Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e31342e3232342e302f32302d3230203d3e2039383038.roa
File:                     3132322e31342e3232342e302f32302d3230203d3e2039383038.roa (raw, json)
Hash identifier:          k5sPhbLDUbmS9k6u/0mcbPlBpgUxmRri9nNTbh8iPL8=
Subject key identifier:   86:EA:77:AA:21:27:F1:EC:A1:C1:37:46:2C:75:C6:47:1B:F8:C8:F7
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       202F7EE49849DB1C42AC20F5B612A6C5F1FA5D3D
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e31342e3232342e302f32302d3230203d3e2039383038.roa
Signing time:             Tue 12 May 2026 07:05:53 +0000
ROA not before:           Tue 12 May 2026 07:00:53 +0000
ROA not after:            Tue 11 May 2027 07:05:53 +0000
asID:                     9808
IP address blocks:        122.14.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2f:7e:e4:98:49:db:1c:42:ac:20:f5:b6:12:a6:c5:f1:fa:5d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 12 07:00:53 2026 GMT
            Not After : May 11 07:05:53 2027 GMT
        Subject: CN=86EA77AA2127F1ECA1C137462C75C6471BF8C8F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1e:8b:00:bc:7e:2f:5d:ac:69:47:72:68:98:
                    13:23:c5:70:17:9e:06:9a:f8:56:b9:c1:64:ab:9f:
                    a0:d2:46:94:3b:75:94:fa:63:54:19:d4:31:3b:21:
                    fe:dc:d9:f5:76:9b:7f:01:ff:d6:27:76:28:a8:30:
                    8c:50:47:9c:0c:73:12:1c:35:8c:d3:2e:3c:08:47:
                    fe:3c:6e:f5:eb:47:d5:64:cd:8c:b8:bd:66:34:d8:
                    c0:e6:0c:bb:83:c3:b1:45:78:0b:35:f4:7a:e6:77:
                    c9:78:d1:a4:a5:40:f5:77:34:29:7d:51:f5:de:52:
                    dc:69:13:1f:b8:83:09:9c:aa:c6:b4:8e:58:aa:c5:
                    1b:af:7a:2c:49:b2:08:6a:cf:a1:43:0f:c4:32:83:
                    18:8a:68:bb:7b:13:bc:fe:05:30:4d:cc:48:38:f0:
                    3e:4f:a4:fe:af:35:6e:df:30:8a:9c:25:5c:73:bb:
                    e8:76:45:86:81:64:8c:34:d3:a8:ab:63:ce:f6:7f:
                    3b:0b:eb:2f:0a:43:82:02:75:07:22:47:4d:4d:f3:
                    1b:55:20:ae:9f:c8:58:b9:b1:0c:e9:b7:88:9b:21:
                    76:11:8a:04:c3:8e:4e:e7:f0:59:df:58:83:e1:28:
                    96:4f:f7:50:4f:c5:13:f4:79:ac:bb:22:45:fc:93:
                    17:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EA:77:AA:21:27:F1:EC:A1:C1:37:46:2C:75:C6:47:1B:F8:C8:F7
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e31342e3232342e302f32302d3230203d3e2039383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.14.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9c:d7:19:c5:ca:78:93:98:0f:82:be:e1:4e:a9:f4:39:06:df:
         04:d0:6b:4e:a7:ab:ff:d4:bc:cc:77:b6:bb:b6:02:b4:98:6e:
         ab:b5:39:92:bd:32:85:29:97:d5:45:6a:cc:7c:cd:07:ac:a7:
         97:a0:2c:8c:c9:5d:ca:66:c3:f1:5d:15:a7:e4:18:43:d5:87:
         a6:87:fc:29:68:8a:4a:a9:f5:71:a7:30:65:93:07:ba:bc:17:
         70:1b:5b:06:1f:65:3c:1a:96:21:e0:2e:c6:30:cf:23:79:f9:
         8a:9c:b8:24:22:fa:fe:df:92:92:d3:78:ac:f7:98:1e:46:11:
         e7:f6:be:82:9b:b8:01:13:41:db:3c:ff:88:e4:60:21:18:9e:
         52:91:f8:4a:9d:eb:e6:1c:20:5b:cc:79:37:14:ee:36:e9:76:
         a6:67:ec:e1:b4:83:f8:a4:0b:f7:4c:51:1d:bc:e7:93:d5:56:
         be:ea:0a:b2:73:df:a5:61:a1:24:d5:18:95:1f:47:92:e9:26:
         8a:59:00:fb:7c:81:58:ee:e5:c8:ef:f7:c2:78:42:69:f0:a9:
         70:0e:72:e6:ee:cd:63:7a:fd:b5:db:93:27:97:fa:16:19:8f:
         c7:85:ce:4f:c4:4d:44:ae:87:41:f3:1f:1c:88:d5:4d:5a:22:
         5e:59:d1:89
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUIC9+5JhJ2xxCrCD1thKmxfH6XT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw
NDk1QzhDNDAeFw0yNjA1MTIwNzAwNTNaFw0yNzA1MTEwNzA1NTNaMDMxMTAvBgNV
BAMTKDg2RUE3N0FBMjEyN0YxRUNBMUMxMzc0NjJDNzVDNjQ3MUJGOEM4RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHosAvH4vXaxpR3JomBMjxXAX
ngaa+Fa5wWSrn6DSRpQ7dZT6Y1QZ1DE7If7c2fV2m38B/9YndiioMIxQR5wMcxIc
NYzTLjwIR/48bvXrR9VkzYy4vWY02MDmDLuDw7FFeAs19Hrmd8l40aSlQPV3NCl9
UfXeUtxpEx+4gwmcqsa0jliqxRuveixJsghqz6FDD8QygxiKaLt7E7z+BTBNzEg4
8D5PpP6vNW7fMIqcJVxzu+h2RYaBZIw006irY872fzsL6y8KQ4ICdQciR01N8xtV
IK6fyFi5sQzpt4ibIXYRigTDjk7n8FnfWIPhKJZP91BPxRP0eay7IkX8kxdrAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUhup3qiEn8eyhwTdGLHXGRxv4yPcwHwYDVR0j
BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4
NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk1ODkwOTg1MjI2ODYyNTk1LzAvMzEzMjMyMmUzMTM0
MmUzMjMyMzQyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzOTM4MzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBHoO4DANBgkqhkiG9w0BAQsFAAOCAQEAnNcZxcp4k5gPgr7hTqn0OQbfBNBr
Tqer/9S8zHe2u7YCtJhuq7U5kr0yhSmX1UVqzHzNB6ynl6AsjMldymbD8V0Vp+QY
Q9WHpof8KWiKSqn1cacwZZMHurwXcBtbBh9lPBqWIeAuxjDPI3n5ipy4JCL6/t+S
ktN4rPeYHkYR5/a+gpu4ARNB2zz/iORgIRieUpH4Sp3r5hwgW8x5NxTuNul2pmfs
4bSD+KQL90xRHbznk9VWvuoKsnPfpWGhJNUYlR9HkukmilkA+3yBWO7lyO/3wnhC
afCpcA5y5u7NY3r9tduTJ5f6FhmPx4XOT8RNRK6HQfMfHIjVTVoiXlnRiQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:48:58 2026 by rpki-client