Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132312e37392e3133312e302f32342d3234203d3e203338333634.roa
File:                     3132312e37392e3133312e302f32342d3234203d3e203338333634.roa (raw, json)
Hash identifier:          7cFDUlg60bMIW9jFfm3UZtdUvZh+bsri/rVFuEb0oDI=
Subject key identifier:   D0:6D:DC:60:19:7B:6A:95:97:3F:41:5F:B6:D9:DE:9A:73:29:FA:BB
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       7902EDF1B8BB586A1F51FE740D2D7C990B2C6C66
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132312e37392e3133312e302f32342d3234203d3e203338333634.roa
Signing time:             Tue 12 May 2026 02:51:55 +0000
ROA not before:           Tue 12 May 2026 02:46:55 +0000
ROA not after:            Tue 11 May 2027 02:51:55 +0000
asID:                     38364
IP address blocks:        121.79.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:02:ed:f1:b8:bb:58:6a:1f:51:fe:74:0d:2d:7c:99:0b:2c:6c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 12 02:46:55 2026 GMT
            Not After : May 11 02:51:55 2027 GMT
        Subject: CN=D06DDC60197B6A95973F415FB6D9DE9A7329FABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ed:41:fa:8f:51:f9:3f:34:0d:13:f7:c7:1d:
                    47:54:4e:b9:f6:a0:87:d2:2f:d6:6d:12:0e:3e:89:
                    6e:40:1a:86:6a:ff:cd:5a:e3:fc:5c:65:85:62:d3:
                    74:fb:c0:e8:10:79:0f:a9:68:4a:d6:4f:12:7c:6d:
                    28:d9:e3:44:81:64:90:7e:92:7d:b1:67:60:c0:d5:
                    0b:71:a5:3c:92:2b:3b:a3:bb:a8:9c:82:5d:45:20:
                    46:f6:0c:c8:1c:41:05:6e:90:7a:d9:fd:bc:ba:2e:
                    96:c9:b6:8b:18:86:89:3d:fb:c9:68:91:96:ef:d3:
                    0c:91:05:e4:0b:c6:79:17:0d:20:ff:c5:82:d5:85:
                    8c:55:de:09:a9:99:f0:2a:da:dc:48:48:b5:a2:86:
                    d4:00:69:98:72:28:80:e1:d0:38:88:1f:df:90:cf:
                    d5:47:4d:f9:cd:27:47:d5:ca:62:a4:28:32:40:97:
                    8d:73:63:46:27:21:e0:2a:62:bc:69:24:17:46:32:
                    1e:a6:c9:07:bf:18:18:3b:60:02:48:02:5a:86:e3:
                    fc:53:80:2c:d7:a3:be:96:59:e7:06:b2:f5:af:e2:
                    61:f0:bb:8a:1e:98:bb:31:12:32:43:96:c6:fa:a1:
                    14:e8:47:38:d4:4d:16:4b:a6:c8:15:90:3c:a7:97:
                    f0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6D:DC:60:19:7B:6A:95:97:3F:41:5F:B6:D9:DE:9A:73:29:FA:BB
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132312e37392e3133312e302f32342d3234203d3e203338333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.79.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:5b:05:44:9d:7f:52:dd:fb:63:b3:4f:75:81:fd:65:d2:41:
         02:71:4d:c9:a7:d8:00:4b:18:7b:19:86:65:77:60:84:08:d8:
         22:b7:6b:2b:79:e4:97:6b:08:2e:be:af:da:a6:3e:c4:a8:a3:
         9f:26:3c:03:ef:c4:23:93:87:20:bb:3c:11:0a:d4:aa:a6:a8:
         0e:4a:cb:6a:9e:98:74:64:62:78:0b:60:f2:30:06:dc:5e:a2:
         9c:6a:dc:ba:7f:f1:ed:7c:52:fe:0e:4d:bb:6d:29:b3:ba:a3:
         c1:80:36:f1:67:5d:a7:bf:f7:70:6d:41:73:69:9e:09:cf:86:
         d2:0f:e5:5e:4d:32:d0:00:4c:60:81:cc:d3:d8:1e:5d:ea:7e:
         dc:b3:ec:18:0b:d7:3f:fc:bb:13:8e:a6:09:fc:21:7f:97:01:
         8b:e0:c6:21:de:2c:76:a1:ac:5a:db:48:94:4e:a3:78:dd:19:
         58:79:18:99:44:de:36:ab:97:f8:f1:31:6f:8d:97:2f:53:95:
         14:15:9c:c9:67:cd:91:a2:ab:13:b3:6c:b8:40:cb:6a:df:6d:
         2b:a7:3e:01:ee:b5:f6:79:5b:54:58:5e:29:e5:21:1e:38:37:
         9d:ab:e1:61:42:30:20:b5:7d:84:81:37:ee:50:af:6a:4e:f2:
         5a:c8:af:70
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUeQLt8bi7WGofUf50DS18mQssbGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw
NDk1QzhDNDAeFw0yNjA1MTIwMjQ2NTVaFw0yNzA1MTEwMjUxNTVaMDMxMTAvBgNV
BAMTKEQwNkREQzYwMTk3QjZBOTU5NzNGNDE1RkI2RDlERTlBNzMyOUZBQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj7UH6j1H5PzQNE/fHHUdUTrn2
oIfSL9ZtEg4+iW5AGoZq/81a4/xcZYVi03T7wOgQeQ+paErWTxJ8bSjZ40SBZJB+
kn2xZ2DA1QtxpTySKzuju6icgl1FIEb2DMgcQQVukHrZ/by6LpbJtosYhok9+8lo
kZbv0wyRBeQLxnkXDSD/xYLVhYxV3gmpmfAq2txISLWihtQAaZhyKIDh0DiIH9+Q
z9VHTfnNJ0fVymKkKDJAl41zY0YnIeAqYrxpJBdGMh6myQe/GBg7YAJIAlqG4/xT
gCzXo76WWecGsvWv4mHwu4oemLsxEjJDlsb6oRToRzjUTRZLpsgVkDynl/ApAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU0G3cYBl7apWXP0FfttnemnMp+rswHwYDVR0j
BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4
NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NTg5MDk4NTIyNjg2MjU5NS8wLzMxMzIzMTJlMzcz
OTJlMzEzMzMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzODMzMzYzNC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAHlPgzANBgkqhkiG9w0BAQsFAAOCAQEAElsFRJ1/Ut37Y7NPdYH9ZdJB
AnFNyafYAEsYexmGZXdghAjYIrdrK3nkl2sILr6v2qY+xKijnyY8A+/EI5OHILs8
EQrUqqaoDkrLap6YdGRieAtg8jAG3F6inGrcun/x7XxS/g5Nu20ps7qjwYA28Wdd
p7/3cG1Bc2meCc+G0g/lXk0y0ABMYIHM09geXep+3LPsGAvXP/y7E46mCfwhf5cB
i+DGId4sdqGsWttIlE6jeN0ZWHkYmUTeNquX+PExb42XL1OVFBWcyWfNkaKrE7Ns
uEDLat9tK6c+Ae619nlbVFheKeUhHjg3navhYUIwILV9hIE37lCvak7yWsivcA==
-----END CERTIFICATE-----
Generated at Wed May 13 14:57:21 2026 by rpki-client