Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3233332e302f32342d3234203d3e203234313338.roa
File:                     3130312e33362e3233332e302f32342d3234203d3e203234313338.roa (raw, json)
Hash identifier:          mmrDyG57WEA/r8zgkdiFeIeUkAwSkwO6J4AG4ng1WLQ=
Subject key identifier:   66:5B:74:42:EC:DE:17:76:39:39:5F:D1:C7:ED:11:AD:03:AE:F9:00
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       2DB32ADC6AD3F2F699A25D1E7D706C64D8A7B887
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3233332e302f32342d3234203d3e203234313338.roa
Signing time:             Tue 12 May 2026 07:03:24 +0000
ROA not before:           Tue 12 May 2026 06:58:24 +0000
ROA not after:            Tue 11 May 2027 07:03:24 +0000
asID:                     24138
IP address blocks:        101.36.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b3:2a:dc:6a:d3:f2:f6:99:a2:5d:1e:7d:70:6c:64:d8:a7:b8:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 12 06:58:24 2026 GMT
            Not After : May 11 07:03:24 2027 GMT
        Subject: CN=665B7442ECDE177639395FD1C7ED11AD03AEF900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c4:74:06:20:7e:08:ee:64:c5:a3:85:61:23:
                    8a:87:ec:34:86:32:13:bb:93:6b:ee:a7:d0:32:c5:
                    a0:a5:7b:23:25:22:84:5e:53:2c:4c:73:16:a4:ae:
                    fd:66:82:d9:03:a6:2c:9f:20:5a:ef:aa:34:9b:d9:
                    72:cf:60:a4:d3:c7:65:f5:09:09:76:04:b0:c8:a7:
                    23:d2:01:0b:27:82:76:0f:cc:66:26:ea:4c:0c:79:
                    3f:c5:19:95:04:b1:cd:fb:c8:a6:fe:ee:4c:a4:cd:
                    7b:ab:27:c2:0d:2c:c0:7b:2a:26:1a:de:cf:cb:1c:
                    e7:f2:59:89:44:7c:a6:52:65:48:d2:e8:f1:33:f9:
                    76:70:fb:ea:56:1a:ae:2d:26:bd:32:bb:e8:8b:cd:
                    c9:c2:0b:72:0b:d1:0e:24:ef:2c:1a:fb:52:91:57:
                    3d:04:e3:91:ad:3e:b3:ab:79:17:d5:ba:36:f7:61:
                    c6:3a:1c:ff:32:8b:63:7f:e5:9c:72:8a:23:1c:58:
                    00:91:55:df:22:bb:b0:9a:52:d3:7b:e8:62:25:c8:
                    6e:42:81:55:f7:ad:a7:73:29:7f:6a:9a:21:3b:2a:
                    18:d2:a1:7b:47:55:20:81:15:a7:be:78:d7:90:fc:
                    94:d5:53:05:c5:79:90:96:26:d5:45:0a:42:3b:de:
                    c8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5B:74:42:EC:DE:17:76:39:39:5F:D1:C7:ED:11:AD:03:AE:F9:00
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3233332e302f32342d3234203d3e203234313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.36.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:14:21:9f:77:34:68:d5:11:af:2f:07:e7:c7:8d:31:b8:7d:
         51:41:a7:20:49:df:0d:89:57:3a:e3:c3:54:09:54:32:89:ec:
         5b:ba:75:24:d9:1f:20:04:6a:b3:36:f2:17:cc:d0:3c:ff:53:
         b7:f8:55:a0:96:5c:ac:fd:72:22:3a:73:4d:a6:2b:f2:2f:30:
         16:3b:48:8e:eb:68:72:47:2f:49:eb:7d:73:5d:17:5a:0e:a3:
         eb:97:3c:c3:2a:c4:66:11:77:0d:57:1a:cf:f3:ac:9c:64:35:
         2d:30:33:7d:46:2e:6e:f3:d3:97:fb:28:6c:45:10:ed:3e:c4:
         6a:f4:e7:7d:f8:63:b5:46:62:06:60:d6:a6:82:45:70:d7:0d:
         03:f9:f4:2b:10:2d:f5:5d:d8:fc:9e:1d:fa:47:97:d1:4a:9a:
         56:aa:05:ac:c9:a8:de:c5:b2:d5:a4:b2:85:7d:6c:48:ce:bb:
         53:1c:34:1c:2f:49:ea:aa:4e:76:95:a3:35:ef:11:dc:76:ea:
         b8:10:2f:3a:c6:d1:f7:01:81:ab:89:e6:0e:ec:e3:66:ff:51:
         02:20:55:98:b3:0d:88:23:39:85:bf:7b:33:92:16:3c:87:97:
         fc:8a:2e:24:66:93:39:c4:38:67:3b:db:75:34:41:6e:dd:73:
         b8:8c:ee:f2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:44:47 2026 by rpki-client