Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e3230302e3132302e302f32322d3232203d3e2034383437.roa
File:                     3132322e3230302e3132302e302f32322d3232203d3e2034383437.roa (raw, json)
Hash identifier:          ixrDIQPtSvqeCHJydcqhJ2fFXPkf0AyIMrq5nw6rQFM=
Subject key identifier:   46:CD:B3:96:37:25:F5:37:6F:A1:1C:9B:D4:43:50:C9:89:92:9B:9F
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       38DA837ABDBAAA6C24F922A65C9E0741FAD3A878
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e3230302e3132302e302f32322d3232203d3e2034383437.roa
Signing time:             Tue 12 May 2026 02:51:55 +0000
ROA not before:           Tue 12 May 2026 02:46:55 +0000
ROA not after:            Tue 11 May 2027 02:51:55 +0000
asID:                     4847
IP address blocks:        122.200.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:da:83:7a:bd:ba:aa:6c:24:f9:22:a6:5c:9e:07:41:fa:d3:a8:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 12 02:46:55 2026 GMT
            Not After : May 11 02:51:55 2027 GMT
        Subject: CN=46CDB3963725F5376FA11C9BD44350C989929B9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:02:c1:60:ab:5c:c6:ad:e4:1e:7b:ab:d4:d9:
                    58:db:fd:a3:14:20:dc:05:9d:ac:a5:e0:af:a1:a3:
                    13:57:94:67:7a:f0:36:36:0e:ad:d5:9d:d3:68:37:
                    4c:32:c9:c8:8a:ff:47:de:05:1d:c3:ca:10:bc:b5:
                    07:bc:d0:b3:1e:bf:d8:bc:04:90:92:37:8d:cf:8b:
                    d5:60:32:f3:64:a8:18:ec:98:0c:09:78:bd:ab:2c:
                    7a:e3:fd:e1:7b:55:ea:fc:3b:92:80:87:46:9a:ad:
                    e7:82:e9:ce:1c:73:34:09:e1:90:ae:b7:96:20:31:
                    a2:5e:55:92:93:83:1d:b4:5f:30:cf:d6:df:a0:d3:
                    e9:3a:d0:09:8f:fc:e8:80:fd:76:7e:5f:fa:e4:58:
                    e2:c8:bd:00:14:cf:b9:5a:02:6d:25:06:2c:51:bb:
                    77:79:1b:26:88:c6:14:f0:f1:98:8a:93:ed:71:72:
                    5a:f5:5e:85:e1:62:10:b5:1d:b3:59:75:45:e1:e2:
                    46:17:d0:75:cb:b6:92:d8:99:c6:d3:5c:1f:ea:77:
                    05:75:de:7c:e8:d7:b9:c9:6d:73:70:1f:9f:b8:a2:
                    b2:c9:62:b0:49:a2:12:b3:39:68:c8:98:3e:d1:38:
                    1c:9b:e2:0b:9c:b2:c9:d2:d9:36:d8:19:2d:42:9c:
                    4a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CD:B3:96:37:25:F5:37:6F:A1:1C:9B:D4:43:50:C9:89:92:9B:9F
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e3230302e3132302e302f32322d3232203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.200.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:45:3a:8d:9b:3c:e3:34:b7:38:99:09:38:86:47:9d:5a:15:
         c6:32:bb:65:d3:26:b5:69:a9:f6:2d:a7:a3:08:56:91:1b:46:
         70:5a:ea:b2:81:fa:d7:f2:bf:7a:16:f3:86:24:7a:bf:3c:60:
         62:42:05:f3:e5:fb:84:ed:be:1f:ce:cf:88:02:00:c9:93:91:
         dd:d4:de:21:da:3c:3c:be:76:9b:48:23:b7:3a:cf:05:55:cd:
         ad:67:f0:32:6b:94:fd:73:aa:69:71:78:47:be:e4:a0:a4:37:
         84:8b:2b:d1:a0:66:d1:93:90:2e:58:ed:96:a0:7a:48:9d:8c:
         6c:49:46:21:29:2a:b5:03:67:de:f6:e0:13:fd:07:b9:cc:e4:
         82:0f:2e:06:d7:82:f9:fb:02:f6:c1:67:c5:ff:2c:ca:4d:45:
         7a:31:9e:39:88:5f:9c:10:a0:19:5a:7d:9c:c7:22:1a:19:9a:
         cd:62:75:e4:c7:a2:6a:27:f9:bc:c3:86:e7:a2:5b:6e:36:f6:
         6f:5a:9d:bf:43:74:5f:c7:3c:df:0d:84:c3:27:0d:7b:96:70:
         a2:99:6d:33:7b:7d:94:22:c5:77:f8:83:dc:06:12:58:56:9e:
         70:f6:ae:1b:42:44:1e:46:d4:0a:52:5c:83:c0:c2:27:72:4a:
         dc:3b:73:3e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 13:02:15 2026 by rpki-client