Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3233322e302f32312d3231203d3e203234313338.roa
File:                     3130312e33362e3233322e302f32312d3231203d3e203234313338.roa (raw, json)
Hash identifier:          ba0jgTdueU5yj1ohxbVdEEdFXVsgFS1M8AJnWuD6cTc=
Subject key identifier:   4B:D0:33:02:3B:5F:78:B0:71:FC:F9:0C:DB:93:5E:EC:8D:2E:A7:27
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       206E37991FF79F176BA3CA928BC0A85015115FE3
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3233322e302f32312d3231203d3e203234313338.roa
Signing time:             Tue 12 May 2026 07:03:24 +0000
ROA not before:           Tue 12 May 2026 06:58:24 +0000
ROA not after:            Tue 11 May 2027 07:03:24 +0000
asID:                     24138
IP address blocks:        101.36.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6e:37:99:1f:f7:9f:17:6b:a3:ca:92:8b:c0:a8:50:15:11:5f:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 12 06:58:24 2026 GMT
            Not After : May 11 07:03:24 2027 GMT
        Subject: CN=4BD033023B5F78B071FCF90CDB935EEC8D2EA727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:37:c5:ec:2d:77:57:df:dc:b9:0f:be:e3:26:
                    da:08:ec:dc:ee:49:44:2e:3c:b6:e6:72:45:f3:5e:
                    bf:1a:b8:e7:45:d3:db:84:98:bd:7f:df:d8:7a:ee:
                    a5:0b:a2:f5:c8:f9:03:0e:a6:41:3c:a6:74:87:cc:
                    31:0e:c3:d1:30:0a:5a:43:8c:30:d6:e8:7a:11:39:
                    da:0a:05:3d:1a:18:7d:11:99:e6:db:9d:25:94:2c:
                    b0:85:33:f0:14:77:1a:08:4d:d6:21:49:18:15:ce:
                    88:c5:30:e4:de:75:6e:5b:69:35:b0:d2:77:ee:ac:
                    27:02:fa:d0:74:2b:3e:24:1c:ca:a2:7e:c7:e1:8c:
                    ba:db:0c:ae:be:14:bb:5b:6a:fa:42:b6:36:cb:b7:
                    df:d0:78:92:91:01:d2:5a:35:d6:76:64:9e:dd:c3:
                    99:48:23:da:ed:59:fd:37:24:8c:fb:da:8a:12:06:
                    aa:8d:ce:9f:24:e8:e1:8c:d4:67:a5:89:de:e2:98:
                    7c:a1:ac:3d:37:a1:21:93:96:29:25:5d:00:09:23:
                    39:ea:28:8b:a8:12:67:b4:4d:55:43:3b:0e:8c:ab:
                    49:43:68:b2:50:ef:00:b1:e9:7f:ca:fa:f2:a8:d0:
                    11:0f:91:27:cb:85:48:72:9e:1d:57:52:46:d2:88:
                    b9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D0:33:02:3B:5F:78:B0:71:FC:F9:0C:DB:93:5E:EC:8D:2E:A7:27
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3233322e302f32312d3231203d3e203234313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.36.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         27:8b:e0:6d:55:6a:05:51:ee:8e:c0:05:53:9b:90:ed:8e:9d:
         be:f6:1c:e8:0c:5a:69:1e:e8:ff:28:4e:2d:0f:0d:0c:fe:f4:
         f0:f4:d9:66:e8:7e:43:00:b3:2f:12:a6:9a:70:cf:f0:49:82:
         d3:65:e1:78:8c:23:8f:19:91:f3:3d:c0:98:b5:3f:44:24:9d:
         5e:08:f1:9d:37:cf:1a:00:57:4e:00:9b:8c:a7:3d:3d:30:31:
         e2:27:7d:eb:8d:15:08:f3:f7:93:f3:1d:98:52:38:26:5b:2f:
         91:66:41:de:ce:49:30:39:96:d9:5d:34:d8:c8:1d:9d:39:d8:
         a4:b3:7b:05:5b:d3:33:fd:74:63:5a:35:0c:3d:6e:0e:96:77:
         38:f8:70:b8:bc:80:4e:41:ad:c0:73:cf:10:13:6a:fe:fe:df:
         1c:34:c1:2d:06:92:67:77:f9:9e:50:99:23:8a:d8:4f:89:54:
         cb:74:2e:97:7f:59:38:d2:85:2e:3c:5b:81:d3:4f:27:3d:98:
         9b:69:cc:8c:7a:21:1d:14:39:62:90:de:ce:70:4c:3e:6d:2f:
         9b:6d:77:b6:c3:34:0c:1a:75:37:84:93:03:63:69:70:5f:fd:
         08:c0:37:4f:b1:4c:b1:43:0c:bf:75:dc:9c:0b:4a:14:3b:a7:
         57:d3:cd:40
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:27:28 2026 by rpki-client