Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e34392e31362e302f32302d3230203d3e203137393634.roa
File:                     3132322e34392e31362e302f32302d3230203d3e203137393634.roa (raw, json)
Hash identifier:          EzgnDT0TYBVrTlB+FxmggZkMNrRRhyTeWH56O2b5MsM=
Subject key identifier:   92:95:F8:D5:85:E4:43:C0:CE:67:14:DC:77:77:DE:55:31:EC:A3:71
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       5390127662FAA7C44835C09212CB4BDD11C03E2A
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e34392e31362e302f32302d3230203d3e203137393634.roa
Signing time:             Mon 11 May 2026 02:44:48 +0000
ROA not before:           Mon 11 May 2026 02:39:48 +0000
ROA not after:            Mon 10 May 2027 02:44:48 +0000
asID:                     17964
IP address blocks:        122.49.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:90:12:76:62:fa:a7:c4:48:35:c0:92:12:cb:4b:dd:11:c0:3e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 11 02:39:48 2026 GMT
            Not After : May 10 02:44:48 2027 GMT
        Subject: CN=9295F8D585E443C0CE6714DC7777DE5531ECA371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:49:68:8c:53:e6:92:ee:85:dc:20:25:59:b2:
                    11:c9:33:bc:c7:6d:97:8c:a6:13:5f:11:44:4f:9f:
                    ee:c4:33:ec:6b:32:93:84:6b:d7:54:d3:69:b0:43:
                    10:c4:6a:b2:31:8e:c9:fe:15:18:21:79:0f:07:23:
                    3a:24:c7:d4:7c:16:a3:18:60:a7:3b:74:b0:a5:7a:
                    3f:79:f6:86:fe:04:b9:15:33:65:08:90:ad:1d:72:
                    aa:15:b8:a7:f8:41:33:67:25:dc:75:1f:d6:ae:11:
                    f6:8b:4e:58:bd:0d:6d:84:82:a2:ae:e8:81:0a:ba:
                    e7:fd:1f:6c:38:71:eb:06:66:92:cb:5d:9c:8a:7c:
                    4e:bc:b0:8a:c6:03:6a:dc:55:85:a3:8d:ab:63:31:
                    89:af:9a:50:d2:c5:b2:70:3d:d7:f6:32:6c:b0:29:
                    be:c1:ae:d6:d7:e0:1b:86:73:5b:34:44:1a:39:90:
                    39:35:2b:fa:7c:70:34:4a:e9:97:b8:46:33:75:e6:
                    19:7d:20:69:1a:40:63:9b:6a:e8:3b:7c:d2:39:b2:
                    3d:f2:f0:e3:c6:33:53:a7:a2:7e:d7:ee:bc:92:44:
                    28:03:69:93:89:e2:dd:4f:2b:f8:e7:3a:b5:52:62:
                    7c:ab:b7:14:d5:76:c2:7d:47:5d:a3:e7:c4:4d:45:
                    fd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:95:F8:D5:85:E4:43:C0:CE:67:14:DC:77:77:DE:55:31:EC:A3:71
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e34392e31362e302f32302d3230203d3e203137393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.49.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:7e:6f:c7:14:85:c9:d6:18:50:e2:70:31:bf:64:94:37:eb:
         8c:ff:1c:b3:02:a9:76:27:f9:16:56:0c:c5:5a:45:c0:ac:a6:
         9f:7b:8f:4d:a1:c3:65:ff:4e:4a:dd:4f:bf:d2:18:57:3d:55:
         ec:b3:31:9e:66:8f:80:5d:db:bf:cb:23:c7:af:3d:80:a5:6a:
         8f:fc:93:94:47:1d:96:44:4f:a9:7d:86:7c:9e:43:17:24:f1:
         17:cc:e4:82:3a:dc:38:16:1c:1c:35:30:95:17:07:c5:38:21:
         26:df:3c:ed:c5:39:46:a1:8c:03:1d:8b:98:9d:5c:b2:49:8b:
         89:11:e4:7c:28:f3:8f:9f:e2:d5:b4:97:2c:e2:a0:8f:16:bc:
         f0:13:55:8b:5b:6c:49:79:e8:1f:0c:da:c1:3a:95:00:99:66:
         d1:c0:c0:4c:51:e7:a7:6b:10:11:4e:0a:6c:ee:a7:36:2a:da:
         e1:83:fd:8c:04:d5:c1:15:8f:1c:0f:78:39:40:1d:66:66:1d:
         60:79:2d:e6:7a:a8:de:23:ef:e4:37:a1:75:04:b2:e9:d6:38:
         85:d3:56:85:6f:16:0f:57:96:f3:66:d1:d4:30:da:1d:c9:70:
         27:32:a3:e2:16:35:29:60:10:c9:f3:e2:4e:a4:9a:f2:e4:6c:
         fd:74:99:e2
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUU5ASdmL6p8RINcCSEstL3RHAPiowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw
NDk1QzhDNDAeFw0yNjA1MTEwMjM5NDhaFw0yNzA1MTAwMjQ0NDhaMDMxMTAvBgNV
BAMTKDkyOTVGOEQ1ODVFNDQzQzBDRTY3MTREQzc3NzdERTU1MzFFQ0EzNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwSWiMU+aS7oXcICVZshHJM7zH
bZeMphNfEURPn+7EM+xrMpOEa9dU02mwQxDEarIxjsn+FRgheQ8HIzokx9R8FqMY
YKc7dLClej959ob+BLkVM2UIkK0dcqoVuKf4QTNnJdx1H9auEfaLTli9DW2EgqKu
6IEKuuf9H2w4cesGZpLLXZyKfE68sIrGA2rcVYWjjatjMYmvmlDSxbJwPdf2Mmyw
Kb7BrtbX4BuGc1s0RBo5kDk1K/p8cDRK6Ze4RjN15hl9IGkaQGObaug7fNI5sj3y
8OPGM1Onon7X7rySRCgDaZOJ4t1PK/jnOrVSYnyrtxTVdsJ9R12j58RNRf0XAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUkpX41YXkQ8DOZxTcd3feVTHso3EwHwYDVR0j
BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4
NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk1ODkwOTg1MjI2ODYyNTk1LzAvMzEzMjMyMmUzNDM5
MmUzMTM2MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzEzNzM5MzYzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBHoxEDANBgkqhkiG9w0BAQsFAAOCAQEADH5vxxSFydYYUOJwMb9klDfrjP8c
swKpdif5FlYMxVpFwKymn3uPTaHDZf9OSt1Pv9IYVz1V7LMxnmaPgF3bv8sjx689
gKVqj/yTlEcdlkRPqX2GfJ5DFyTxF8zkgjrcOBYcHDUwlRcHxTghJt887cU5RqGM
Ax2LmJ1cskmLiRHkfCjzj5/i1bSXLOKgjxa88BNVi1tsSXnoHwzawTqVAJlm0cDA
TFHnp2sQEU4KbO6nNira4YP9jATVwRWPHA94OUAdZmYdYHkt5nqo3iPv5DehdQSy
6dY4hdNWhW8WD1eW82bR1DDaHclwJzKj4hY1KWAQyfPiTqSa8uRs/XSZ4g==
-----END CERTIFICATE-----
Generated at Wed May 13 13:42:37 2026 by rpki-client