Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e35312e302f32342d3234203d3e2034383437.roa
File:                     3131392e35372e35312e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          PtSl2bBBHSfmlsNsoSthBjD78nsvd0l5QQamSmWiRkU=
Subject key identifier:   F3:A7:A3:FD:12:D0:13:2D:E5:F1:78:56:5C:D2:85:48:16:52:FB:59
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       0C4A1E83714023A7552B3995522AB64391108005
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e35312e302f32342d3234203d3e2034383437.roa
Signing time:             Fri 22 May 2026 08:46:42 +0000
ROA not before:           Fri 22 May 2026 08:41:42 +0000
ROA not after:            Fri 21 May 2027 08:46:42 +0000
asID:                     4847
IP address blocks:        119.57.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:4a:1e:83:71:40:23:a7:55:2b:39:95:52:2a:b6:43:91:10:80:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 22 08:41:42 2026 GMT
            Not After : May 21 08:46:42 2027 GMT
        Subject: CN=F3A7A3FD12D0132DE5F178565CD285481652FB59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:96:a0:b6:9a:20:ec:54:6b:93:fc:01:ec:2f:
                    ba:7b:bb:51:1c:f3:70:c4:a7:51:e7:7f:ea:f2:85:
                    40:bc:a3:87:6d:d8:67:b8:9a:9e:2b:94:4f:a6:1c:
                    75:45:60:ee:a0:04:10:8c:ec:a6:43:df:d9:a7:91:
                    83:79:29:05:bc:5b:6c:a5:f7:b4:7b:88:89:aa:5a:
                    19:12:5d:d8:42:b8:41:a2:98:b0:a6:b9:82:63:a8:
                    18:62:59:17:3a:78:2e:c1:ed:79:87:d7:5e:39:01:
                    23:e3:97:b3:01:7e:9e:31:47:ec:d9:8b:b3:41:e7:
                    2f:8d:38:ac:df:04:c8:79:4b:de:22:5f:73:f5:5c:
                    82:79:fb:10:b2:70:fd:96:52:db:f5:4f:e3:9f:71:
                    8c:73:5b:a9:a5:0f:6c:c8:4b:08:30:d6:08:cc:86:
                    c1:5d:6f:5d:ce:40:99:da:1e:d4:81:44:be:41:52:
                    83:69:9d:ea:f5:69:18:04:e1:a9:68:c6:72:7d:8d:
                    3f:9a:53:d6:cc:a0:b5:e5:d7:b9:45:19:00:1e:d9:
                    04:ec:58:01:7e:ed:e3:4f:d9:94:e8:ac:92:f6:45:
                    0e:3f:00:8c:27:52:ec:94:5c:10:83:26:91:86:c3:
                    27:fb:2e:4e:9f:bb:4f:8c:03:14:c0:1d:52:90:4a:
                    5c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A7:A3:FD:12:D0:13:2D:E5:F1:78:56:5C:D2:85:48:16:52:FB:59
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e35312e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.57.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:8c:eb:e9:b6:55:9b:eb:99:82:be:bd:95:32:42:e7:40:14:
         53:ab:f3:57:73:9f:9e:6e:a3:ba:2d:2a:3a:4f:3d:62:39:74:
         f4:1b:00:df:f5:be:a1:6a:fd:f8:4d:46:e0:8a:07:45:15:2e:
         dd:3a:fc:31:dd:b2:77:e6:f1:7e:1c:f7:98:3d:5a:e9:da:c6:
         f3:f7:e7:eb:8b:de:f2:49:8d:27:ff:69:0c:20:f7:7d:a1:7e:
         f8:dc:aa:3f:38:0b:7e:38:be:3c:0b:0d:09:2c:2f:57:b7:27:
         3e:5f:ca:0e:74:60:76:10:e7:68:e7:44:35:b7:67:3d:7f:0c:
         ea:90:43:5b:ae:be:8d:86:f9:0e:22:78:94:fa:fd:f1:2e:3d:
         cd:5e:f7:ff:bb:12:95:26:a3:38:6f:8f:00:f4:ab:d6:91:c5:
         f0:1c:af:4a:ac:15:ee:0b:d6:93:7d:f2:88:7d:f3:23:50:fe:
         f4:79:4c:3c:c5:31:2c:af:14:7f:a3:75:8b:04:e1:56:85:68:
         ae:e8:40:7a:d8:57:f7:31:4c:9a:25:90:ed:63:a1:97:3b:89:
         8b:e7:1d:78:ba:80:a7:27:de:73:ce:28:bb:0b:e7:84:94:01:
         95:75:df:4f:cb:e5:3f:a8:81:06:95:38:83:13:62:6b:65:92:
         ba:4d:81:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:07 2026 by rpki-client