Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e31342e3234302e302f32302d3230203d3e2039383038.roa
File:                     3132322e31342e3234302e302f32302d3230203d3e2039383038.roa (raw, json)
Hash identifier:          zQoatf1jO7qyJmI8Tp//nsrNlLY8Wjdvm35H20tBH7w=
Subject key identifier:   8B:82:D4:EC:7F:93:62:3B:1C:67:2C:DC:2C:EA:D8:9A:B2:A5:40:EC
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       69CEA3E56C0678E8A93840A8534919789ED14EEF
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e31342e3234302e302f32302d3230203d3e2039383038.roa
Signing time:             Tue 12 May 2026 07:05:53 +0000
ROA not before:           Tue 12 May 2026 07:00:53 +0000
ROA not after:            Tue 11 May 2027 07:05:53 +0000
asID:                     9808
IP address blocks:        122.14.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ce:a3:e5:6c:06:78:e8:a9:38:40:a8:53:49:19:78:9e:d1:4e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 12 07:00:53 2026 GMT
            Not After : May 11 07:05:53 2027 GMT
        Subject: CN=8B82D4EC7F93623B1C672CDC2CEAD89AB2A540EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:32:cc:9c:15:cf:22:fd:9b:b5:08:bd:13:1a:
                    c6:f7:76:5a:26:6f:6d:ed:fb:39:31:45:36:15:df:
                    53:93:6c:52:61:60:f6:a7:74:52:04:77:66:6f:74:
                    bf:c4:17:2e:56:98:c5:b9:a6:c8:ad:d3:8e:ae:08:
                    51:77:46:ac:b4:75:24:86:29:c3:c1:84:17:db:c9:
                    8b:3d:d7:61:da:8d:f9:57:4f:e4:4e:4b:ea:62:dc:
                    b4:df:23:c1:11:31:62:06:5d:34:9c:b7:f2:ad:64:
                    f6:28:9a:23:27:84:b5:a0:50:98:6c:2b:63:69:26:
                    b7:7d:c4:d1:e5:00:36:40:a1:67:23:1d:ef:28:d8:
                    fb:d6:81:7c:8e:61:1e:7d:2a:80:45:15:f1:bb:50:
                    aa:c5:9c:0c:c9:96:0d:30:1c:a8:4e:18:82:da:f4:
                    29:0e:a1:9b:e0:85:7a:bb:d0:fe:be:84:b8:dc:09:
                    47:00:ed:2e:1c:a6:7d:28:06:cf:b6:46:4a:74:a4:
                    61:ed:45:f4:66:da:9c:99:6b:ee:c3:75:a7:db:ec:
                    ee:34:05:07:31:55:f8:3c:82:52:03:2c:da:e1:43:
                    f8:02:05:0f:89:1f:34:68:18:19:9f:c0:a9:05:4f:
                    fa:9a:cd:46:1f:56:35:cf:dc:6b:41:6a:2d:86:a2:
                    8a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:82:D4:EC:7F:93:62:3B:1C:67:2C:DC:2C:EA:D8:9A:B2:A5:40:EC
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e31342e3234302e302f32302d3230203d3e2039383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.14.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         20:61:f5:c7:05:ba:ee:b9:ce:79:33:45:64:47:6c:38:69:ca:
         95:5c:4c:19:77:66:f2:49:cc:c5:29:bb:8a:b3:31:54:0a:e8:
         36:33:a8:8b:e9:3b:1a:73:b7:51:ea:16:e7:da:da:fb:38:f0:
         d6:40:ca:8c:92:7f:0f:3f:4c:83:33:d4:c9:e1:ce:7b:ac:45:
         16:49:65:51:3d:5b:01:a7:b7:c2:60:f9:88:66:f5:dd:95:73:
         d6:a3:6f:30:9e:ed:31:11:6b:25:d0:cf:f0:10:df:cd:af:8a:
         2c:9f:2d:13:64:ac:e4:39:bd:db:9e:e2:7b:87:60:b1:af:ab:
         7b:62:6f:37:30:93:7e:a9:7d:ac:49:4e:8e:cf:5e:07:20:34:
         89:bf:84:1e:c3:ad:6b:44:04:ec:9a:70:e9:4a:48:75:66:55:
         e7:93:b4:83:0e:09:d9:39:85:5c:e1:37:d7:f8:a4:d6:bb:bd:
         90:65:7d:a9:24:49:0f:7d:ac:82:4f:65:12:63:5c:70:70:84:
         73:c4:3e:14:a5:42:ef:68:bf:cc:03:9d:cd:b7:23:a7:31:04:
         93:2e:73:64:83:b3:73:4a:1c:bf:0d:b1:c6:3e:71:e5:fe:f4:
         bc:6f:31:93:7e:1b:d0:f4:fb:cc:ba:62:26:11:5e:3a:94:fb:
         cd:ca:ae:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:47:37 2026 by rpki-client