Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e39362e302f32322d3232203d3e2034383437.roa
File:                     3131392e35372e39362e302f32322d3232203d3e2034383437.roa (raw, json)
Hash identifier:          4Ow3LrsTX0Cz3p3Aq16MzwBMrNPc6SW916dR94kNWh4=
Subject key identifier:   FD:28:E0:A3:CD:49:BD:E3:13:50:DC:B6:97:3A:B8:C0:BC:5B:CA:31
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       68B8759BA5F3235F093067390C2741223D56A13E
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e39362e302f32322d3232203d3e2034383437.roa
Signing time:             Fri 22 May 2026 08:46:41 +0000
ROA not before:           Fri 22 May 2026 08:41:41 +0000
ROA not after:            Fri 21 May 2027 08:46:41 +0000
asID:                     4847
IP address blocks:        119.57.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b8:75:9b:a5:f3:23:5f:09:30:67:39:0c:27:41:22:3d:56:a1:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 22 08:41:41 2026 GMT
            Not After : May 21 08:46:41 2027 GMT
        Subject: CN=FD28E0A3CD49BDE31350DCB6973AB8C0BC5BCA31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:22:0b:f6:c2:2d:11:2f:aa:47:2f:ed:c7:b5:
                    ff:c1:2b:9e:47:d2:62:2c:6b:a3:a7:5d:fa:97:8c:
                    9a:29:f9:84:f8:3b:03:ba:91:a5:a7:4f:84:bd:77:
                    ef:d2:2d:5a:85:34:c0:c0:88:50:a3:3a:9a:0c:28:
                    b3:b3:2c:df:7e:70:ae:73:94:aa:ed:1c:8a:3c:fa:
                    0e:fa:a1:e9:15:af:71:ca:df:1d:23:a1:c1:c1:9e:
                    c7:55:1d:c6:d8:a3:bc:49:06:ad:2d:78:38:d0:87:
                    6a:76:58:f2:f2:08:9e:cf:86:f1:93:24:af:29:cc:
                    1b:86:3e:c6:32:7a:8b:d1:a5:12:6c:c4:92:73:7b:
                    6c:f4:41:02:57:6a:1c:97:64:56:ac:87:87:a8:2f:
                    34:3c:5d:1e:02:c1:0f:e4:63:fe:99:67:51:1d:c7:
                    14:b5:a2:3a:53:7d:b2:b2:15:a4:a4:29:76:e5:bf:
                    c2:1b:50:e6:1f:90:65:49:c5:5c:a4:1f:be:cc:f7:
                    5f:3d:0d:a0:81:ec:38:56:56:df:f4:52:bf:a8:ab:
                    0f:fd:17:70:65:b8:71:2d:ff:3a:ae:c5:40:73:a0:
                    3b:1e:7f:cc:9b:f2:7c:4e:56:9f:83:3f:b3:f7:80:
                    87:8f:1a:28:c5:39:50:46:dd:65:a2:1f:e3:bf:f8:
                    c9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:28:E0:A3:CD:49:BD:E3:13:50:DC:B6:97:3A:B8:C0:BC:5B:CA:31
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e39362e302f32322d3232203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.57.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:7a:97:ed:f5:75:af:ae:52:4e:9d:09:63:92:e9:15:a8:fa:
         28:82:53:80:e3:e6:a3:8c:47:0b:33:25:3d:81:a0:8f:f0:0d:
         99:90:b3:ad:bd:7c:11:02:6a:5a:69:6f:c6:db:66:c5:1f:a1:
         c9:18:75:5a:08:e0:42:7f:f3:29:e4:29:0d:e9:f4:12:2b:84:
         ef:37:e2:d5:d3:a2:8f:6f:2d:e0:68:75:5d:91:f1:0c:7d:87:
         02:a5:7a:43:61:4a:3a:e4:97:f7:26:e0:4c:e3:09:7c:c8:13:
         4a:2f:2d:3a:f8:80:e0:b5:4b:97:04:ce:2d:01:d1:9e:6d:43:
         6c:b3:40:11:ef:c7:ec:4b:7a:ec:7b:61:39:af:73:40:c6:7a:
         9b:47:ce:fc:89:61:1f:9b:bb:7e:b2:b2:4a:1f:a8:42:b3:4e:
         8f:ab:c0:a2:4f:96:86:36:ad:78:10:8d:c8:f2:0b:61:09:84:
         c4:0d:80:7e:b8:a0:f0:12:97:75:b9:61:c2:bf:9c:bc:21:56:
         04:12:84:36:c4:85:21:41:66:66:e9:3c:83:4b:45:67:e6:7b:
         4b:a4:88:e4:c7:85:fc:eb:37:f1:84:b1:4e:df:ce:4f:00:16:
         19:07:91:a3:13:d7:45:23:99:43:94:85:ce:eb:ba:81:cc:17:
         d9:74:00:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:18 2026 by rpki-client