Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e3136302e302f32302d3230203d3e2034383437.roa
File:                     3131392e35372e3136302e302f32302d3230203d3e2034383437.roa (raw, json)
Hash identifier:          k1Q9qgARYN1zAiqqWbxR9FPlzk2oii4Sztq9lb0jjZM=
Subject key identifier:   0B:68:8D:18:3E:91:69:CB:06:CA:70:DA:36:BB:4B:62:81:35:60:14
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       5D8CB6B80FEB6B422E9825B89BD4E3BE3A4519EE
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e3136302e302f32302d3230203d3e2034383437.roa
Signing time:             Fri 22 May 2026 08:49:44 +0000
ROA not before:           Fri 22 May 2026 08:44:44 +0000
ROA not after:            Fri 21 May 2027 08:49:44 +0000
asID:                     4847
IP address blocks:        119.57.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:8c:b6:b8:0f:eb:6b:42:2e:98:25:b8:9b:d4:e3:be:3a:45:19:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 22 08:44:44 2026 GMT
            Not After : May 21 08:49:44 2027 GMT
        Subject: CN=0B688D183E9169CB06CA70DA36BB4B6281356014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a7:78:73:71:4c:2c:dc:15:00:1f:ed:3b:bc:
                    3d:3a:34:4f:72:f5:e3:c8:0c:0b:ea:ed:33:96:2f:
                    1e:3c:7b:4e:fc:8e:23:b2:a2:65:dd:89:fc:ec:d8:
                    18:08:28:91:48:0d:d0:78:fa:65:a0:db:a9:1e:d3:
                    e4:ba:e5:b7:1e:6f:98:9a:3c:f8:b9:f2:b5:cf:80:
                    66:27:b4:77:13:b1:49:8d:b8:4f:f3:24:76:09:50:
                    26:82:aa:57:7e:ed:0b:29:08:cb:99:57:6a:35:54:
                    37:e4:46:f6:6f:3b:10:6c:a2:70:e2:e1:39:24:d3:
                    be:2d:7f:22:e2:8a:28:9f:25:f6:d9:58:1c:a6:99:
                    7b:4b:5c:64:a9:82:b9:e5:34:97:0c:2b:6f:23:7b:
                    f2:fd:e0:9c:91:e3:7c:69:ae:bc:29:c2:5e:63:23:
                    2d:cb:47:96:c8:6d:6a:fe:ae:5d:69:3f:8f:ee:de:
                    4e:4d:ed:da:a2:80:d1:28:b0:5f:02:be:e6:8a:44:
                    0a:9b:f7:3a:97:bb:45:ae:12:cc:13:7b:47:02:92:
                    24:3f:d1:04:3e:b4:3b:6d:5a:fc:2f:5d:07:de:26:
                    ad:df:82:6c:03:e5:c0:22:bb:e6:8a:28:b1:f6:53:
                    83:44:7b:ab:e6:bc:e5:94:8c:c2:84:f8:02:dd:bb:
                    c2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:68:8D:18:3E:91:69:CB:06:CA:70:DA:36:BB:4B:62:81:35:60:14
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e3136302e302f32302d3230203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.57.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         73:fb:e7:2f:40:22:53:5e:90:ce:72:d4:b4:f4:87:02:08:1f:
         43:81:3e:28:ba:35:1f:1d:0a:c2:e1:5e:ee:3e:b6:2e:b4:16:
         0d:64:b4:1a:10:25:77:d5:f9:89:5b:b4:9f:17:f4:a9:15:29:
         96:09:5e:51:2d:94:90:74:cd:78:b1:f3:4c:83:d4:aa:e8:5a:
         5c:5e:57:d0:69:be:7c:9b:22:3c:ac:db:ff:d6:d1:20:fe:c8:
         bf:d9:a9:0e:f5:79:bd:5e:6a:17:97:98:82:2f:46:7e:6e:a5:
         af:7e:3c:79:df:97:63:06:b0:f9:33:68:34:83:98:4c:a1:49:
         4d:06:f4:20:cf:02:93:64:e9:b2:c7:7e:c5:13:e4:7b:e8:4b:
         0a:2a:e8:23:8b:70:6a:69:72:4b:9e:4b:7a:66:f6:4a:83:8d:
         b8:bd:00:d1:14:d2:ed:b7:37:dc:27:61:cb:37:b1:ba:22:cb:
         e8:f6:f9:19:47:db:b9:34:55:e2:ea:69:aa:02:eb:ab:08:fd:
         89:29:91:25:47:62:71:c5:28:c2:54:cb:b6:31:6e:d6:ba:13:
         24:ee:74:48:35:b8:bf:3b:2f:19:45:b0:58:73:c6:ce:2a:72:
         fb:44:3a:f8:72:89:d6:c3:96:07:ba:f8:f8:27:6f:ea:23:3d:
         bd:b5:b6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:30 2026 by rpki-client