Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e32352e302f32342d3234203d3e2034383437.roa
File:                     3131392e35372e32352e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          jQSLjBEp103rTVtCrNr/HGEHB/H7jVbV2ODWHsDOHB8=
Subject key identifier:   93:16:EC:58:65:04:09:4A:52:EE:E2:E1:BD:DD:A1:C8:A4:BD:B9:5F
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       4DFB968BF3E8FC7B11FD5003A32B1FA5356CD16C
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e32352e302f32342d3234203d3e2034383437.roa
Signing time:             Fri 22 May 2026 08:46:41 +0000
ROA not before:           Fri 22 May 2026 08:41:41 +0000
ROA not after:            Fri 21 May 2027 08:46:41 +0000
asID:                     4847
IP address blocks:        119.57.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:fb:96:8b:f3:e8:fc:7b:11:fd:50:03:a3:2b:1f:a5:35:6c:d1:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 22 08:41:41 2026 GMT
            Not After : May 21 08:46:41 2027 GMT
        Subject: CN=9316EC586504094A52EEE2E1BDDDA1C8A4BDB95F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5e:37:4d:b6:1b:4a:6a:8d:9b:43:76:f3:8a:
                    a7:11:44:a0:33:a0:69:4b:c6:eb:a8:aa:b1:ce:82:
                    be:5c:c1:f7:8c:a2:3f:db:9c:05:c2:08:42:53:51:
                    16:28:e2:fd:b2:92:04:35:83:a2:b0:c2:ad:b9:90:
                    b9:c8:79:a2:7c:37:e3:be:4f:4a:43:52:89:cd:29:
                    94:f1:21:18:99:ec:27:b4:49:74:1d:64:4c:2a:65:
                    3b:ae:bd:5a:20:fc:1f:b0:d8:db:3b:25:39:f6:cb:
                    3a:5c:c4:d4:f1:e3:d6:17:5b:ac:e2:68:77:05:51:
                    ec:90:64:2e:c8:55:1c:12:00:ec:ba:7d:ad:ed:59:
                    39:2f:5f:34:06:98:31:7d:9d:d7:73:6e:22:fa:92:
                    25:8f:6a:75:7e:90:47:7a:72:a8:ec:85:3f:3d:60:
                    34:21:d1:6c:82:ff:96:c0:b7:27:8b:fd:c8:3c:47:
                    a1:67:05:e4:bf:98:47:84:c9:01:50:f8:f6:e4:c7:
                    71:3b:a9:52:21:1e:71:a2:2e:29:01:03:0e:96:d0:
                    b0:cd:dc:69:a0:82:fb:13:1d:7d:bf:51:d0:4b:7d:
                    51:fd:34:78:26:50:db:88:fd:7b:a2:a0:43:a8:50:
                    98:3a:5b:c1:d4:92:7f:aa:52:54:92:78:f2:5c:88:
                    a9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:16:EC:58:65:04:09:4A:52:EE:E2:E1:BD:DD:A1:C8:A4:BD:B9:5F
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e32352e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.57.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:cb:d6:4d:40:33:44:cd:8e:dd:b8:1a:4b:8b:27:a2:27:ab:
         79:0c:85:1c:64:2c:c5:ee:a1:33:a6:de:3b:29:7e:63:94:36:
         e3:2e:82:71:e6:9d:78:f2:71:ac:2d:5b:45:9e:dc:50:77:93:
         52:ea:90:22:6c:6d:f1:16:30:7a:47:52:7c:ff:76:b8:62:7f:
         e0:46:77:b8:95:9c:2c:b0:f3:f3:eb:e9:2f:3c:44:46:fd:19:
         9f:99:7b:ac:ae:62:87:bb:43:25:8d:f6:c9:41:d6:50:ae:1d:
         1f:80:ce:dd:e5:67:c5:d5:26:b0:a6:a8:52:f1:58:b6:e8:6a:
         dd:da:d8:e1:73:3f:54:fb:0a:4f:b1:c5:52:73:f8:e5:9b:a4:
         6a:83:7f:1e:29:0d:ce:e3:a5:9f:e9:0a:45:03:e9:92:bb:30:
         39:11:24:ca:7d:9f:ef:fb:a8:18:08:b8:76:1e:cc:8e:fc:98:
         75:69:f1:c4:44:92:ea:10:4f:de:27:9a:d3:42:be:10:be:c7:
         47:b3:ad:4f:a8:92:ec:e3:ab:00:6a:ab:b2:2b:fd:73:d6:3e:
         2e:22:e1:29:61:a0:b8:d5:25:b2:cd:b8:40:5e:f1:6b:ee:13:
         56:ee:2d:28:87:d0:b6:63:49:d8:db:39:f4:b8:0b:59:50:2b:
         f4:d1:1d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:49 2026 by rpki-client