Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e3133362e302f32322d3232203d3e2034383437.roa
File:                     3131392e35372e3133362e302f32322d3232203d3e2034383437.roa (raw, json)
Hash identifier:          yNmjz7tL8+Bn4CaapYpaEppT98Ord+55kdmHfwq7Vkg=
Subject key identifier:   B8:32:18:4E:EE:D1:A6:58:A5:4C:BF:E2:79:55:84:5E:EC:05:C3:6F
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       432E13D196B2A5B1A33EF1929225A86C0C6377DD
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e3133362e302f32322d3232203d3e2034383437.roa
Signing time:             Fri 22 May 2026 08:49:44 +0000
ROA not before:           Fri 22 May 2026 08:44:44 +0000
ROA not after:            Fri 21 May 2027 08:49:44 +0000
asID:                     4847
IP address blocks:        119.57.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:2e:13:d1:96:b2:a5:b1:a3:3e:f1:92:92:25:a8:6c:0c:63:77:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 22 08:44:44 2026 GMT
            Not After : May 21 08:49:44 2027 GMT
        Subject: CN=B832184EEED1A658A54CBFE27955845EEC05C36F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7a:9e:5b:09:38:1e:42:e0:13:f8:3b:42:d8:
                    33:e9:43:ad:df:5b:22:88:77:83:81:d3:34:d3:0d:
                    a6:a4:f0:05:7e:56:1b:ef:b0:f6:ca:82:90:00:f0:
                    f0:61:f1:73:b6:f2:31:b9:a9:3b:a2:56:66:65:e4:
                    4b:33:ad:de:83:09:b4:64:f2:ad:ee:50:e3:c6:a6:
                    ce:37:66:a8:13:b9:9f:89:f3:6c:88:45:16:3b:a4:
                    60:e2:8d:aa:7c:4a:a7:a5:1f:37:14:17:c2:20:3b:
                    25:30:7e:be:a4:74:93:9f:58:9c:28:c7:09:01:a9:
                    de:0c:c7:8e:12:11:7a:d0:4b:ce:b7:35:8a:54:ca:
                    c6:10:fa:b3:33:11:97:70:44:ee:5f:7c:fc:db:cc:
                    4c:3d:41:8e:af:9b:3c:5d:15:1a:f8:a3:ea:56:09:
                    97:34:1b:dc:d9:d6:a1:45:0c:8b:a6:cb:0a:c1:85:
                    13:39:40:3d:3d:2a:fe:02:d1:34:d4:d4:2a:55:9a:
                    c9:aa:43:eb:dc:02:04:e1:4c:e8:6d:f1:28:81:a4:
                    43:a8:45:f9:f2:7b:f6:c8:a9:a3:e5:b3:32:04:04:
                    a3:39:87:a7:05:b0:f8:69:eb:54:5a:55:76:49:69:
                    1b:0b:c6:6d:3b:68:ef:fd:cb:a6:9d:00:a2:9f:20:
                    5c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:32:18:4E:EE:D1:A6:58:A5:4C:BF:E2:79:55:84:5E:EC:05:C3:6F
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e3133362e302f32322d3232203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.57.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:6a:0a:6c:f4:47:11:c3:67:18:84:29:71:15:86:98:1b:af:
         6b:ad:88:22:f0:38:4a:c6:60:c0:e6:64:4b:99:2e:dc:14:c3:
         e6:49:66:d8:ea:53:57:87:01:21:ae:c1:31:9a:92:a1:77:47:
         30:c3:08:88:88:47:e0:4d:35:96:66:eb:61:e3:18:a3:75:60:
         b8:e2:21:4e:22:ca:07:a1:5d:54:0a:42:0d:dc:a2:e3:cf:5d:
         ec:df:18:26:78:0e:43:f4:7e:42:64:45:ed:78:69:a5:55:99:
         97:16:0c:a7:6a:75:1a:1d:44:3d:46:19:7d:ff:51:82:ce:a6:
         e4:7f:9a:f6:8b:39:b1:b7:94:37:8e:ac:76:f7:83:72:dc:48:
         c2:56:c2:95:4b:cc:a8:15:35:d1:c7:a4:d1:cd:ac:02:68:a0:
         2e:33:81:9f:67:e8:65:68:73:12:d7:15:bf:8c:60:7d:bd:f5:
         e0:45:e6:e8:6a:22:79:28:90:6c:e7:96:7c:b6:bb:7e:7b:51:
         ae:30:af:7f:ba:5d:e9:96:6c:9f:6f:46:59:0a:42:7b:f8:b1:
         fa:23:ba:de:39:db:67:81:1f:f4:49:15:2b:af:ae:4f:a4:31:
         c5:a8:eb:72:f1:8d:dd:20:4a:7d:86:67:34:ac:5f:ab:b0:cf:
         46:30:d1:57
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUQy4T0ZaypbGjPvGSkiWobAxjd90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw
NDk1QzhDNDAeFw0yNjA1MjIwODQ0NDRaFw0yNzA1MjEwODQ5NDRaMDMxMTAvBgNV
BAMTKEI4MzIxODRFRUVEMUE2NThBNTRDQkZFMjc5NTU4NDVFRUMwNUMzNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiep5bCTgeQuAT+DtC2DPpQ63f
WyKId4OB0zTTDaak8AV+VhvvsPbKgpAA8PBh8XO28jG5qTuiVmZl5Eszrd6DCbRk
8q3uUOPGps43ZqgTuZ+J82yIRRY7pGDijap8SqelHzcUF8IgOyUwfr6kdJOfWJwo
xwkBqd4Mx44SEXrQS863NYpUysYQ+rMzEZdwRO5ffPzbzEw9QY6vmzxdFRr4o+pW
CZc0G9zZ1qFFDIumywrBhRM5QD09Kv4C0TTU1CpVmsmqQ+vcAgThTOht8SiBpEOo
Rfnye/bIqaPlszIEBKM5h6cFsPhp61RaVXZJaRsLxm07aO/9y6adAKKfIFwvAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUuDIYTu7RplilTL/ieVWEXuwFw28wHwYDVR0j
BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4
NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk1ODkwOTg1MjI2ODYyNTk1LzAvMzEzMTM5MmUzNTM3
MmUzMTMzMzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAnc5iDANBgkqhkiG9w0BAQsFAAOCAQEAL2oKbPRHEcNnGIQpcRWGmBuva62I
IvA4SsZgwOZkS5ku3BTD5klm2OpTV4cBIa7BMZqSoXdHMMMIiIhH4E01lmbrYeMY
o3VguOIhTiLKB6FdVApCDdyi489d7N8YJngOQ/R+QmRF7XhppVWZlxYMp2p1Gh1E
PUYZff9Rgs6m5H+a9os5sbeUN46sdveDctxIwlbClUvMqBU10cek0c2sAmigLjOB
n2foZWhzEtcVv4xgfb314EXm6GoieSiQbOeWfLa7fntRrjCvf7pd6ZZsn29GWQpC
e/ix+iO63jnbZ4Ef9EkVK6+uT6QxxajrcvGN3SBKfYZnNKxfq7DPRjDRVw==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:56 2026 by rpki-client