Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3233342e302f32342d3234203d3e203234313338.roa
File:                     3130312e33362e3233342e302f32342d3234203d3e203234313338.roa (raw, json)
Hash identifier:          XNyoCVHC5CcnIWjlIvNjXavneIYCe/yzSdrxXFuZ+8w=
Subject key identifier:   1F:CF:76:B1:F9:B4:CC:4E:25:FD:62:66:05:59:E7:39:9A:46:62:8C
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       18B920DFCB7D2FA102971F3AB1ABD8B84F3A33DC
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3233342e302f32342d3234203d3e203234313338.roa
Signing time:             Tue 12 May 2026 07:03:24 +0000
ROA not before:           Tue 12 May 2026 06:58:24 +0000
ROA not after:            Tue 11 May 2027 07:03:24 +0000
asID:                     24138
IP address blocks:        101.36.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b9:20:df:cb:7d:2f:a1:02:97:1f:3a:b1:ab:d8:b8:4f:3a:33:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 12 06:58:24 2026 GMT
            Not After : May 11 07:03:24 2027 GMT
        Subject: CN=1FCF76B1F9B4CC4E25FD62660559E7399A46628C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:24:8b:f2:34:f2:1a:8e:c3:38:82:f4:f3:9f:
                    75:3b:05:79:88:16:2a:d3:25:ee:41:fa:d0:85:d6:
                    af:8e:db:11:58:6a:c1:59:b3:cb:75:80:c0:95:4e:
                    51:63:9a:83:e2:64:3a:0e:82:ee:06:c1:4b:1b:2b:
                    90:82:9f:a8:01:4e:7a:59:73:1d:9b:7a:d9:fb:42:
                    2c:23:7a:0c:33:e5:b9:84:15:8b:02:c3:cc:fd:1b:
                    d7:e5:0a:56:65:bd:40:c7:a6:e6:0e:43:13:68:72:
                    1e:01:f7:0e:26:5f:df:b8:8e:60:0b:79:87:73:14:
                    3b:6a:db:56:de:23:0b:96:fa:b8:50:e7:e0:15:5f:
                    6a:76:75:8c:ad:3b:d3:d6:0c:6b:75:64:61:74:42:
                    92:79:af:6b:31:09:0b:f3:56:ac:5a:86:6c:6c:76:
                    a7:e5:94:3e:fb:b3:b2:90:49:17:05:a6:86:69:72:
                    5e:6c:5b:5c:65:e8:9b:41:47:45:f1:f4:20:f4:d1:
                    0e:f5:e2:50:87:dd:a7:a8:c1:38:7d:a4:98:eb:89:
                    4a:ac:8b:2e:96:5f:5e:a0:6e:43:02:a8:f1:e8:c6:
                    f3:4c:b8:62:c6:4f:d4:c2:c8:a5:ab:f2:4d:69:40:
                    97:24:4b:e9:58:11:ef:96:4c:c2:7c:2b:d0:ef:bb:
                    69:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CF:76:B1:F9:B4:CC:4E:25:FD:62:66:05:59:E7:39:9A:46:62:8C
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3233342e302f32342d3234203d3e203234313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.36.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:33:84:fc:fe:fc:a6:60:f4:49:ae:ed:16:03:06:96:2f:20:
         37:1e:ac:cf:f7:fd:82:b1:9b:0b:35:51:2a:e2:fb:97:b9:c0:
         5c:50:fe:30:bd:f5:92:38:52:b2:09:5f:92:70:ba:f4:47:7d:
         f0:e8:6f:93:d0:44:d0:81:6e:8c:d8:b5:17:f8:85:d1:c7:0e:
         e7:98:24:4a:df:25:25:1e:72:18:d7:fc:72:dd:c0:71:0a:7c:
         96:f3:b0:48:44:ae:8b:08:cf:58:a3:e7:ca:2c:e6:bc:c1:55:
         fb:44:2c:db:c1:fe:f3:63:c3:0f:1e:2e:d3:70:a5:21:a8:58:
         f6:b8:16:96:18:42:14:65:f5:f3:46:46:79:b3:fa:b2:56:61:
         cb:b4:54:1c:34:bf:13:42:f9:61:32:92:d9:52:9c:62:ce:53:
         7e:37:a6:d6:05:6e:75:ae:82:65:0c:39:8d:64:e4:f9:c1:a5:
         e3:20:f7:34:58:4b:32:36:e5:79:94:1f:da:f7:63:1f:35:63:
         d4:b6:c7:9a:a0:36:63:d6:2d:bd:e7:67:ba:5f:fe:d2:e7:cd:
         64:12:28:67:c9:b8:1d:a1:d7:34:1e:79:ee:ca:85:1e:f6:cf:
         24:ab:f9:05:7c:26:cf:ad:a1:0e:ca:18:c8:c1:c3:0e:26:c3:
         c2:f3:f1:4a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 11:50:34 2026 by rpki-client