Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e35362e302f32312d3231203d3e2034383437.roa
File:                     3131392e35372e35362e302f32312d3231203d3e2034383437.roa (raw, json)
Hash identifier:          qUlF7bq/ajfGWBpKdNlqTK9Vcpr30CFZ6DoVhTEiP1o=
Subject key identifier:   E1:D9:E6:0B:67:8F:39:8E:FB:3B:03:C4:ED:44:2E:C5:87:4E:A8:14
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       13B7877CE3ADF9AF743EF94E734F00600F393024
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e35362e302f32312d3231203d3e2034383437.roa
Signing time:             Fri 22 May 2026 08:46:41 +0000
ROA not before:           Fri 22 May 2026 08:41:41 +0000
ROA not after:            Fri 21 May 2027 08:46:41 +0000
asID:                     4847
IP address blocks:        119.57.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b7:87:7c:e3:ad:f9:af:74:3e:f9:4e:73:4f:00:60:0f:39:30:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 22 08:41:41 2026 GMT
            Not After : May 21 08:46:41 2027 GMT
        Subject: CN=E1D9E60B678F398EFB3B03C4ED442EC5874EA814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8a:00:7b:bd:72:3e:43:48:3c:cf:8c:c8:dc:
                    d9:3f:1b:4f:a5:bc:eb:8e:3f:30:6b:04:04:04:65:
                    47:60:6a:37:f5:ed:f7:d5:4e:61:55:08:a0:00:ef:
                    43:38:b9:6e:29:9a:d8:83:65:76:52:7c:3c:9c:2a:
                    e1:00:78:99:da:c7:65:c5:3a:b2:44:94:34:65:f0:
                    cc:9a:ac:50:57:f4:e3:72:b3:43:77:d8:23:38:4e:
                    c6:f3:69:52:48:ef:b9:41:15:59:11:9a:02:d3:1f:
                    20:f8:41:83:22:42:8e:aa:eb:77:b5:2a:ae:fd:e5:
                    1f:c9:0e:52:b6:c8:24:19:e6:00:a2:a5:b6:f6:fc:
                    d4:39:fd:96:a5:c7:e7:2f:f5:a8:1b:68:0c:f6:ca:
                    c3:41:17:d1:a9:74:8e:2a:84:48:08:24:6e:c0:c5:
                    cc:9e:7b:7b:c6:16:f5:10:b3:02:05:23:d3:64:ea:
                    9e:1b:4f:78:ef:d1:08:e0:13:f5:ec:14:04:df:83:
                    90:d4:b1:a8:6a:0b:d7:d6:53:58:35:76:d4:78:58:
                    1c:78:5e:08:bd:e3:d7:9d:cc:20:24:d6:8a:fb:a6:
                    58:db:ac:fe:9f:8b:12:b8:e2:08:ae:4e:b2:fa:66:
                    d1:23:93:67:65:33:ae:00:13:5d:4c:c9:d6:83:6c:
                    46:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D9:E6:0B:67:8F:39:8E:FB:3B:03:C4:ED:44:2E:C5:87:4E:A8:14
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e35362e302f32312d3231203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.57.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         99:a1:36:d8:bd:50:8c:7b:a5:0d:35:d0:6e:76:ad:d9:70:e8:
         a9:35:1b:b2:c0:f5:af:02:f6:90:93:25:08:29:f5:f8:10:d5:
         77:c8:0f:9d:65:a8:d3:92:fe:3f:7d:cf:7a:07:10:ad:aa:b8:
         b2:28:fd:b2:fd:af:e4:86:6a:85:6b:bf:36:59:a3:5e:0c:4a:
         79:f8:e9:a6:1e:d7:3b:dd:d0:bb:d9:76:7b:a6:01:28:34:87:
         52:2d:ae:fb:03:e8:ed:51:83:cb:00:fe:a5:ff:c2:dc:b6:0d:
         e0:20:7b:19:e9:9c:ba:88:1a:3d:62:48:50:5f:7f:46:fc:89:
         4e:58:6f:8c:0c:72:89:9b:d0:a7:6c:15:56:1d:c2:55:3b:dc:
         b8:fb:81:f8:59:7a:9f:8a:54:38:79:26:6c:ae:51:f5:4e:de:
         ff:71:81:94:01:b4:08:19:cb:7c:71:96:4a:7e:24:3e:56:c5:
         55:ca:70:d3:ed:9f:6b:5b:a8:43:11:8f:62:2d:62:4d:ff:7c:
         b9:9a:18:d2:64:08:e9:dd:0e:9d:72:14:ce:63:fa:39:a9:6f:
         a1:f5:ee:6c:c5:0c:07:fd:d9:11:2c:03:c6:06:fe:62:27:72:
         cb:60:16:4b:69:b1:9c:0e:d8:08:04:ec:37:6b:30:3d:21:81:
         d6:17:84:76
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUE7eHfOOt+a90PvlOc08AYA85MCQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw
NDk1QzhDNDAeFw0yNjA1MjIwODQxNDFaFw0yNzA1MjEwODQ2NDFaMDMxMTAvBgNV
BAMTKEUxRDlFNjBCNjc4RjM5OEVGQjNCMDNDNEVENDQyRUM1ODc0RUE4MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChigB7vXI+Q0g8z4zI3Nk/G0+l
vOuOPzBrBAQEZUdgajf17ffVTmFVCKAA70M4uW4pmtiDZXZSfDycKuEAeJnax2XF
OrJElDRl8MyarFBX9ONys0N32CM4TsbzaVJI77lBFVkRmgLTHyD4QYMiQo6q63e1
Kq795R/JDlK2yCQZ5gCipbb2/NQ5/Zalx+cv9agbaAz2ysNBF9GpdI4qhEgIJG7A
xcyee3vGFvUQswIFI9Nk6p4bT3jv0QjgE/XsFATfg5DUsahqC9fWU1g1dtR4WBx4
Xgi949edzCAk1or7pljbrP6fixK44giuTrL6ZtEjk2dlM64AE11MydaDbEYrAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQU4dnmC2ePOY77OwPE7UQuxYdOqBQwHwYDVR0j
BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4
NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk1ODkwOTg1MjI2ODYyNTk1LzAvMzEzMTM5MmUzNTM3
MmUzNTM2MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzQzODM0Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAN3OTgwDQYJKoZIhvcNAQELBQADggEBAJmhNti9UIx7pQ010G52rdlw6Kk1G7LA
9a8C9pCTJQgp9fgQ1XfID51lqNOS/j99z3oHEK2quLIo/bL9r+SGaoVrvzZZo14M
Snn46aYe1zvd0LvZdnumASg0h1ItrvsD6O1Rg8sA/qX/wty2DeAgexnpnLqIGj1i
SFBff0b8iU5Yb4wMcomb0KdsFVYdwlU73Lj7gfhZep+KVDh5JmyuUfVO3v9xgZQB
tAgZy3xxlkp+JD5WxVXKcNPtn2tbqEMRj2ItYk3/fLmaGNJkCOndDp1yFM5j+jmp
b6H17mzFDAf92REsA8YG/mIncstgFktpsZwO2AgE7DdrMD0hgdYXhHY=
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:22 2026 by rpki-client