Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e34392e31362e302f32312d3231203d3e203137393634.roa
File:                     3132322e34392e31362e302f32312d3231203d3e203137393634.roa (raw, json)
Hash identifier:          ApbvfV4l2B3hsnNaKLCa26x1HXWTyaxbQvfM2K0onEY=
Subject key identifier:   E4:0D:03:DF:32:39:43:08:9C:E7:80:0F:DF:4A:9B:50:1E:AE:FA:7B
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       38BD65A7FAD8AB17A82201C605A4939B70113722
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e34392e31362e302f32312d3231203d3e203137393634.roa
Signing time:             Mon 11 May 2026 02:44:48 +0000
ROA not before:           Mon 11 May 2026 02:39:48 +0000
ROA not after:            Mon 10 May 2027 02:44:48 +0000
asID:                     17964
IP address blocks:        122.49.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:bd:65:a7:fa:d8:ab:17:a8:22:01:c6:05:a4:93:9b:70:11:37:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 11 02:39:48 2026 GMT
            Not After : May 10 02:44:48 2027 GMT
        Subject: CN=E40D03DF323943089CE7800FDF4A9B501EAEFA7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fb:ea:6c:a2:8c:6d:13:9c:c2:61:69:fd:6c:
                    c7:49:98:a6:3f:d1:5e:84:c8:46:2d:7e:18:1a:50:
                    31:56:be:4d:a4:0e:56:67:2e:ea:73:d8:e2:ca:83:
                    2e:65:ac:e1:9e:af:b4:b5:f5:96:ff:40:64:c0:f9:
                    99:7b:77:89:fc:e7:03:2f:a5:c5:b9:6e:58:5c:fb:
                    d2:d0:51:ca:2c:1b:96:fd:f7:c0:f7:af:bb:29:f6:
                    3f:53:28:0a:40:6c:75:e4:df:32:1a:83:dc:f1:d0:
                    74:6c:73:80:38:36:03:57:0b:14:c3:61:c9:92:71:
                    9a:88:3c:10:94:ab:f6:1d:07:9c:e2:2c:2b:5c:24:
                    57:83:0e:9e:97:72:69:9f:48:f9:58:9c:8b:1c:c4:
                    56:b3:ec:9d:15:a3:41:66:e9:9d:1f:5a:50:44:34:
                    e8:18:79:72:02:83:31:e3:ba:94:ef:51:37:6a:e9:
                    9d:46:19:57:12:35:50:09:7e:b6:27:25:06:31:80:
                    83:b7:e0:95:c7:69:42:3f:bb:f7:21:ee:41:02:ff:
                    16:c9:84:30:9f:a6:07:50:e4:ec:69:b9:4d:0e:b5:
                    52:aa:83:8a:20:8c:c1:c5:67:87:3b:8f:39:56:fb:
                    68:dd:59:7c:9b:bf:ab:97:02:f0:69:ee:7d:41:d6:
                    ca:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0D:03:DF:32:39:43:08:9C:E7:80:0F:DF:4A:9B:50:1E:AE:FA:7B
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e34392e31362e302f32312d3231203d3e203137393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.49.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         86:32:83:7d:61:e0:ec:b7:fa:79:0c:1c:9d:8a:6a:43:b6:a4:
         5a:06:2e:84:f9:d4:91:cc:26:c4:87:fa:3d:f1:5c:33:73:7e:
         b0:33:40:96:6d:b9:3f:dd:88:0a:f0:b2:1c:29:49:5b:3e:89:
         40:7a:e3:99:54:a2:53:a9:d5:06:a6:91:63:84:58:0e:92:fa:
         41:fd:d2:21:c6:13:e5:f8:06:c4:bf:76:2f:ef:13:e1:bd:9b:
         c1:e4:3a:ff:34:22:57:72:f8:81:3e:0f:7c:ec:86:81:07:51:
         68:0d:72:eb:a4:20:a6:cf:58:11:ea:f6:14:e9:53:42:2b:7a:
         af:d8:ac:d7:f8:ff:81:c6:ca:39:67:df:7c:31:53:61:6d:99:
         e6:85:54:9e:0d:22:0e:45:f3:32:31:f3:bc:93:77:f8:07:ad:
         c5:97:2c:b6:66:d7:85:a8:5c:2c:a3:0d:ef:41:5e:ab:23:08:
         07:8a:35:3e:8d:48:9d:5f:9c:5b:98:56:f5:aa:52:b9:10:df:
         6a:6e:a6:4e:2c:ae:e7:60:b9:77:6d:d9:c6:3b:85:20:fc:2d:
         92:71:ef:04:ee:25:a1:08:79:80:44:9c:e4:63:61:64:49:6c:
         df:76:bd:36:cc:57:7a:cf:0b:97:b7:fe:09:1f:74:5b:0a:5f:
         c9:71:2e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:24:07 2026 by rpki-client