Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e34392e33322e302f32312d3231203d3e203137393634.roa
File:                     3132322e34392e33322e302f32312d3231203d3e203137393634.roa (raw, json)
Hash identifier:          N4cGxjkQad0kokv1Dkv3wj60lhLIkv6Zst045PKubT0=
Subject key identifier:   DF:A4:A7:EB:67:76:9D:AB:3C:97:B9:46:E6:54:72:0A:A3:0A:C5:2A
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       51A7AA3B0D2BB7750AC5BF8A055271F432963CDB
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e34392e33322e302f32312d3231203d3e203137393634.roa
Signing time:             Mon 11 May 2026 02:44:48 +0000
ROA not before:           Mon 11 May 2026 02:39:48 +0000
ROA not after:            Mon 10 May 2027 02:44:48 +0000
asID:                     17964
IP address blocks:        122.49.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a7:aa:3b:0d:2b:b7:75:0a:c5:bf:8a:05:52:71:f4:32:96:3c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 11 02:39:48 2026 GMT
            Not After : May 10 02:44:48 2027 GMT
        Subject: CN=DFA4A7EB67769DAB3C97B946E654720AA30AC52A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:86:91:13:43:fc:c0:bc:3c:bc:52:16:49:10:
                    58:48:0e:3f:86:c6:c5:62:e7:a5:3b:8c:27:2d:be:
                    0e:17:97:57:88:aa:36:84:ad:73:b8:71:87:6a:1c:
                    b7:5c:c3:20:c9:00:85:98:fb:dc:5d:e9:04:30:8f:
                    f2:ae:a5:25:a0:68:66:c1:83:bd:8e:74:fd:56:fe:
                    ea:e5:74:43:03:f3:98:e3:bc:a2:5a:10:21:33:23:
                    f9:ec:81:35:ea:0d:fc:ed:0f:fa:ba:a1:4d:ad:9c:
                    69:41:74:14:29:0c:5f:b6:84:ec:f4:c8:43:46:f8:
                    5b:87:b2:39:2d:7f:8a:eb:b4:3e:6c:9e:42:70:6e:
                    16:27:bc:59:fa:69:1a:d8:96:89:38:6a:3b:f0:04:
                    45:31:13:cd:55:e6:5e:c4:3a:7c:01:8e:0f:da:30:
                    28:e6:63:39:e9:70:d3:fa:5b:0f:07:42:06:9d:53:
                    5c:c6:52:92:cb:2a:9c:18:ae:41:7e:dd:25:e6:b0:
                    73:1c:64:05:b8:31:0d:f9:88:69:e6:59:fa:f1:ef:
                    d9:68:cf:d2:13:1a:0b:95:e3:d0:5c:37:ef:55:3a:
                    df:ba:eb:83:00:09:69:26:cc:dd:ce:fe:57:3b:43:
                    bf:e6:aa:7f:c5:9d:4f:1c:e0:09:89:b9:df:74:0d:
                    88:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A4:A7:EB:67:76:9D:AB:3C:97:B9:46:E6:54:72:0A:A3:0A:C5:2A
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e34392e33322e302f32312d3231203d3e203137393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.49.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:41:41:27:02:81:f7:53:d2:55:0f:44:ed:dd:87:a1:68:b2:
         9d:28:6a:39:4f:5d:fb:dd:c8:cd:8e:ce:7b:7d:16:50:c5:78:
         de:89:df:e3:2a:bd:f1:68:7d:47:3e:2a:08:15:d6:03:ab:1d:
         7f:07:89:ec:48:77:99:fb:5d:b2:bf:71:5d:8e:8a:74:08:61:
         63:5f:21:1e:05:88:62:60:3b:20:03:7d:a1:58:61:3f:93:9d:
         9c:ec:58:de:00:30:9c:f0:14:ea:49:5d:61:7e:65:91:a1:37:
         35:40:37:2b:0e:22:18:81:51:90:91:c2:8f:d2:06:50:17:d3:
         ad:b7:46:a2:bc:a8:fa:4c:fc:df:6d:c9:c0:bf:15:44:60:4d:
         48:e2:9a:f4:74:b9:fc:68:c0:54:be:7a:3e:13:89:8a:0c:aa:
         d9:ae:cd:7e:db:9a:ed:99:75:3d:2d:20:a6:69:07:5c:16:0f:
         9d:b4:14:bb:d9:ca:40:18:bf:ed:69:51:9e:5f:0a:95:ba:a0:
         42:a6:4e:2e:16:d1:65:1c:ae:b6:63:81:a2:3f:ad:48:1e:4e:
         5b:78:db:09:ce:02:6d:02:52:3e:0c:9f:a4:43:ba:f2:e2:6b:
         78:cf:48:35:90:3c:2e:40:bf:7c:0b:74:b6:38:60:de:12:5d:
         91:79:dd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:14:47 2026 by rpki-client