Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e31342e3232342e302f31392d3139203d3e203234313338.roa
File:                     3132322e31342e3232342e302f31392d3139203d3e203234313338.roa (raw, json)
Hash identifier:          rFb3KxG2yCyIDKV9OwTJ6l6ueQfTWPMNANC802eRro0=
Subject key identifier:   77:80:47:B9:94:48:E3:5A:8A:1B:51:8B:F5:AD:D2:34:24:05:43:58
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       5BD194569624D5E81377B7B30F3EC2E22205E904
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e31342e3232342e302f31392d3139203d3e203234313338.roa
Signing time:             Tue 12 May 2026 07:03:25 +0000
ROA not before:           Tue 12 May 2026 06:58:25 +0000
ROA not after:            Tue 11 May 2027 07:03:25 +0000
asID:                     24138
IP address blocks:        122.14.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d1:94:56:96:24:d5:e8:13:77:b7:b3:0f:3e:c2:e2:22:05:e9:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 12 06:58:25 2026 GMT
            Not After : May 11 07:03:25 2027 GMT
        Subject: CN=778047B99448E35A8A1B518BF5ADD23424054358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7a:52:bb:b7:01:b7:0a:d4:ac:0b:7b:1e:39:
                    37:12:6b:12:c1:4e:3f:3b:f3:99:dd:95:d9:93:c2:
                    de:29:e4:23:9b:e6:a9:6d:c7:93:83:70:9f:f3:4f:
                    db:1c:81:18:7f:af:fa:18:2a:ff:1d:6a:ad:0b:b8:
                    c7:c3:84:27:80:57:f0:83:5b:9f:b1:10:e1:d8:1c:
                    1b:38:a6:5a:44:8e:c9:16:5b:7d:00:b6:75:49:b0:
                    d9:90:7d:55:87:35:ef:86:f3:9f:c7:7f:6f:b5:cf:
                    fb:24:fb:a8:4d:6a:b0:f9:92:3a:eb:1e:6c:74:8b:
                    4a:02:0a:fd:b5:3f:ee:4c:ac:92:99:e7:a5:02:10:
                    b8:24:05:ef:f2:f5:aa:14:c6:63:49:ac:b3:7b:53:
                    a5:4d:d9:1a:15:95:39:60:1c:e3:23:7e:f3:77:fa:
                    f1:26:52:18:ef:82:81:b6:3f:31:e1:66:d7:07:a1:
                    58:fe:49:3a:30:55:c1:d9:75:f0:26:bf:58:2d:ba:
                    04:95:2b:11:3d:1e:48:86:83:17:f7:6f:c7:0e:96:
                    5a:d5:15:0b:e9:5b:cc:fe:d9:ff:cc:b1:cf:30:e0:
                    33:2e:d5:9c:b3:f4:10:2c:93:b5:63:50:35:25:92:
                    ec:12:36:4e:d3:42:09:2a:f3:67:cc:26:1a:33:ee:
                    3c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:80:47:B9:94:48:E3:5A:8A:1B:51:8B:F5:AD:D2:34:24:05:43:58
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e31342e3232342e302f31392d3139203d3e203234313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.14.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a4:fb:dd:ec:87:d9:22:c3:32:23:e4:1e:8b:92:62:ad:7b:c6:
         f9:fb:e7:fa:69:83:b5:1f:c9:95:47:b5:c1:56:94:a7:4e:a0:
         35:dd:bd:5f:a7:5d:08:61:5d:a3:be:60:4c:f3:24:b5:0d:3f:
         4b:03:cc:d7:ba:6e:42:64:f5:2a:66:3e:e9:df:23:ed:bc:da:
         49:77:15:64:da:db:dd:37:15:b5:18:0b:86:d1:1f:58:de:76:
         6f:77:ee:34:74:84:92:1c:22:2e:ee:88:bc:7d:b5:e0:75:19:
         e0:f4:3c:e7:59:7e:07:7c:51:2f:28:78:ee:91:36:24:54:0d:
         ce:c3:69:42:5d:5a:9f:19:90:e7:9a:db:36:2b:a3:a8:32:fe:
         95:cb:8b:f2:eb:ad:01:40:79:c8:5d:59:72:64:34:75:16:60:
         ae:72:55:94:29:7a:73:f2:e5:20:ba:a6:81:c1:33:10:fb:26:
         d8:a5:e2:d3:65:2c:c1:2a:d2:7a:66:ec:fc:b6:bd:7d:6b:63:
         61:81:5a:95:5c:8a:2d:bb:4f:3d:fd:7f:20:cb:9a:f7:7a:a2:
         0b:9e:8f:eb:28:8b:15:6b:70:d8:ef:cb:ba:a3:19:2a:f9:2f:
         c5:23:0e:4e:54:f9:7d:ec:9a:55:0b:4f:c6:bb:69:8a:f4:32:
         fb:60:0c:e4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 09:15:10 2026 by rpki-client