Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e31342e3139322e302f31382d3138203d3e20313333313139.roa
File:                     3132322e31342e3139322e302f31382d3138203d3e20313333313139.roa (raw, json)
Hash identifier:          rUn5EnITDqY/4duhAnX7EdOpudv1GOrUqjZzfwPLGic=
Subject key identifier:   1E:F4:DB:28:44:6C:63:A1:76:06:45:2F:F5:20:CD:13:29:76:7A:D8
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       1B62CCD710ED6770584AE4199DEAC75BBE1A585D
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e31342e3139322e302f31382d3138203d3e20313333313139.roa
Signing time:             Tue 12 May 2026 07:03:24 +0000
ROA not before:           Tue 12 May 2026 06:58:24 +0000
ROA not after:            Tue 11 May 2027 07:03:24 +0000
asID:                     133119
IP address blocks:        122.14.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:62:cc:d7:10:ed:67:70:58:4a:e4:19:9d:ea:c7:5b:be:1a:58:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 12 06:58:24 2026 GMT
            Not After : May 11 07:03:24 2027 GMT
        Subject: CN=1EF4DB28446C63A17606452FF520CD1329767AD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f2:0f:8d:8c:7c:f5:c8:04:39:66:71:b3:75:
                    91:b3:8b:f8:21:b3:69:95:46:b4:a9:b9:b4:d3:1f:
                    ed:e5:49:39:11:0f:8a:b9:5a:e4:b5:a2:d2:42:76:
                    b2:a0:ae:fc:3c:c1:57:0e:27:75:39:b6:78:b8:44:
                    21:1e:6a:34:98:11:70:9c:51:5c:b4:25:4f:ea:94:
                    5e:36:28:03:ee:eb:c0:b1:a9:79:02:03:a6:58:83:
                    b1:41:8c:58:c1:74:64:82:e4:6c:32:29:13:19:26:
                    b6:9c:62:f5:92:83:e0:07:97:bf:4d:35:2d:8d:eb:
                    53:e8:c7:5d:20:ff:ee:f6:89:3c:1c:87:32:35:5c:
                    4e:07:39:35:a8:c3:d0:c0:f0:9a:c4:b8:ea:6d:ca:
                    9d:ee:92:3c:a5:45:0f:a0:cb:57:7b:5d:27:e6:29:
                    33:fa:55:a1:49:12:ac:8b:d9:56:cd:1c:b1:2a:a2:
                    89:9a:61:c3:d9:b0:75:98:80:07:73:82:9f:25:57:
                    92:c4:d0:f2:25:3c:44:be:3a:c3:ee:93:1f:14:a1:
                    e7:dc:a6:1c:66:25:35:02:e8:63:67:25:7f:37:ea:
                    87:f2:f9:cd:29:61:59:0f:bb:e5:2c:f8:e6:a4:e9:
                    1d:af:4d:ef:9d:ba:9e:84:f3:e1:8d:e7:56:99:e6:
                    41:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F4:DB:28:44:6C:63:A1:76:06:45:2F:F5:20:CD:13:29:76:7A:D8
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e31342e3139322e302f31382d3138203d3e20313333313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.14.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         24:69:30:da:9c:55:7c:75:3a:53:84:f2:8f:50:69:ce:e0:a0:
         00:20:fb:93:80:d5:e2:c9:9a:e6:76:29:e3:f9:5e:31:0d:49:
         6d:0a:6d:67:76:92:2e:2f:a8:27:1c:a9:5e:ed:99:dd:e0:0f:
         e3:83:cf:24:72:f7:8d:a8:eb:68:f1:d8:99:5a:6d:e8:f9:4d:
         a2:bc:14:99:52:bd:95:75:f2:0a:94:e8:c3:af:dc:e0:f9:9a:
         da:3b:07:46:a8:31:5f:c7:88:13:20:ed:5c:a5:cf:54:f5:7c:
         6f:75:0c:70:4f:89:4e:9e:f7:08:7b:b0:cf:e2:10:a9:83:28:
         38:2a:f0:6f:a9:61:37:ee:4b:aa:b4:2a:87:b6:29:b1:7d:d5:
         46:b1:1f:cc:94:af:b3:54:14:66:70:3a:65:50:92:95:35:0c:
         ce:46:03:ba:b4:c6:3c:49:5e:47:62:ac:5e:ad:72:ce:c8:53:
         36:59:73:2c:46:ba:d7:9a:6e:5f:1f:25:67:53:0e:4a:82:e8:
         29:21:d2:fb:a8:8d:21:33:ea:65:03:d0:a1:53:a1:49:31:02:
         85:41:94:91:2b:94:48:5a:2a:e9:3c:1b:4d:ef:97:8c:62:23:
         29:80:7c:2e:76:94:3d:e3:c9:ad:1a:51:ed:30:54:15:31:05:
         d6:41:2c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:57:07 2026 by rpki-client