Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3231302e37342e302e302f32302d3230203d3e2034383437.roa
File:                     3231302e37342e302e302f32302d3230203d3e2034383437.roa (raw, json)
Hash identifier:          +aGqhCCn2JbckdxcXj0dfp22QrXyCJAFjfr1kR3wZJ8=
Subject key identifier:   C8:0B:18:02:60:DF:BB:50:88:2E:65:16:3D:EE:52:56:CC:14:14:D5
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       11B65CBDD1FCECC46C2A95ABD9B5283BF05EDB65
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3231302e37342e302e302f32302d3230203d3e2034383437.roa
Signing time:             Mon 11 May 2026 02:44:48 +0000
ROA not before:           Mon 11 May 2026 02:39:48 +0000
ROA not after:            Mon 10 May 2027 02:44:48 +0000
asID:                     4847
IP address blocks:        210.74.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b6:5c:bd:d1:fc:ec:c4:6c:2a:95:ab:d9:b5:28:3b:f0:5e:db:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 11 02:39:48 2026 GMT
            Not After : May 10 02:44:48 2027 GMT
        Subject: CN=C80B180260DFBB50882E65163DEE5256CC1414D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dd:ce:b8:60:b6:41:78:45:20:e9:f6:17:80:
                    4e:ee:8b:94:ed:ef:25:b8:99:2d:70:5e:f6:b7:e4:
                    3e:30:9d:14:b2:26:a7:2f:03:7d:2e:2a:15:1a:51:
                    e7:65:01:9e:d8:bc:94:cb:b6:d4:0f:31:d5:ae:7b:
                    24:3a:db:3b:7f:66:72:1b:df:85:37:85:e0:15:c0:
                    48:68:5a:51:c6:69:36:de:ae:bf:ee:48:a7:64:ff:
                    fd:44:54:f9:9d:a8:af:26:56:ba:db:64:ff:88:46:
                    9c:57:65:a8:5f:0f:a0:39:37:f3:1a:0e:16:94:8e:
                    89:e0:7a:1c:16:f3:f5:63:84:c4:a1:30:5d:fd:8b:
                    b4:6a:5c:db:3f:10:9c:ef:08:e2:e7:6f:07:f2:25:
                    f0:4f:0b:cc:46:6e:23:8b:dc:32:66:a5:7e:2d:9d:
                    5a:85:d8:a9:cd:49:5f:72:b7:a7:63:22:cb:3b:c1:
                    80:ce:e1:36:ef:69:ba:4c:e0:1e:e6:b7:73:82:45:
                    b6:7f:e1:e5:cb:b2:d1:eb:43:3c:62:f5:c7:6e:b6:
                    8c:ab:20:63:f0:81:1d:ae:72:0c:7a:a4:1d:cd:72:
                    66:04:38:b1:0e:17:b9:71:36:88:f5:7e:bd:d2:2e:
                    13:5a:3b:47:30:92:31:2f:73:4b:c6:24:eb:0b:85:
                    ec:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0B:18:02:60:DF:BB:50:88:2E:65:16:3D:EE:52:56:CC:14:14:D5
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3231302e37342e302e302f32302d3230203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.74.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         99:bb:8f:22:c7:09:3d:a6:b3:cd:8d:38:71:c8:38:08:d4:1a:
         af:10:2e:a7:f7:8b:9e:ad:4d:64:9c:6b:59:0d:f8:2b:8b:46:
         3e:15:58:10:7e:0e:73:e2:94:dd:d6:88:66:a8:76:91:39:e3:
         2e:a5:aa:3a:21:99:9a:64:7c:60:8d:97:8d:cb:ad:56:4b:ed:
         39:24:9c:c6:59:11:c8:94:9c:c9:34:7e:1d:75:c7:14:1f:31:
         1f:3e:92:20:6d:a5:36:ba:ce:60:e3:64:30:05:f2:ae:d8:e0:
         8f:8c:97:4b:c4:76:86:81:a8:c3:ca:0d:94:2b:aa:33:b9:3a:
         a8:50:19:f7:02:08:fd:73:7c:3f:a2:89:a9:e2:d1:c1:8b:27:
         f7:72:90:6a:fc:f1:35:22:e1:53:ce:0d:13:2d:78:dc:12:55:
         78:49:e6:3c:c7:d4:65:ff:28:97:ef:55:4a:69:41:d6:a9:16:
         03:b2:f7:51:79:a4:54:51:0d:43:72:dd:df:8e:a0:1c:01:68:
         16:bb:42:b9:28:70:e2:cd:7b:15:e0:03:94:13:9e:93:9c:53:
         49:d5:f8:31:ca:d8:49:a1:e0:ba:32:6d:25:69:67:d5:09:e6:
         9c:77:c2:62:8e:48:f9:87:fb:01:97:dd:38:b9:a0:b5:19:94:
         10:13:d8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:56 2026 by rpki-client