Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3137362e302f32302d3230203d3e2039383038.roa
File:                     3130312e33362e3137362e302f32302d3230203d3e2039383038.roa (raw, json)
Hash identifier:          dtfQUUQMTSH6kKzDnheRu/Cvw0EpqbzOctxwYYlyXrQ=
Subject key identifier:   3E:67:AD:32:70:41:5D:D4:BB:2B:D2:EB:7A:CF:A3:FC:3D:9C:47:30
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       7D467FE4A4C201D8E45A177E4405E788388F7E6E
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3137362e302f32302d3230203d3e2039383038.roa
Signing time:             Tue 12 May 2026 07:03:25 +0000
ROA not before:           Tue 12 May 2026 06:58:25 +0000
ROA not after:            Tue 11 May 2027 07:03:25 +0000
asID:                     9808
IP address blocks:        101.36.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:46:7f:e4:a4:c2:01:d8:e4:5a:17:7e:44:05:e7:88:38:8f:7e:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 12 06:58:25 2026 GMT
            Not After : May 11 07:03:25 2027 GMT
        Subject: CN=3E67AD3270415DD4BB2BD2EB7ACFA3FC3D9C4730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:13:d2:80:27:c0:79:b2:fe:a5:64:81:e8:50:
                    78:ce:37:91:9e:e5:f1:19:93:5c:46:bf:a0:e1:27:
                    7f:69:4b:44:f0:0b:94:0b:5a:50:a8:68:4d:37:7a:
                    34:9d:99:71:35:c2:d6:24:e3:0b:7f:ca:e4:c3:2e:
                    b3:6e:c2:6b:c8:74:ba:a2:5b:42:51:97:11:ba:53:
                    bf:e8:69:b2:72:a2:ae:30:b5:d0:1a:c7:0f:02:af:
                    54:ca:7b:7a:4c:f9:c8:df:7f:81:d5:35:bf:aa:23:
                    f0:f4:39:db:06:0d:20:28:55:82:bc:d3:a9:51:b9:
                    c1:e2:49:2f:63:7f:2d:84:e0:8d:0d:18:2e:70:1a:
                    e4:25:d5:35:f9:4c:10:f4:0b:29:44:a0:ed:74:fe:
                    13:9c:c0:06:8c:66:2a:90:83:bf:a5:9c:16:bf:bb:
                    42:5e:a3:c1:4b:2f:b0:d3:3f:61:83:00:d9:d4:80:
                    83:fc:46:b6:c8:14:83:c0:53:56:19:2b:15:3a:2e:
                    1a:d7:18:af:24:90:9f:62:8e:24:1d:d5:b6:b2:fa:
                    7f:39:cc:f9:88:f1:d2:6e:af:b1:0b:93:82:4d:f1:
                    48:70:f7:25:88:13:d2:a8:51:cf:19:ec:e2:ea:77:
                    6a:70:c2:2c:55:4e:e8:00:e7:d8:6b:cb:ea:46:ea:
                    7b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:67:AD:32:70:41:5D:D4:BB:2B:D2:EB:7A:CF:A3:FC:3D:9C:47:30
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3137362e302f32302d3230203d3e2039383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.36.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         13:96:29:89:5b:91:ac:95:db:28:c0:2a:0c:6e:34:57:56:a2:
         88:06:21:d0:b3:f5:00:b5:6e:93:45:31:44:88:33:94:7f:8e:
         da:de:fb:8b:ed:f3:21:b4:35:a8:84:03:82:d0:4b:9c:6d:6b:
         a1:b3:87:4d:da:25:aa:92:8e:a3:07:c1:83:3b:de:84:d6:0a:
         62:3f:90:68:19:a8:03:a8:4d:f0:a3:4f:72:58:51:6d:d3:8c:
         86:b8:da:27:a9:52:0c:99:c6:25:bc:29:10:8c:13:8a:1e:7a:
         fc:88:f1:c3:aa:9d:85:24:f7:08:fe:5d:3a:a7:3f:90:d8:f1:
         9e:60:84:f9:b2:f3:2f:e8:6f:ca:bb:40:9c:35:f4:14:af:9c:
         b1:1b:48:d8:5b:87:2d:c5:a7:a1:b8:7b:ca:26:8e:30:e0:81:
         c8:cd:96:14:05:36:24:bf:f0:fb:70:e7:07:44:73:6c:f2:3c:
         32:00:be:7e:0c:f3:e2:4b:4d:ef:c9:27:73:ab:19:9e:30:62:
         0a:77:0b:fe:36:2a:df:9c:88:e0:d2:17:09:da:87:85:c3:4b:
         b4:e8:2c:9d:d4:59:16:99:f1:ab:82:46:da:01:e7:f9:ee:c1:
         5f:03:3b:7a:0c:0c:e7:4a:75:07:0b:f8:ad:34:ed:11:4b:95:
         2a:66:ae:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:17:17 2026 by rpki-client