Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS56019.roa
File:                     AS56019.roa (raw, json)
Hash identifier:          nWNZXRlJwpx0LomyDsBlJxMObEmwQrZ2qgpKkCCQZw4=
Subject key identifier:   96:42:78:1C:7F:EA:33:95:3F:30:16:98:63:92:03:1D:FE:88:A9:D6
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       534E92483AB18864CC0E3FA526339BD93188E44E
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS56019.roa
Signing time:             Mon 08 Jun 2026 09:03:46 +0000
ROA not before:           Mon 08 Jun 2026 08:58:46 +0000
ROA not after:            Mon 07 Jun 2027 09:03:46 +0000
asID:                     56019
IP address blocks:        210.14.128.0/21 maxlen: 21
                          210.14.136.0/21 maxlen: 21
                          210.14.144.0/21 maxlen: 21
                          210.14.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 04:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:4e:92:48:3a:b1:88:64:cc:0e:3f:a5:26:33:9b:d9:31:88:e4:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: Jun  8 08:58:46 2026 GMT
            Not After : Jun  7 09:03:46 2027 GMT
        Subject: CN=9642781C7FEA33953F3016986392031DFE88A9D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3a:4d:dd:9c:e0:85:1e:50:5f:bc:ec:39:ef:
                    99:f6:78:db:1e:26:06:31:37:c5:94:c5:2d:c7:dc:
                    fd:23:b8:b4:f9:ba:f3:de:96:90:c5:7a:13:13:f4:
                    e2:fc:d8:62:6b:c7:ed:31:4c:27:f6:27:5c:14:48:
                    34:7b:c8:88:31:82:3d:36:c5:a3:fb:1f:ff:f4:d3:
                    13:7e:37:7f:14:9d:85:2b:4e:8f:d0:a3:c3:20:c9:
                    c8:e8:ed:8f:15:22:76:93:0b:40:30:a1:d9:a3:83:
                    09:b2:7f:e9:8f:04:ec:2a:ff:34:11:ad:46:af:3b:
                    37:ea:ee:e0:48:48:18:54:29:bd:9d:08:7d:a1:80:
                    77:6e:04:8f:c8:6f:7f:25:e7:b7:0f:0a:fa:56:76:
                    35:bd:67:e4:d3:b5:29:72:d3:60:5a:98:60:ce:31:
                    0c:f0:76:ea:6f:45:f6:fb:c7:c8:bd:b7:ee:19:7d:
                    9a:4e:eb:13:cc:69:73:25:58:0e:62:89:1d:d7:ae:
                    8c:16:7b:ae:01:40:2a:b3:ac:b3:0b:37:74:7a:78:
                    ef:2d:21:6c:c1:d3:7e:fe:e4:c7:41:5f:cd:4f:e5:
                    03:73:af:94:d2:45:00:40:47:02:3d:86:0d:9a:91:
                    f8:5c:68:0a:3f:ca:62:b7:db:b3:8c:60:78:81:cc:
                    5c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:42:78:1C:7F:EA:33:95:3F:30:16:98:63:92:03:1D:FE:88:A9:D6
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS56019.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.14.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         16:a8:8b:2c:6e:9b:40:99:bf:81:08:7f:fe:04:5c:b9:5d:2d:
         1b:c9:3c:3b:a5:bf:46:92:d4:dd:93:cb:8e:cc:b6:91:c1:e7:
         54:d7:a8:07:7b:5c:c2:b2:05:19:70:2f:7c:fa:44:a9:87:fe:
         b5:49:3f:b3:64:84:9b:b6:c3:5d:bc:13:62:fa:44:7e:11:c0:
         d5:43:dc:f2:af:da:10:09:6c:fa:ab:9e:72:d5:6a:1c:f9:9a:
         30:84:ac:58:f1:ad:c5:04:8c:95:e6:9e:14:86:82:67:68:4e:
         92:a1:e9:80:91:c6:21:f9:3b:d3:0a:36:14:8e:b9:a4:f8:15:
         d3:b4:f0:57:c3:99:3b:e0:3e:fa:fa:62:5b:c3:5f:2d:11:76:
         99:94:23:bd:ab:15:cc:07:a9:42:82:c6:e5:2d:c2:d2:7c:18:
         33:f0:8e:ba:6d:83:3e:c3:ae:15:5a:52:77:5f:fd:9a:6f:ef:
         e6:90:93:c5:76:f2:01:d8:08:d7:4c:05:7a:74:a2:7c:b7:29:
         08:14:9c:74:32:d6:4b:f6:63:ce:b8:31:d3:c0:b5:68:52:76:
         55:68:8d:b3:8a:a1:8a:f8:77:57:5a:19:64:49:3d:dc:8b:54:
         f9:2f:b3:00:f4:78:33:33:da:a3:24:17:cb:1f:63:fd:2b:9a:
         ba:85:0d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:23:33 2026 by rpki-client