Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3132382e302f31392d3139203d3e203234313338.roa
File:                     3130312e33362e3132382e302f31392d3139203d3e203234313338.roa (raw, json)
Hash identifier:          BomAAjm2uYC6S4qHfXq9xT3BetCinAn2qxNQqH93d+s=
Subject key identifier:   6C:2D:67:A0:6E:FA:65:24:A8:10:78:54:B8:9A:A9:85:86:7D:57:68
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       5325846EB5B2A49D9FB5F2430AB07671C3C226F5
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3132382e302f31392d3139203d3e203234313338.roa
Signing time:             Tue 12 May 2026 07:03:24 +0000
ROA not before:           Tue 12 May 2026 06:58:24 +0000
ROA not after:            Tue 11 May 2027 07:03:24 +0000
asID:                     24138
IP address blocks:        101.36.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:25:84:6e:b5:b2:a4:9d:9f:b5:f2:43:0a:b0:76:71:c3:c2:26:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 12 06:58:24 2026 GMT
            Not After : May 11 07:03:24 2027 GMT
        Subject: CN=6C2D67A06EFA6524A8107854B89AA985867D5768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e4:ef:30:be:68:1d:76:ef:70:ae:e0:e2:9c:
                    0d:5a:50:ca:78:1c:ee:a2:be:89:de:7a:36:df:ba:
                    05:75:69:2b:9a:c9:83:dc:ea:bd:35:7c:69:8a:de:
                    f8:21:e4:a7:69:c5:8b:6e:e0:2a:1a:65:eb:8e:67:
                    af:0e:33:eb:88:43:ab:d4:56:93:a4:86:af:be:1e:
                    2d:f3:fa:29:8f:98:73:07:1f:19:85:b6:73:63:42:
                    69:a3:28:20:aa:0a:8d:f2:8d:27:24:78:a7:8b:aa:
                    9b:9b:58:4d:6c:0f:3d:37:fd:3c:97:cc:43:4f:82:
                    88:58:fa:fa:4e:f5:69:cb:08:f4:24:61:49:40:4f:
                    54:7d:8a:ba:6f:18:51:44:08:2c:33:a3:bc:12:a1:
                    98:8f:28:5b:5e:1a:7b:fe:40:b7:15:54:d1:86:6a:
                    d9:51:e0:4d:4a:76:5f:84:aa:63:22:55:db:f0:fc:
                    a7:87:d5:b7:5b:d7:31:7b:c2:8a:10:6a:01:4d:df:
                    d7:7e:e4:80:85:9c:91:44:8d:71:ab:5c:45:dc:9b:
                    93:81:06:73:b8:50:ec:5a:12:9e:05:48:31:36:f6:
                    d7:6a:b7:d1:35:92:06:b7:80:95:08:e2:d4:d5:c2:
                    b1:4d:67:2f:2f:15:fb:fe:53:fc:5d:4d:b1:7a:d7:
                    16:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2D:67:A0:6E:FA:65:24:A8:10:78:54:B8:9A:A9:85:86:7D:57:68
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3132382e302f31392d3139203d3e203234313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.36.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         32:5f:38:24:72:ee:a5:7e:91:a1:c3:27:65:65:ae:96:9c:29:
         09:03:76:22:90:da:a6:9b:30:14:3f:f5:b6:87:fa:00:d0:0a:
         14:39:89:a8:cb:d6:82:a2:24:01:99:b4:9e:ee:2b:09:80:8b:
         74:78:c2:f8:9c:a4:1a:d1:a4:50:20:a4:27:f9:f5:2f:c9:b0:
         c7:40:8f:e5:51:c1:11:d9:bc:85:5c:79:fb:1d:79:81:3d:b1:
         10:28:79:d5:4e:3e:4c:3e:c7:82:17:85:b9:42:5a:23:c8:96:
         bb:98:8d:36:e5:27:d9:51:96:de:3b:41:1b:3e:44:34:ca:1a:
         36:04:b1:95:c4:21:75:2f:3e:40:7c:f1:79:89:5b:41:80:ab:
         50:b6:35:a8:3c:46:49:6e:38:85:fc:76:c6:52:e5:84:04:48:
         c2:e7:f1:c1:7f:61:65:2b:fa:75:11:1d:a0:ac:ff:3d:5b:ca:
         4b:3b:c4:aa:1f:f4:15:0b:41:2a:64:b6:ab:75:17:f8:64:be:
         0f:98:66:97:dc:64:93:e4:60:5f:12:3a:6c:36:15:dd:d0:d5:
         7f:af:e9:5f:8f:28:12:b9:b0:69:35:c2:de:30:21:1e:58:e9:
         fb:f8:a1:55:e5:27:e9:76:6f:a1:7a:e5:4d:72:69:e2:14:a2:
         d4:65:92:6b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:24:15 2026 by rpki-client