Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131342e3131332e3133382e302f32342d3234203d3e20313334373030.roa
File:                     3131342e3131332e3133382e302f32342d3234203d3e20313334373030.roa (raw, json)
Hash identifier:          6zGqoiX5FaVxrenz9FpnjYO+/e1gsOhuYE4JLa5q/OY=
Subject key identifier:   F0:E6:64:84:7F:77:ED:83:AE:D3:52:6A:56:A7:67:A9:1E:07:46:23
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       65682BD4580CFFC15D6E5B9781B4A60579E2FC2F
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131342e3131332e3133382e302f32342d3234203d3e20313334373030.roa
Signing time:             Sat 09 May 2026 08:21:20 +0000
ROA not before:           Sat 09 May 2026 08:16:20 +0000
ROA not after:            Sat 08 May 2027 08:21:20 +0000
asID:                     134700
IP address blocks:        114.113.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:68:2b:d4:58:0c:ff:c1:5d:6e:5b:97:81:b4:a6:05:79:e2:fc:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May  9 08:16:20 2026 GMT
            Not After : May  8 08:21:20 2027 GMT
        Subject: CN=F0E664847F77ED83AED3526A56A767A91E074623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:53:b3:1c:50:d8:db:62:c1:14:29:c3:47:26:
                    6a:aa:b2:21:55:54:3f:ed:a6:b9:10:d7:82:96:59:
                    1b:dc:ad:64:47:22:c3:33:7b:4b:ad:12:bb:54:69:
                    59:e1:7c:ef:69:0e:6e:c0:51:a1:51:37:95:69:47:
                    0b:80:41:e3:a7:b7:56:83:52:3f:ba:89:1a:29:e6:
                    c6:e5:01:e8:6f:fd:da:ed:f2:20:3b:5b:a5:42:01:
                    db:7c:9b:21:96:d2:e1:69:6e:e1:f4:24:76:5c:f6:
                    86:bf:0f:7f:87:49:12:d7:f7:6e:ac:e4:b0:2b:01:
                    ed:fb:77:bf:ce:b3:cd:b2:16:5f:85:b9:07:22:55:
                    dc:92:f1:65:60:c0:73:e9:ef:4b:01:81:70:a7:19:
                    9e:70:d0:db:61:c6:9c:90:97:b7:e6:f5:45:81:6d:
                    41:0e:3f:d7:72:b4:3d:f7:a7:5c:6e:40:f7:1a:02:
                    7a:44:d5:1f:b5:bc:ec:4e:e3:fd:f7:b8:ee:64:88:
                    0a:c2:34:83:40:b5:9c:8b:0a:74:33:23:93:8e:dc:
                    d0:a9:9c:19:66:17:66:b1:82:a7:9a:b8:a5:fa:ad:
                    43:d9:db:92:cb:12:75:0f:fe:da:1c:99:5b:1a:c7:
                    6c:b7:e6:7f:e2:ec:ee:f3:50:36:31:e3:28:59:92:
                    b9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E6:64:84:7F:77:ED:83:AE:D3:52:6A:56:A7:67:A9:1E:07:46:23
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131342e3131332e3133382e302f32342d3234203d3e20313334373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.113.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:c9:ec:ac:4a:ce:a2:66:b0:f0:b4:47:4d:60:92:45:34:37:
         e8:48:30:f4:cb:92:3b:3b:ca:d6:92:e8:e1:64:ad:74:05:0a:
         3f:7e:c8:1b:07:52:4f:4e:ad:ea:ba:14:1e:19:ae:a4:f4:38:
         b3:6f:a1:73:97:92:86:ba:5a:3e:7a:de:7d:ad:40:c3:37:b6:
         22:43:65:79:21:a3:7a:a6:0b:10:54:50:99:61:f0:f9:f9:90:
         98:d4:b7:c4:a5:12:1e:f6:72:be:69:56:3b:b3:38:01:c3:d3:
         0a:7f:d4:b2:3a:c0:57:f9:e1:87:5c:2c:66:ed:03:70:1b:68:
         ae:8b:e3:a1:b0:91:bb:b5:df:48:0c:2a:db:0f:4f:5c:02:5b:
         58:3d:cb:7c:21:81:14:d4:3c:b2:5d:18:f0:25:72:a3:9a:e2:
         1e:5e:c9:35:d1:fe:05:4b:7a:e0:bf:49:54:e7:7f:3d:e3:0a:
         ce:ca:9e:40:db:27:80:c1:ff:a0:87:fd:e2:4e:58:e4:4e:6f:
         40:c9:fe:41:ff:62:cb:9a:2b:35:0c:59:f5:b3:e2:1b:8d:b7:
         d0:8c:b1:e3:85:dc:5e:fe:37:e1:7b:ca:77:01:e3:4b:79:68:
         3b:d9:50:18:39:19:1d:39:90:c0:03:ae:f6:94:a0:cc:07:81:
         d1:e3:ab:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:56:46 2026 by rpki-client