Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e382e302f32332d3233203d3e2034383437.roa
File:                     3131392e35372e382e302f32332d3233203d3e2034383437.roa (raw, json)
Hash identifier:          iRHs1juaE/oIdUr1OkpyMv1uZx4f74cJ5+dMPGjAxvQ=
Subject key identifier:   5D:08:56:7B:D3:AA:AB:3D:46:46:F8:2F:BB:B3:DF:B9:19:7C:3F:79
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       047AD38C7C4AD3DC3BFF282032291ADE08700DDA
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e382e302f32332d3233203d3e2034383437.roa
Signing time:             Fri 22 May 2026 08:46:42 +0000
ROA not before:           Fri 22 May 2026 08:41:42 +0000
ROA not after:            Fri 21 May 2027 08:46:42 +0000
asID:                     4847
IP address blocks:        119.57.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7a:d3:8c:7c:4a:d3:dc:3b:ff:28:20:32:29:1a:de:08:70:0d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 22 08:41:42 2026 GMT
            Not After : May 21 08:46:42 2027 GMT
        Subject: CN=5D08567BD3AAAB3D4646F82FBBB3DFB9197C3F79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:91:80:4f:18:70:35:7a:7f:8b:19:db:6f:3c:
                    6a:10:ad:31:02:44:fe:a7:b5:5f:6f:93:78:1f:ad:
                    c8:e9:5a:47:aa:59:65:d4:cd:5e:17:c4:f9:06:28:
                    46:48:6a:52:3b:35:1f:1e:98:1c:9c:05:75:3c:18:
                    c1:0e:95:6b:7d:54:0e:f7:bb:32:ab:5e:0e:8d:c6:
                    09:f9:d1:aa:44:71:68:c5:71:e5:c7:9a:03:95:13:
                    6c:7c:de:00:7c:7c:ec:91:f1:2b:47:3f:c0:ca:df:
                    0f:1f:74:86:63:75:cc:2b:5e:cb:a3:73:4c:b8:cd:
                    55:d4:d1:34:15:c2:b8:f9:38:34:b6:ce:2b:f8:eb:
                    f3:f6:b3:ca:8e:7a:24:0a:4f:95:0a:18:d7:4e:bb:
                    38:09:71:08:c9:c7:a4:07:6a:23:9c:c5:43:a3:71:
                    e6:5e:3b:cd:0b:10:19:1c:86:93:d7:db:09:94:0e:
                    04:bd:be:70:a1:72:86:8d:78:a7:d5:8e:36:c4:8d:
                    7a:db:a3:e4:0e:8a:af:57:95:47:e5:32:a0:17:39:
                    3b:f3:9b:75:13:8f:f2:c9:b9:27:e9:f7:4e:97:42:
                    32:d5:b8:01:e1:23:98:1b:eb:50:cb:77:b0:7f:e4:
                    25:41:68:ab:f6:b1:01:6c:7e:53:ff:b6:4e:85:f5:
                    2f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:08:56:7B:D3:AA:AB:3D:46:46:F8:2F:BB:B3:DF:B9:19:7C:3F:79
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e382e302f32332d3233203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.57.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:ee:1c:03:2c:77:c4:94:93:b0:0a:95:1a:d5:49:66:85:8f:
         a6:16:80:54:15:82:cc:21:4b:36:d3:f5:a7:3c:4e:79:26:b1:
         26:91:89:bd:0d:88:19:d6:79:68:8c:96:b7:f4:05:03:75:9b:
         6b:30:82:40:66:d0:9e:68:6b:e5:d2:2e:4a:00:f4:c9:ad:71:
         d1:1c:b3:5f:30:62:b2:08:e7:b2:53:3b:35:74:03:f3:06:d3:
         9b:34:13:7f:d4:ea:7e:fa:4b:5f:51:41:10:8a:cd:6b:7a:0a:
         01:4a:4c:b5:b9:c7:6c:31:50:36:81:e8:48:21:6b:5b:d5:f8:
         83:9a:8c:75:88:06:20:b6:a3:18:32:2d:e8:de:52:51:14:13:
         99:cc:77:3f:a2:fc:a0:67:46:62:f6:90:24:98:ae:ee:4c:54:
         ad:21:ef:29:b0:50:be:4c:38:6f:0f:1f:41:f6:dd:07:52:8e:
         b3:ea:77:52:8c:84:fc:6b:a9:12:6e:15:fc:62:e4:5c:4f:0a:
         ef:c0:a0:98:95:59:73:a5:4a:8a:ba:04:d2:b2:d4:72:71:a5:
         ab:07:36:be:48:d4:7e:57:d6:c9:7c:ff:2d:55:12:fd:79:df:
         f8:6d:e5:fa:ab:61:a2:2c:9a:9b:8d:a4:51:b5:b8:7d:4c:e9:
         da:ae:26:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:50:34 2026 by rpki-client