Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132332e35382e39362e302f31392d3139203d3e20313333313139.roa
File:                     3132332e35382e39362e302f31392d3139203d3e20313333313139.roa (raw, json)
Hash identifier:          9PtTYTuS8PZhu+HQb3rZG4gHVeSks2bE1enmWRL6CiM=
Subject key identifier:   CA:78:8D:2B:B7:B2:6F:29:6B:93:CA:5B:06:07:F5:6F:D4:33:B0:70
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       22E0EA7DAA9E75704C7572AC6BFD28DF62D59794
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132332e35382e39362e302f31392d3139203d3e20313333313139.roa
Signing time:             Tue 12 May 2026 07:05:54 +0000
ROA not before:           Tue 12 May 2026 07:00:54 +0000
ROA not after:            Tue 11 May 2027 07:05:54 +0000
asID:                     133119
IP address blocks:        123.58.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e0:ea:7d:aa:9e:75:70:4c:75:72:ac:6b:fd:28:df:62:d5:97:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 12 07:00:54 2026 GMT
            Not After : May 11 07:05:54 2027 GMT
        Subject: CN=CA788D2BB7B26F296B93CA5B0607F56FD433B070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fe:f3:43:0b:85:e3:ee:49:66:88:42:d1:04:
                    d8:2f:f2:1c:58:f3:a9:bd:ef:0f:ed:9a:04:fb:62:
                    d5:33:71:32:43:f7:7c:7d:75:37:cf:29:5b:64:b4:
                    fd:9d:29:31:77:5d:e5:ed:2b:0a:56:0c:60:3b:ac:
                    45:9e:a1:b4:a3:d1:1c:f1:48:37:f6:8f:ca:21:4d:
                    c3:d5:6a:f1:f2:a5:37:87:f3:98:bd:1f:22:9a:78:
                    66:16:4c:5a:af:04:ef:92:b7:a9:7b:60:b7:0e:0a:
                    72:88:31:b8:0e:a2:71:ec:0a:b1:a7:8c:e5:d8:b0:
                    06:7a:bf:4c:4b:e8:b1:e2:68:c5:5c:48:d4:88:95:
                    0e:27:2c:54:11:58:ab:9a:d9:b6:98:60:cd:7a:2f:
                    8d:10:be:77:65:9f:e7:4d:40:6c:87:5b:84:ca:cf:
                    f2:32:4b:b0:13:31:8f:61:f1:9b:35:a4:02:cc:0e:
                    34:95:92:9a:fc:04:1e:06:b8:65:df:fa:ce:c8:48:
                    31:45:67:f4:50:ea:42:d5:ab:d0:ef:77:48:cf:af:
                    44:f7:e5:67:12:47:9d:5b:1c:d8:64:b6:98:fb:b9:
                    47:65:c4:ab:de:62:12:cc:f9:f6:9a:e6:2c:87:b1:
                    16:51:ab:53:99:4a:95:b2:27:d0:d8:fe:8d:91:fd:
                    85:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:78:8D:2B:B7:B2:6F:29:6B:93:CA:5B:06:07:F5:6F:D4:33:B0:70
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132332e35382e39362e302f31392d3139203d3e20313333313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.58.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         03:57:97:97:90:0e:8c:33:36:3c:0d:27:a9:7f:f7:90:3e:3b:
         fb:ce:b1:75:95:1e:68:db:ea:f3:9b:9a:c0:ac:31:26:13:ac:
         2c:75:8f:91:6f:07:cb:f0:ba:44:ef:05:1d:94:49:20:93:80:
         2f:df:d8:3b:27:67:b2:be:f5:14:dd:7e:44:72:e9:25:a5:67:
         f7:6a:53:b3:0c:d5:64:cb:52:27:fa:c5:af:e9:f3:84:62:b7:
         a6:c1:84:b7:7a:6f:10:7b:b5:1e:52:08:00:96:c1:8f:8c:be:
         57:4e:9b:46:c1:1a:69:8e:8f:6d:ad:4b:a4:f6:30:d9:44:34:
         62:75:d4:12:a2:f6:5f:a0:20:d8:e5:b6:0b:30:26:a8:67:4b:
         d1:6b:1f:2b:ff:61:60:77:f4:c4:98:02:9e:39:cc:9e:f1:4b:
         18:67:0c:96:20:be:93:d4:04:f0:64:a7:21:d7:89:92:20:76:
         1f:72:ef:13:67:f0:0d:99:a1:1a:a8:9e:e2:b4:b6:22:21:74:
         8b:d1:84:fe:22:da:64:03:69:f2:ae:c6:fc:5f:76:ff:23:14:
         be:3e:bd:45:6d:ce:a3:8b:64:eb:84:fa:79:8f:d2:fb:ef:16:
         85:8b:1e:58:7e:e9:dd:a4:e2:2e:56:17:fd:62:65:b8:ac:3a:
         e8:bc:21:8a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:39:56 2026 by rpki-client