Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS64047.roa
File:                     AS64047.roa (raw, json)
Hash identifier:          K7KwRhDZUjXuveYr43lixQ1pFT3UM6xqN1/cc6lD8EQ=
Subject key identifier:   8B:9D:FF:91:C8:04:A7:06:9D:CB:D1:25:98:5D:9D:48:FF:92:96:90
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       1849C416B27F1F594D0D40BDB5E426E9B0D00CD3
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS64047.roa
Signing time:             Tue 09 Jun 2026 09:20:54 +0000
ROA not before:           Tue 09 Jun 2026 09:15:54 +0000
ROA not after:            Tue 08 Jun 2027 09:20:54 +0000
asID:                     64047
IP address blocks:        114.112.254.0/24 maxlen: 24
                          114.113.254.0/24 maxlen: 24
                          122.115.78.0/24 maxlen: 24
                          203.191.24.0/24 maxlen: 24
                          203.191.25.0/24 maxlen: 24
                          203.191.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 04:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:49:c4:16:b2:7f:1f:59:4d:0d:40:bd:b5:e4:26:e9:b0:d0:0c:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: Jun  9 09:15:54 2026 GMT
            Not After : Jun  8 09:20:54 2027 GMT
        Subject: CN=8B9DFF91C804A7069DCBD125985D9D48FF929690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:58:99:0a:b0:d1:13:f0:03:b8:3d:c4:83:49:
                    3c:6c:05:44:fd:48:d4:e3:59:61:a7:c6:94:41:ce:
                    fd:85:b5:90:2d:0c:ea:c1:40:74:69:1e:62:62:41:
                    43:b1:e2:ed:3e:d8:b8:02:27:4c:f2:9c:55:b9:7a:
                    15:e5:fe:ce:65:e7:00:89:5d:aa:60:5e:e4:a3:70:
                    5b:7a:ee:8a:2b:f7:cb:4a:1b:6f:84:bf:f6:dc:13:
                    64:00:f8:e7:ae:98:cd:6b:36:53:64:1a:c4:7f:6a:
                    06:5e:68:87:cd:a9:f6:a2:cb:72:59:a1:33:8e:82:
                    95:81:c0:e5:1d:a8:9f:0f:b7:f3:0c:8c:88:32:a5:
                    4a:2e:91:42:1f:d4:91:d8:71:1a:55:38:36:4b:92:
                    c6:69:08:b5:40:aa:65:3c:3f:3e:fa:41:7e:d0:1a:
                    e8:03:be:14:01:de:54:a8:e6:f9:b1:d5:08:ba:18:
                    9c:a3:a9:92:ca:fa:d9:83:b7:50:6b:96:ff:54:8d:
                    6f:29:75:04:d9:62:5c:75:c2:a9:bc:e7:21:32:cb:
                    fe:18:66:09:4a:1c:6e:89:9c:e7:6c:82:34:cf:f1:
                    ca:1e:59:1c:74:22:9f:26:33:03:66:94:4f:58:f0:
                    db:a7:19:e3:dc:2b:1b:c9:5f:1c:14:d2:49:c8:d8:
                    ee:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9D:FF:91:C8:04:A7:06:9D:CB:D1:25:98:5D:9D:48:FF:92:96:90
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS64047.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.112.254.0/24
                  114.113.254.0/24
                  122.115.78.0/24
                  203.191.24.0/23
                  203.191.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:df:9c:02:4b:06:f2:89:1e:bd:52:f4:8b:1b:9e:b3:cd:af:
         7b:5b:7b:72:cd:12:2d:8c:75:ac:98:2c:99:d4:c4:38:18:e4:
         c2:54:af:d4:82:3f:cd:d4:69:88:cc:d9:2f:0a:3e:1a:ab:1f:
         80:9c:a6:7a:b2:26:bd:33:24:32:6a:34:5f:af:b3:53:f4:e8:
         4e:a6:10:26:ef:b4:3a:28:10:92:1e:ff:72:e0:c0:07:d1:4a:
         c6:d0:14:8a:89:e2:2d:bd:7d:43:0d:06:b3:d2:62:77:92:5e:
         8a:0e:bc:c5:33:55:a4:69:98:33:9d:81:83:0d:62:10:dd:18:
         28:87:01:1d:37:29:f5:da:7e:a3:67:7a:c6:b8:16:4f:44:72:
         7d:2b:b3:3c:3c:50:77:89:b2:d4:d9:5b:ce:c7:69:13:d3:e6:
         a3:48:34:40:02:0a:24:9d:4e:63:de:41:d3:27:53:50:7c:32:
         bf:76:9b:98:d3:a2:48:3b:87:76:ce:57:b9:6a:1f:60:df:a9:
         9b:a9:53:b6:db:f8:93:ac:04:14:51:ff:4d:f3:31:7b:1a:82:
         30:14:ed:a5:2e:3b:07:14:fd:be:2b:2e:e5:2d:5e:f2:11:8e:
         f9:3d:3d:6a:f3:82:25:1d:7a:5a:5b:94:54:4c:89:ff:76:6a:
         14:bf:ff:fc
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIUGEnEFrJ/H1lNDUC9teQm6bDQDNMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw
NDk1QzhDNDAeFw0yNjA2MDkwOTE1NTRaFw0yNzA2MDgwOTIwNTRaMDMxMTAvBgNV
BAMTKDhCOURGRjkxQzgwNEE3MDY5RENCRDEyNTk4NUQ5RDQ4RkY5Mjk2OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiWJkKsNET8AO4PcSDSTxsBUT9
SNTjWWGnxpRBzv2FtZAtDOrBQHRpHmJiQUOx4u0+2LgCJ0zynFW5ehXl/s5l5wCJ
XapgXuSjcFt67oor98tKG2+Ev/bcE2QA+OeumM1rNlNkGsR/agZeaIfNqfaiy3JZ
oTOOgpWBwOUdqJ8Pt/MMjIgypUoukUIf1JHYcRpVODZLksZpCLVAqmU8Pz76QX7Q
GugDvhQB3lSo5vmx1Qi6GJyjqZLK+tmDt1Brlv9UjW8pdQTZYlx1wqm85yEyy/4Y
ZglKHG6JnOdsgjTP8coeWRx0Ip8mMwNmlE9Y8NunGePcKxvJXxwU0knI2O5NAgMB
AAGjggH7MIIB9zAdBgNVHQ4EFgQUi53/kcgEpwady9ElmF2dSP+SlpAwHwYDVR0j
BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4
NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw
XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTU4OTA5ODUyMjY4NjI1OTUvMC9BUzY0MDQ3LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIA
ATAeAwQAcnD+AwQAcnH+AwQAenNOAwQBy78YAwQAy78bMA0GCSqGSIb3DQEBCwUA
A4IBAQAV35wCSwbyiR69UvSLG56zza97W3tyzRItjHWsmCyZ1MQ4GOTCVK/Ugj/N
1GmIzNkvCj4aqx+AnKZ6sia9MyQyajRfr7NT9OhOphAm77Q6KBCSHv9y4MAH0UrG
0BSKieItvX1DDQaz0mJ3kl6KDrzFM1WkaZgznYGDDWIQ3RgohwEdNyn12n6jZ3rG
uBZPRHJ9K7M8PFB3ibLU2VvOx2kT0+ajSDRAAgoknU5j3kHTJ1NQfDK/dpuY06JI
O4d2zle5ah9g36mbqVO22/iTrAQUUf9N8zF7GoIwFO2lLjsHFP2+Ky7lLV7yEY75
PT1q84IlHXpaW5RUTIn/dmoUv//8
-----END CERTIFICATE-----
Generated at Fri Jun 12 11:22:31 2026 by rpki-client