 21 May 2027 08:51:32 +0000
asID:                     4847
IP address blocks:        119.57.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:6c:c6:8b:22:c3:88:19:d4:3f:b7:63:6b:ad:8f:e9:c2:c5:32:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 22 08:46:32 2026 GMT
            Not After : May 21 08:51:32 2027 GMT
        Subject: CN=37D3BED519268AB1FFD24C43561DACA31FC77FDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:13:ec:2f:6c:be:02:e6:f4:b2:b4:53:f3:47:
                    d9:6e:4a:09:3a:62:93:68:87:4c:17:50:96:32:d5:
                    4a:86:bd:26:1f:2e:70:d6:91:82:8e:0c:00:2d:a2:
                    a0:ac:dc:dd:ba:b9:b9:dd:38:7d:a2:7d:75:28:c9:
                    22:0a:fe:f5:44:34:ca:13:2f:19:c6:e6:62:57:d5:
                    74:b3:ca:52:49:4a:1f:18:e6:80:70:0c:7e:42:7c:
                    ca:8b:5e:09:5f:2b:19:7c:5d:10:9b:88:6e:2d:69:
                    40:3a:83:d0:25:53:96:2d:7a:8a:00:28:df:64:ee:
                    1a:70:a7:87:47:6a:20:61:87:ff:98:fa:96:a6:3f:
                    10:38:f4:81:02:64:ec:ea:50:13:3b:1b:2a:3c:ed:
                    a7:6f:8f:d8:48:69:5d:93:e7:56:71:d1:52:60:aa:
                    7e:6a:cb:d7:ce:45:5c:5e:08:66:78:a2:62:16:6e:
                    fc:39:ed:8a:02:25:ba:2e:1f:a7:87:8a:ea:d1:93:
                    50:8c:0f:40:f7:25:64:34:43:ef:c3:d6:48:2c:62:
                    ca:a5:69:4f:45:4a:ae:4f:32:d0:0e:c1:8e:45:01:
                    87:9e:4c:ba:59:a4:04:dd:02:d7:43:53:77:a4:68:
                    48:a1:ce:25:e7:f9:5f:28:e4:89:7a:49:80:16:01:
                    7d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D3:BE:D5:19:26:8A:B1:FF:D2:4C:43:56:1D:AC:A3:1F:C7:7F:DA
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e3130322e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.57.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:c8:86:c1:17:c8:2d:4a:ad:86:eb:79:ee:45:32:f1:7a:a7:
         4d:0e:25:77:9a:68:94:d4:43:10:2c:3e:49:b4:ba:92:a3:5c:
         f9:fd:b2:2a:5b:20:61:5c:bb:b6:30:cb:26:f5:92:50:17:c2:
         de:47:d5:e3:fd:93:2d:c1:1d:03:2e:82:60:e4:c3:a6:24:bc:
         c8:f5:27:b3:e1:ec:ec:a3:c5:87:4c:7e:61:3e:31:7d:ad:48:
         67:fe:89:76:5b:24:db:d1:3e:1e:8d:00:09:3b:40:58:7a:3d:
         13:22:1c:1a:4d:3d:87:62:ee:e0:ef:d5:85:64:16:00:92:6e:
         b4:f4:a6:40:27:94:aa:f3:ce:82:fa:36:60:87:1e:59:e6:80:
         8f:98:d5:2a:16:ca:d5:7b:72:55:eb:9d:18:8c:5c:c9:e2:64:
         71:08:95:9a:59:68:a8:2e:19:59:5a:ff:b1:9a:0d:bd:d0:26:
         2e:70:c6:cb:b3:5e:11:22:42:ae:47:33:56:77:40:ae:c3:a5:
         30:05:26:67:ee:97:c7:a9:f0:53:51:ef:99:da:e2:eb:5c:ac:
         ad:64:97:b6:bc:63:de:3f:74:d8:a4:32:f1:91:47:9d:3d:c0:
         60:42:a4:ba:7b:c4:fb:fa:33:6a:32:2d:bb:01:5e:47:1e:83:
         1b:5a:97:70
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUOGzGiyLDiBnUP7dja62P6cLFMvcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw
NDk1QzhDNDAeFw0yNjA1MjIwODQ2MzJaFw0yNzA1MjEwODUxMzJaMDMxMTAvBgNV
BAMTKDM3RDNCRUQ1MTkyNjhBQjFGRkQyNEM0MzU2MURBQ0EzMUZDNzdGREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcE+wvbL4C5vSytFPzR9luSgk6
YpNoh0wXUJYy1UqGvSYfLnDWkYKODAAtoqCs3N26ubndOH2ifXUoySIK/vVENMoT
LxnG5mJX1XSzylJJSh8Y5oBwDH5CfMqLXglfKxl8XRCbiG4taUA6g9AlU5YteooA
KN9k7hpwp4dHaiBhh/+Y+pamPxA49IECZOzqUBM7Gyo87advj9hIaV2T51Zx0VJg
qn5qy9fORVxeCGZ4omIWbvw57YoCJbouH6eHiurRk1CMD0D3JWQ0Q+/D1kgsYsql
aU9FSq5PMtAOwY5FAYeeTLpZpATdAtdDU3ekaEihziXn+V8o5Il6SYAWAX0/AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUN9O+1RkmirH/0kxDVh2sox/Hf9owHwYDVR0j
BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4
NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk1ODkwOTg1MjI2ODYyNTk1LzAvMzEzMTM5MmUzNTM3
MmUzMTMwMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAHc5ZjANBgkqhkiG9w0BAQsFAAOCAQEAKciGwRfILUqthut57kUy8XqnTQ4l
d5polNRDECw+SbS6kqNc+f2yKlsgYVy7tjDLJvWSUBfC3kfV4/2TLcEdAy6CYOTD
piS8yPUns+Hs7KPFh0x+YT4xfa1IZ/6Jdlsk29E+Ho0ACTtAWHo9EyIcGk09h2Lu
4O/VhWQWAJJutPSmQCeUqvPOgvo2YIceWeaAj5jVKhbK1XtyVeudGIxcyeJkcQiV
mlloqC4ZWVr/sZoNvdAmLnDGy7NeESJCrkczVndArsOlMAUmZ+6Xx6nwU1Hvmdri
61ysrWSXtrxj3j902KQy8ZFHnT3AYEKkunvE+/ozajItuwFeRx6DG1qXcA==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:19 2026 by rpki-client