Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104968095178424325/0/3130312e39362e3133322e302f32332d3233203d3e2034383437.roa
File:                     3130312e39362e3133322e302f32332d3233203d3e2034383437.roa (raw, json)
Hash identifier:          pyruQMwauadA5XEUz/CIqNbzDvE1Pt09dSU3KIN64Xo=
Subject key identifier:   42:67:50:A3:43:79:E8:45:AC:6E:74:F9:4A:D2:87:1A:DD:90:C1:D4
Certificate issuer:       /CN=921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB
Certificate serial:       4D1FF5295058A0F3CBB66475EE460B95E34ACF9A
Authority key identifier: 92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/3130312e39362e3133322e302f32332d3233203d3e2034383437.roa
Signing time:             Wed 20 May 2026 03:53:23 +0000
ROA not before:           Wed 20 May 2026 03:48:23 +0000
ROA not after:            Wed 19 May 2027 03:53:23 +0000
asID:                     4847
IP address blocks:        101.96.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 May 2026 02:27:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:1f:f5:29:50:58:a0:f3:cb:b6:64:75:ee:46:0b:95:e3:4a:cf:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB
        Validity
            Not Before: May 20 03:48:23 2026 GMT
            Not After : May 19 03:53:23 2027 GMT
        Subject: CN=426750A34379E845AC6E74F94AD2871ADD90C1D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f7:2f:55:de:2a:6d:d1:cc:50:b3:9a:9a:04:
                    91:1c:88:3a:10:f4:00:6d:4a:c4:d9:b2:a4:71:d6:
                    9d:90:33:5a:bb:0f:01:8f:df:43:57:52:96:2d:85:
                    93:f6:51:82:8a:bd:12:18:73:53:77:89:5a:ae:6f:
                    a6:46:86:94:33:d6:b6:46:e6:9d:9d:de:67:d6:92:
                    44:43:ac:77:a7:b4:94:f1:f5:a3:71:f7:5a:9d:4c:
                    e0:85:5b:2a:bf:c7:4c:02:19:31:71:2e:be:55:d6:
                    e7:c6:26:8a:ef:7d:fe:bd:7d:63:01:41:d6:fb:52:
                    6f:28:10:97:85:fa:a6:26:9c:44:d2:cd:18:59:f6:
                    59:19:af:48:67:d1:b9:1b:70:1b:cd:0c:17:2e:a1:
                    a2:b8:7b:0d:05:88:d6:52:fa:ba:dc:c3:d8:86:4b:
                    42:62:7b:a4:28:13:7a:0c:ae:31:78:16:dc:4b:7f:
                    20:d8:c4:fa:b8:22:3f:fe:4a:42:6e:3c:3f:10:b3:
                    6e:3f:e8:f2:30:dc:59:aa:1c:bb:9b:13:ec:f5:6c:
                    39:ad:23:cd:c5:f3:32:65:17:9e:c1:73:aa:f4:15:
                    d8:a9:3a:3f:b6:e0:8b:e3:11:b4:bf:5b:9d:da:67:
                    d5:74:ea:4a:7b:73:ab:0f:bc:07:3d:5d:ca:1f:a3:
                    75:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:67:50:A3:43:79:E8:45:AC:6E:74:F9:4A:D2:87:1A:DD:90:C1:D4
            X509v3 Authority Key Identifier:
                keyid:92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/3130312e39362e3133322e302f32332d3233203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.96.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:52:67:d3:b0:47:61:f3:ef:1f:8a:8d:97:0c:b0:a8:c0:e2:
         cf:68:2f:6d:91:03:95:a2:47:57:7f:34:a0:b7:c9:bc:87:a5:
         6f:eb:d0:53:92:e9:34:3e:65:f5:a6:a4:dc:bd:33:15:5d:0b:
         85:67:04:6e:a4:d4:83:37:25:5f:38:ac:c0:98:63:66:47:22:
         f2:1f:c8:50:23:e5:6c:bb:ab:ac:23:fa:45:c3:5d:e1:ca:3a:
         6a:82:ef:27:62:34:66:35:a3:d8:25:a6:39:5d:e8:f4:ba:53:
         b6:c5:c2:e2:a1:de:ef:8f:c6:7d:2e:9a:b6:24:ac:af:84:a2:
         4f:79:f6:71:c8:d7:48:90:54:30:4d:79:a4:f8:ce:aa:e5:3d:
         df:81:9c:70:d5:5f:de:bd:de:2e:fd:38:69:ae:d5:72:2a:9c:
         12:f7:5e:7b:67:dc:ca:37:f6:cb:8d:19:14:63:7b:2f:f2:98:
         fc:24:9b:dc:88:14:ba:58:be:62:8b:af:94:1d:46:d6:0d:e3:
         a7:8c:30:28:99:01:09:e7:9d:4a:fb:83:59:96:ca:2a:da:7e:
         10:8d:34:99:5b:ac:2f:dd:85:62:a9:c6:57:cc:d0:95:ac:05:
         be:a6:f9:d5:94:ae:14:3f:2f:82:bc:1f:5b:c9:a0:9a:5c:d2:
         e2:f0:0e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 04:26:04 2026 by rpki-client