Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132312e37392e3133322e302f32342d3234203d3e203338333634.roa
File:                     3132312e37392e3133322e302f32342d3234203d3e203338333634.roa (raw, json)
Hash identifier:          DQ3A6rNmfnHNkHIDXYquEeC1CZmxZ+Ctbjslv8jXhWg=
Subject key identifier:   45:38:C5:81:C2:84:31:12:D6:5F:67:7A:1C:36:6B:78:1F:68:39:CD
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       15C300A3CCCA469C93D16EB26B5BF193668868D9
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132312e37392e3133322e302f32342d3234203d3e203338333634.roa
Signing time:             Tue 12 May 2026 02:51:56 +0000
ROA not before:           Tue 12 May 2026 02:46:56 +0000
ROA not after:            Tue 11 May 2027 02:51:56 +0000
asID:                     38364
IP address blocks:        121.79.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c3:00:a3:cc:ca:46:9c:93:d1:6e:b2:6b:5b:f1:93:66:88:68:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 12 02:46:56 2026 GMT
            Not After : May 11 02:51:56 2027 GMT
        Subject: CN=4538C581C2843112D65F677A1C366B781F6839CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0b:c5:1a:05:d4:74:70:ee:40:e1:f8:35:f1:
                    ba:9b:19:8b:17:e2:26:9d:3f:20:12:e5:f0:50:f2:
                    f4:1a:8f:77:53:d5:a6:f0:b3:20:8a:b2:ca:1a:a6:
                    ba:0f:52:24:81:d6:43:95:45:bd:2b:9a:3e:a2:0c:
                    b2:0b:ab:23:61:8e:84:67:58:4b:a4:29:49:1f:fc:
                    fa:d9:5a:6c:55:4b:1e:1c:b9:33:fa:89:a7:34:35:
                    8f:fb:70:49:d2:ad:99:c7:6e:41:91:ce:05:e1:91:
                    83:48:77:17:e4:a8:e3:59:91:b8:11:44:8d:3e:5d:
                    0e:91:49:37:7d:ef:a7:94:ac:15:29:88:29:36:94:
                    a1:b9:83:89:47:c5:35:db:b6:0a:58:95:f8:8f:96:
                    29:e7:a1:d9:a2:94:4a:41:ce:b4:0e:a8:34:a1:8a:
                    e2:b9:75:16:f6:50:79:c8:25:3d:61:b9:6f:77:69:
                    66:09:d9:d9:3c:4c:77:49:3e:d4:b8:d6:4d:c1:33:
                    5e:0f:d8:43:f6:8a:86:4d:23:56:42:59:c3:3e:ac:
                    a2:5c:67:4c:a0:a4:4a:15:fe:2d:dc:ff:58:ad:13:
                    4a:f6:0b:67:95:f2:4c:69:f3:f5:5d:c4:3c:e6:51:
                    4b:05:f1:49:e4:8d:92:c4:56:f7:0f:70:63:55:b1:
                    07:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:38:C5:81:C2:84:31:12:D6:5F:67:7A:1C:36:6B:78:1F:68:39:CD
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132312e37392e3133322e302f32342d3234203d3e203338333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.79.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:8f:84:20:bf:04:bf:bf:78:20:35:b1:69:21:8e:15:8f:d7:
         da:63:12:86:91:a2:39:46:f1:83:f5:e1:20:0b:26:f8:52:00:
         56:bd:52:dd:aa:ae:8d:8c:dd:ae:ac:3c:60:ff:b2:65:ca:f2:
         9b:17:ff:a8:44:0f:29:d4:57:05:a2:be:7f:6e:fd:b9:08:42:
         27:48:3c:fc:2f:75:4d:79:8c:df:53:95:db:fb:64:57:4e:11:
         c8:4e:89:6e:2f:3a:12:7b:93:4d:4e:55:ea:f0:5b:48:df:12:
         ef:70:2b:58:33:6b:f5:ed:07:63:61:17:46:df:74:98:3c:25:
         66:50:7f:53:8b:5c:bd:95:0f:56:66:b0:de:6a:b7:49:59:47:
         e4:32:eb:31:f5:32:ae:a2:cd:3d:41:f6:57:9b:70:91:cc:d7:
         0e:6c:eb:2e:25:17:38:fe:1e:50:af:c3:e8:04:6e:43:35:40:
         ef:32:06:73:83:8c:49:de:e6:3d:13:a4:d6:df:e8:1d:21:cd:
         c6:57:62:c9:b8:84:cb:b2:e1:bb:9a:1d:1f:dd:01:2c:8a:87:
         9b:70:3b:24:3e:59:55:33:f6:40:8b:8d:10:3e:f4:c2:60:f7:
         b3:27:af:ff:ee:0e:2c:ea:b8:34:8b:5c:8d:f5:4c:be:92:cf:
         ea:84:c4:c7
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUFcMAo8zKRpyT0W6ya1vxk2aIaNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw
NDk1QzhDNDAeFw0yNjA1MTIwMjQ2NTZaFw0yNzA1MTEwMjUxNTZaMDMxMTAvBgNV
BAMTKDQ1MzhDNTgxQzI4NDMxMTJENjVGNjc3QTFDMzY2Qjc4MUY2ODM5Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJC8UaBdR0cO5A4fg18bqbGYsX
4iadPyAS5fBQ8vQaj3dT1abwsyCKssoaproPUiSB1kOVRb0rmj6iDLILqyNhjoRn
WEukKUkf/PrZWmxVSx4cuTP6iac0NY/7cEnSrZnHbkGRzgXhkYNIdxfkqONZkbgR
RI0+XQ6RSTd976eUrBUpiCk2lKG5g4lHxTXbtgpYlfiPlinnodmilEpBzrQOqDSh
iuK5dRb2UHnIJT1huW93aWYJ2dk8THdJPtS41k3BM14P2EP2ioZNI1ZCWcM+rKJc
Z0ygpEoV/i3c/1itE0r2C2eV8kxp8/VdxDzmUUsF8UnkjZLEVvcPcGNVsQddAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQURTjFgcKEMRLWX2d6HDZreB9oOc0wHwYDVR0j
BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4
NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NTg5MDk4NTIyNjg2MjU5NS8wLzMxMzIzMTJlMzcz
OTJlMzEzMzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzODMzMzYzNC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAHlPhDANBgkqhkiG9w0BAQsFAAOCAQEAEo+EIL8Ev794IDWxaSGOFY/X
2mMShpGiOUbxg/XhIAsm+FIAVr1S3aqujYzdrqw8YP+yZcrymxf/qEQPKdRXBaK+
f279uQhCJ0g8/C91TXmM31OV2/tkV04RyE6Jbi86EnuTTU5V6vBbSN8S73ArWDNr
9e0HY2EXRt90mDwlZlB/U4tcvZUPVmaw3mq3SVlH5DLrMfUyrqLNPUH2V5twkczX
DmzrLiUXOP4eUK/D6ARuQzVA7zIGc4OMSd7mPROk1t/oHSHNxldiybiEy7Lhu5od
H90BLIqHm3A7JD5ZVTP2QIuNED70wmD3syev/+4OLOq4NItcjfVMvpLP6oTExw==
-----END CERTIFICATE-----
Generated at Wed May 13 15:56:58 2026 by rpki-client