Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3132382e302f31372d3137203d3e20313333313139.roa
File:                     3130312e33362e3132382e302f31372d3137203d3e20313333313139.roa (raw, json)
Hash identifier:          cPAB0XEKAYtKQ1n3gq0jLqYFta7SihWqhkcKUo59/QU=
Subject key identifier:   11:AD:CA:54:A6:E9:15:A4:DB:1C:05:BD:97:A0:55:39:EC:8B:FD:C0
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       44EFBDB89B43E521F18E0FDF2C6BA96E80B80D30
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3132382e302f31372d3137203d3e20313333313139.roa
Signing time:             Tue 12 May 2026 07:03:24 +0000
ROA not before:           Tue 12 May 2026 06:58:24 +0000
ROA not after:            Tue 11 May 2027 07:03:24 +0000
asID:                     133119
IP address blocks:        101.36.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ef:bd:b8:9b:43:e5:21:f1:8e:0f:df:2c:6b:a9:6e:80:b8:0d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 12 06:58:24 2026 GMT
            Not After : May 11 07:03:24 2027 GMT
        Subject: CN=11ADCA54A6E915A4DB1C05BD97A05539EC8BFDC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1b:ea:c9:b4:eb:8b:cd:7a:b9:a1:01:63:a8:
                    46:33:27:c3:0d:00:c5:c4:2e:43:69:08:2e:80:d5:
                    e7:d9:68:7c:75:e0:27:d8:16:0e:c7:68:04:ff:e9:
                    c2:84:2e:7d:c9:7a:e5:b7:aa:96:47:5a:4a:ff:5d:
                    3c:6a:49:3e:9e:b8:0c:ef:e5:16:34:0d:3c:6c:04:
                    8b:ce:69:55:a5:a9:dc:72:62:82:0a:47:72:8f:94:
                    60:78:39:cf:aa:78:7c:6f:8e:86:62:9f:36:b3:1d:
                    8d:aa:27:75:20:f6:45:a7:57:7c:c5:d1:f2:87:d4:
                    c8:9e:4b:6b:10:1d:77:9a:46:25:40:12:76:6c:be:
                    f8:47:91:36:1c:3e:68:b7:fa:85:f7:0c:50:65:17:
                    67:1c:57:9c:93:95:dc:b7:f5:71:61:a3:71:7c:c2:
                    77:5b:d4:84:d0:ba:04:48:e5:ca:fe:f7:6c:e0:2b:
                    8c:d5:51:12:92:ce:de:28:c3:52:ba:50:ce:f5:f1:
                    3b:af:1d:90:bb:01:be:e8:df:a1:95:b2:56:01:8b:
                    b5:bc:a1:4a:70:f7:11:01:3a:63:56:2e:e2:a8:9a:
                    0a:89:ff:bd:18:75:69:8f:33:d0:fb:a8:5b:f2:df:
                    9e:a8:54:bd:a1:41:83:bb:26:94:72:20:cb:51:0a:
                    c2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AD:CA:54:A6:E9:15:A4:DB:1C:05:BD:97:A0:55:39:EC:8B:FD:C0
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3132382e302f31372d3137203d3e20313333313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.36.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4f:50:05:9e:0d:4b:d4:38:97:49:55:a8:20:94:e6:16:9f:00:
         32:fc:c7:18:7b:d2:36:a9:11:a2:86:1d:04:36:f4:58:24:79:
         88:45:ff:ab:54:ff:34:63:4f:69:a8:68:32:f8:ae:8d:7e:1e:
         50:ed:7f:a4:33:6c:c3:2f:9e:1c:ea:b6:8b:86:f3:f8:99:8a:
         8b:45:5d:f9:db:1f:e0:ef:eb:59:57:01:4c:89:02:71:54:a0:
         8e:02:63:d8:7c:aa:52:39:b1:78:fb:d0:5f:0e:07:6a:8b:e0:
         0a:29:db:94:12:11:65:77:46:9b:74:b7:85:80:96:33:cf:1f:
         c5:00:4b:63:f2:82:78:d0:df:65:af:2e:d8:ca:10:f9:5b:b6:
         fb:ba:b5:ca:36:9b:8f:78:c7:b7:16:5a:5c:10:35:c2:54:19:
         ea:c8:29:ec:00:7d:19:73:8e:a7:8f:25:30:01:1b:53:49:c9:
         b0:c0:87:94:c1:c8:bc:d2:09:32:89:df:5b:3d:75:e9:91:a2:
         eb:14:2e:d6:56:37:ce:8e:a9:66:e2:a0:50:75:a2:c0:8d:cb:
         0f:dc:85:d3:2d:9d:02:ea:11:da:bd:5b:8d:b3:54:75:23:dc:
         31:c4:4f:b8:2c:5b:30:ff:5f:bd:ad:af:5a:39:4b:ab:22:72:
         05:ae:5d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:43:45 2026 by rpki-client