Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3132382e302f32302d3230203d3e2039383038.roa
File:                     3130312e33362e3132382e302f32302d3230203d3e2039383038.roa (raw, json)
Hash identifier:          gbfYQw6e9kbcEJnqy/D6xvh+y4kFCyHNJMmgH05G268=
Subject key identifier:   CC:06:B3:01:5D:DB:88:CA:FD:C6:FD:08:AE:81:40:DE:F9:6B:EE:DB
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       4195CBDAE99D3089C33E6728B75F595DB78BAEFF
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3132382e302f32302d3230203d3e2039383038.roa
Signing time:             Tue 12 May 2026 07:03:24 +0000
ROA not before:           Tue 12 May 2026 06:58:24 +0000
ROA not after:            Tue 11 May 2027 07:03:24 +0000
asID:                     9808
IP address blocks:        101.36.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:95:cb:da:e9:9d:30:89:c3:3e:67:28:b7:5f:59:5d:b7:8b:ae:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 12 06:58:24 2026 GMT
            Not After : May 11 07:03:24 2027 GMT
        Subject: CN=CC06B3015DDB88CAFDC6FD08AE8140DEF96BEEDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:59:25:b5:9e:f7:b8:cd:0b:e1:b2:7d:9c:d9:
                    27:e6:7a:6d:23:86:f1:de:19:c7:84:9c:16:02:f5:
                    ab:df:92:49:36:43:a4:9f:06:f3:2c:bb:6e:24:f1:
                    29:2f:f4:05:fd:df:33:31:84:1b:73:08:d1:50:73:
                    ce:02:3a:8b:50:3a:b7:3b:5d:7f:2c:1e:fe:fa:44:
                    5e:0b:4c:b2:5c:59:e0:ac:7e:3d:71:c7:20:c9:c7:
                    da:26:59:1f:b8:cb:67:0b:cd:c3:ca:ae:96:20:b5:
                    55:56:a5:2e:1c:7b:a5:e3:1f:01:20:dc:62:69:ec:
                    a9:55:a5:05:2d:6b:5e:fa:64:fa:66:2a:5d:6c:a2:
                    4d:e7:b9:ce:b8:70:b1:91:8e:ec:00:0a:24:76:d3:
                    88:12:9e:fb:ae:33:15:22:d6:41:66:a9:1c:8c:7d:
                    da:1f:ef:c8:dc:4f:91:8d:15:e7:ea:ed:5b:07:85:
                    84:f6:cd:65:4c:3e:e6:cf:be:44:fb:9f:2c:ca:5a:
                    12:3d:c3:80:bf:6a:14:21:d6:13:10:96:83:c4:ac:
                    05:9a:69:10:b2:55:0d:9e:a4:ae:7d:2c:2c:d9:58:
                    e0:d5:7e:f7:ca:a4:f6:ff:f5:9d:8b:52:41:9f:91:
                    d8:ee:15:2a:ca:43:0e:73:73:79:48:a1:a7:3a:be:
                    d9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:06:B3:01:5D:DB:88:CA:FD:C6:FD:08:AE:81:40:DE:F9:6B:EE:DB
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3132382e302f32302d3230203d3e2039383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.36.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         94:a0:6c:da:13:60:d4:f8:37:1e:84:23:4f:2a:32:f0:42:47:
         f3:d9:18:5e:88:41:3d:86:70:5c:8a:67:07:a3:69:ac:27:7b:
         ea:8a:83:c1:cf:2a:69:54:56:8d:76:db:f4:92:c2:80:57:e6:
         d4:ab:c4:61:90:14:7a:a5:e1:eb:36:b6:9e:0b:b4:ba:ff:b2:
         5a:cb:a8:e6:2a:b8:0f:b7:00:5b:70:60:e7:f5:bf:d6:4c:12:
         10:a9:0a:05:1a:fa:b8:3f:3b:43:e2:3a:d9:fc:cf:b9:f4:e7:
         36:1b:bc:2e:c4:e7:4e:6c:6f:dc:89:2f:22:33:bb:d8:3f:a9:
         46:24:71:af:41:9c:93:67:25:b2:64:d5:25:24:a4:f3:6e:3d:
         09:ca:1f:5d:4e:b2:e9:24:47:5c:ff:ce:1e:37:a1:81:e5:50:
         ec:b0:72:92:82:1e:d8:47:bb:da:02:c5:f3:b5:ad:92:43:28:
         77:32:3b:c3:b7:13:2c:61:67:ab:29:9b:33:c8:55:5b:c6:1c:
         6b:7d:12:36:79:4f:22:bb:41:4c:12:ee:e9:3d:66:19:46:8f:
         be:17:6e:b9:61:44:1e:ce:d0:02:c7:8d:9b:c7:4f:eb:26:36:
         89:c2:8d:d6:6f:20:72:0f:9c:4a:6d:24:10:75:68:e8:98:76:
         5b:a6:68:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:08:27 2026 by rpki-client