Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e34392e34302e302f32312d3231203d3e203137393634.roa
File:                     3132322e34392e34302e302f32312d3231203d3e203137393634.roa (raw, json)
Hash identifier:          2iPQm9EQhrbxiCxaMFgk+RM77rBuEMnSfArfn2wcFRg=
Subject key identifier:   C5:76:74:84:57:04:74:A9:43:80:31:FC:61:F4:BF:6E:9A:0F:64:05
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       4AC47032B4D740B7FF90A9BF1A29046547732241
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e34392e34302e302f32312d3231203d3e203137393634.roa
Signing time:             Mon 11 May 2026 02:44:48 +0000
ROA not before:           Mon 11 May 2026 02:39:48 +0000
ROA not after:            Mon 10 May 2027 02:44:48 +0000
asID:                     17964
IP address blocks:        122.49.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c4:70:32:b4:d7:40:b7:ff:90:a9:bf:1a:29:04:65:47:73:22:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 11 02:39:48 2026 GMT
            Not After : May 10 02:44:48 2027 GMT
        Subject: CN=C5767484570474A9438031FC61F4BF6E9A0F6405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:19:df:34:4b:a3:07:51:32:6f:df:3c:9b:13:
                    61:2d:37:19:3f:ab:bd:ef:41:d9:67:5e:b4:e7:56:
                    4a:8c:00:83:f4:43:32:bb:dc:5c:89:de:ef:ff:68:
                    17:4e:2a:eb:8e:3c:87:1a:6f:26:a5:39:be:60:4f:
                    a3:5c:48:b3:91:a8:e7:a1:49:db:f5:49:0d:6e:21:
                    ff:ff:19:53:ac:91:f6:f5:55:69:f2:ab:2a:c3:9d:
                    0a:6b:2b:c5:50:61:4f:1c:78:67:02:8d:b5:e6:85:
                    7b:d1:7a:07:e1:a5:26:a5:e9:5a:c4:9b:f7:8c:62:
                    bd:19:4c:fc:1a:e7:a1:c6:a8:fb:3f:5a:47:f1:c0:
                    c5:a6:01:b9:77:9d:12:93:c0:48:47:12:12:40:ad:
                    ff:67:25:3c:cc:d0:49:ab:ac:ed:fa:44:42:ca:5f:
                    f7:60:de:fe:bb:fd:f5:d0:f2:d8:aa:9f:a9:b1:71:
                    85:78:01:91:24:f5:80:b8:1c:8a:9f:db:a9:85:37:
                    3f:42:7d:ef:79:de:ba:4a:6d:0d:b3:64:3d:63:29:
                    51:95:88:57:a4:eb:b4:d6:a2:85:99:20:86:71:4d:
                    5f:8e:94:42:58:30:85:0c:50:80:3d:e2:8f:21:6f:
                    ab:2f:49:e7:fa:e6:a3:0f:d9:cd:13:da:c2:f3:dd:
                    77:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:76:74:84:57:04:74:A9:43:80:31:FC:61:F4:BF:6E:9A:0F:64:05
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e34392e34302e302f32312d3231203d3e203137393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.49.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         30:bc:8b:f8:45:17:50:a3:9e:c3:1c:23:60:a0:52:1f:6a:5e:
         80:3c:f7:0f:d0:aa:1c:7a:90:b4:9f:bd:44:7e:19:77:d7:ac:
         e8:28:cc:c6:32:6b:88:dd:a0:b4:02:bc:ea:b6:2f:64:3d:8a:
         3e:02:eb:b7:2d:94:24:fa:9e:af:82:5d:95:99:40:af:55:0a:
         ad:3d:79:f7:e5:ed:39:a0:b4:af:e9:c8:8e:78:d6:d4:65:15:
         11:27:a5:15:68:0b:d6:e3:3f:24:6f:f1:d5:b0:8b:71:5a:99:
         16:39:cd:3d:25:53:52:eb:c2:d2:fd:68:a7:89:85:f5:e6:49:
         83:f1:ec:5e:8b:b6:c2:bc:7c:84:3c:89:27:3b:19:8d:c1:a1:
         db:0b:c2:74:be:c6:25:09:ff:91:2f:ad:69:72:bc:10:62:4c:
         02:a5:61:1d:12:98:9d:89:12:ba:ce:96:d8:e6:94:4d:ca:5e:
         56:e0:02:ec:c9:e2:ca:3a:59:a0:56:51:aa:a1:be:42:e5:23:
         84:d0:ad:ff:b7:9f:47:73:9a:31:00:42:9b:8d:f1:c6:7e:9c:
         cb:01:39:b5:ce:a8:88:6b:d3:d2:b0:74:e7:fd:01:4d:f9:4c:
         70:4b:bf:48:12:b3:f8:37:c9:ec:58:27:c3:9f:94:cb:2f:c5:
         d6:67:ce:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:36:35 2026 by rpki-client