Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS133929.roa
File:                     AS133929.roa (raw, json)
Hash identifier:          fTa0KAovedpTNed8J/fTUJiQCVcEY6qA9qv3ROU1fuE=
Subject key identifier:   2A:4F:64:48:14:4E:BB:1F:8C:E9:69:59:3B:C8:AD:C7:25:D0:C0:D4
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       457FA378552249A39D2B63C89EB350D3088A0787
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS133929.roa
Signing time:             Tue 09 Jun 2026 09:18:50 +0000
ROA not before:           Tue 09 Jun 2026 09:13:50 +0000
ROA not after:            Tue 08 Jun 2027 09:18:50 +0000
asID:                     133929
IP address blocks:        114.112.232.0/24 maxlen: 24
                          114.112.236.0/22 maxlen: 22
                          114.112.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 11:49:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:7f:a3:78:55:22:49:a3:9d:2b:63:c8:9e:b3:50:d3:08:8a:07:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: Jun  9 09:13:50 2026 GMT
            Not After : Jun  8 09:18:50 2027 GMT
        Subject: CN=2A4F6448144EBB1F8CE969593BC8ADC725D0C0D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:25:f6:ad:3b:22:ad:c5:b8:1f:27:c2:a1:46:
                    d2:cd:fe:42:de:9e:33:bb:e4:96:1b:0f:13:ea:f2:
                    71:d2:5a:64:ab:d4:37:0a:40:0d:40:79:8b:fc:40:
                    94:38:99:6b:10:fa:9e:04:66:e9:96:48:ed:ea:d7:
                    b0:35:93:72:3c:80:db:0b:35:e4:9c:fb:a9:22:48:
                    c7:4b:1b:58:7b:61:b3:68:d1:cc:15:8a:72:26:e8:
                    56:be:1e:95:9f:90:19:ae:bb:a6:a8:76:f3:80:c1:
                    1e:5e:6c:6f:d6:08:82:27:79:23:41:36:8a:1b:e8:
                    5a:d4:54:89:ec:35:4a:4d:7c:77:81:67:4a:d2:ec:
                    b9:3d:e6:e1:f8:a6:20:79:de:39:45:8a:14:d6:b9:
                    83:77:e7:70:ef:99:8a:e5:f6:76:43:7f:ea:22:1f:
                    e7:92:0b:74:76:01:ee:9f:8c:59:69:98:1c:d2:e3:
                    0a:19:79:32:46:eb:89:9b:4c:c3:4d:78:f1:65:38:
                    14:c8:11:da:4c:bf:4c:49:26:c6:b3:c9:30:4b:ab:
                    cd:fb:18:25:77:8b:c3:06:76:6f:85:b9:83:47:9a:
                    9d:42:a4:c5:3a:79:93:ab:c6:ce:09:de:12:ca:4e:
                    ee:87:98:13:5e:1d:cc:29:96:32:9b:17:24:50:68:
                    89:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4F:64:48:14:4E:BB:1F:8C:E9:69:59:3B:C8:AD:C7:25:D0:C0:D4
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS133929.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.112.232.0/24
                  114.112.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:c8:f6:3e:3c:28:a4:ad:c6:b4:f3:9a:7e:cf:e0:57:36:26:
         b9:6a:73:e2:2f:73:a9:d4:cd:69:07:45:46:4a:ec:f7:eb:b7:
         9d:28:78:a4:0c:1d:16:eb:cf:aa:01:f1:86:47:b6:e4:b0:00:
         a7:88:f9:1f:34:d7:8a:65:9e:34:b7:88:d4:c8:7f:1d:78:a1:
         1f:ec:48:e5:2a:34:4f:0e:53:7f:30:bb:c4:2a:db:f7:aa:d2:
         b1:69:b8:75:a5:34:7b:29:95:96:e4:39:7e:55:fa:c4:73:64:
         d7:9b:46:68:f2:33:5e:f2:db:a3:10:63:3d:24:e7:bc:25:2b:
         ac:97:f2:0f:1b:46:97:2d:3d:ad:46:d3:e4:6c:e5:0a:5f:a2:
         73:24:77:96:ad:41:52:90:ee:93:0e:69:77:a8:c8:39:f6:39:
         14:52:dc:50:47:d2:77:b6:85:10:db:b3:36:52:c7:0f:fa:76:
         9e:18:14:7d:dc:b5:ad:70:38:79:0a:90:c5:3c:6b:1f:9b:d0:
         91:6c:dc:8f:8c:8f:55:45:b4:72:97:38:98:c1:db:0a:56:59:
         f3:ee:32:ea:9a:db:90:64:66:58:7a:f6:d5:ed:60:6f:cc:35:
         7c:ba:0a:23:8e:d0:cd:ff:dc:56:ff:f0:46:1d:e7:d7:63:c2:
         37:a1:9e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:37:35 2026 by rpki-client