Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e31342e3139322e302f31382d3138203d3e203233373234.roa
File:                     3132322e31342e3139322e302f31382d3138203d3e203233373234.roa (raw, json)
Hash identifier:          O3BFB80Fj+RLPVP/+xK8K1scp2U5SRohOOQcCjdlDJQ=
Subject key identifier:   12:2C:EF:68:35:02:A7:06:62:94:4C:9D:CB:70:3D:2B:DC:71:39:8A
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       23ABAD65DA7932CA7BB2A5E3A97D5B1CBB7AA031
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e31342e3139322e302f31382d3138203d3e203233373234.roa
Signing time:             Tue 12 May 2026 07:03:24 +0000
ROA not before:           Tue 12 May 2026 06:58:24 +0000
ROA not after:            Tue 11 May 2027 07:03:24 +0000
asID:                     23724
IP address blocks:        122.14.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ab:ad:65:da:79:32:ca:7b:b2:a5:e3:a9:7d:5b:1c:bb:7a:a0:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 12 06:58:24 2026 GMT
            Not After : May 11 07:03:24 2027 GMT
        Subject: CN=122CEF683502A70662944C9DCB703D2BDC71398A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:01:f4:5a:0d:49:76:2d:e0:20:38:a9:32:f1:
                    d1:d8:bc:b6:8f:6c:c6:7e:70:4d:f7:d4:b9:c6:8c:
                    70:7e:0a:73:5c:9b:5f:c7:4b:4f:59:ad:10:c3:99:
                    c3:09:32:70:7b:af:e7:33:9a:14:c3:32:eb:03:8d:
                    d2:aa:f3:c9:8d:24:17:b7:7d:8b:09:9f:36:1c:3a:
                    dc:86:17:21:10:0f:a2:06:52:5b:14:f1:84:f0:47:
                    6a:90:49:ee:04:57:96:86:bc:2e:4e:45:2a:b7:8e:
                    b8:5c:ad:65:0c:8e:91:c3:e0:40:77:78:85:c8:7d:
                    3b:c9:f6:bc:6f:fc:28:59:c3:19:25:e8:b4:dc:c4:
                    00:45:ef:1c:60:98:59:18:4d:cb:f8:7f:d5:ad:5b:
                    64:28:2d:2b:bd:c0:ce:39:60:a3:23:df:22:ed:0c:
                    60:b3:3c:81:6c:c4:9f:80:48:31:36:1a:da:ca:e5:
                    b5:2e:f4:55:79:50:33:62:37:13:75:47:43:a4:b1:
                    b7:10:ba:a5:45:53:7e:23:80:5b:89:c0:f0:01:6f:
                    fb:ef:7d:dc:d6:5d:3e:8f:d4:90:d9:44:a2:05:6d:
                    01:9d:24:73:62:78:85:9d:4a:03:af:cc:6a:86:eb:
                    69:51:58:fd:68:c5:7f:90:e0:f1:1b:51:92:4a:21:
                    b5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2C:EF:68:35:02:A7:06:62:94:4C:9D:CB:70:3D:2B:DC:71:39:8A
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e31342e3139322e302f31382d3138203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.14.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ac:1a:f2:0f:e5:b0:44:e3:84:0b:11:99:b1:10:c2:64:b4:d3:
         e3:7f:8c:9b:5d:4e:9b:74:70:2f:d5:a7:06:5a:7b:dd:38:cc:
         cf:cb:15:c1:19:ce:df:99:c2:d0:58:68:06:ac:97:a2:ed:6b:
         bb:ea:53:f2:e4:7e:0c:32:f1:55:66:6c:36:2c:ff:03:1d:21:
         d6:b6:d8:fe:a3:01:c6:f8:8b:54:46:b6:4a:ed:90:25:d3:c9:
         56:db:63:e4:d9:e4:fc:f7:2d:9f:5f:f8:d0:d5:95:29:50:a8:
         af:14:f6:a6:20:87:21:5c:f1:6c:97:00:01:70:ed:9d:2a:7f:
         eb:b9:66:b2:a8:05:a7:a1:e9:62:16:6f:70:4c:0b:37:b5:0e:
         c8:27:7b:0f:cb:52:27:19:43:2e:23:c3:07:6b:b2:9a:f5:31:
         8f:da:0e:24:94:66:a6:a3:67:9c:99:53:af:23:8b:a4:9d:52:
         6d:01:8a:db:de:96:ec:25:0b:4b:2a:16:70:4d:2b:0c:c0:58:
         c1:7c:45:93:9e:0c:33:14:82:6b:b2:ee:8f:26:29:48:7f:35:
         cd:dd:0f:96:7a:52:3f:20:c2:a6:d0:c2:27:21:d3:65:51:4f:
         71:01:7c:7c:8f:40:e1:d7:b6:7c:dd:50:65:6c:7f:23:59:54:
         b9:1e:99:9e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 11:22:02 2026 by rpki-client