Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3138332e39312e3134342e302f32322d3232203d3e203130323132.roa
File:                     3138332e39312e3134342e302f32322d3232203d3e203130323132.roa (raw, json)
Hash identifier:          5CWWFbZWMpjKzm/zr/RXalcsmG/gQeo/Yc2eLRfg7v4=
Subject key identifier:   82:F4:DB:A3:26:1F:D3:0D:3D:4B:23:8B:13:59:37:6E:3C:C5:4D:55
Certificate issuer:       /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial:       044190B82B410349B9B2779C5DAE712FBAB5B30E
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3138332e39312e3134342e302f32322d3232203d3e203130323132.roa
Signing time:             Tue 28 Apr 2026 07:14:42 +0000
ROA not before:           Tue 28 Apr 2026 07:09:42 +0000
ROA not after:            Tue 27 Apr 2027 07:14:42 +0000
asID:                     10212
IP address blocks:        183.91.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:41:90:b8:2b:41:03:49:b9:b2:77:9c:5d:ae:71:2f:ba:b5:b3:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
        Validity
            Not Before: Apr 28 07:09:42 2026 GMT
            Not After : Apr 27 07:14:42 2027 GMT
        Subject: CN=82F4DBA3261FD30D3D4B238B1359376E3CC54D55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:34:f5:4b:d7:3f:f5:f3:c4:76:0d:0d:50:f9:
                    51:b0:75:30:3d:8a:12:01:47:c5:0b:2d:34:2b:23:
                    93:94:7f:04:1f:23:f5:89:9b:cd:69:2e:e8:a0:07:
                    9f:08:00:a3:ba:07:90:1e:9f:a7:26:84:60:f9:82:
                    d0:c3:88:18:e8:ee:79:6e:10:90:35:ff:e8:63:d1:
                    6a:8b:bb:44:18:85:e0:96:e8:86:3a:92:90:34:95:
                    cd:f4:e3:bb:5f:40:ce:53:8f:c8:9d:91:7b:28:da:
                    4f:59:ec:32:6e:f9:b9:f4:ec:91:3f:e4:c9:20:2b:
                    0a:53:eb:c8:a8:0b:ef:69:e6:ba:b3:ee:8d:0f:2e:
                    1d:d8:d2:e5:5c:8a:e8:bc:3a:f8:2e:cd:d6:24:0a:
                    bd:98:4f:cc:9e:70:10:97:b9:44:2e:10:41:f0:57:
                    b6:67:f7:2e:4a:85:56:80:08:15:f4:d0:d7:6c:af:
                    8d:7a:17:92:95:37:4f:a9:12:57:00:c5:7e:5d:be:
                    d2:0e:13:8f:8d:13:e2:6c:b0:81:04:13:cd:57:78:
                    cf:2d:58:bf:de:f2:d0:76:32:4a:ba:86:7d:a0:89:
                    73:e4:67:11:1e:31:58:90:01:8d:4e:a4:ea:ad:0e:
                    17:df:66:1d:e2:aa:38:74:23:9b:1e:f3:9f:20:0e:
                    9c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F4:DB:A3:26:1F:D3:0D:3D:4B:23:8B:13:59:37:6E:3C:C5:4D:55
            X509v3 Authority Key Identifier:
                keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3138332e39312e3134342e302f32322d3232203d3e203130323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.91.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:c8:37:84:98:59:dd:d7:7e:18:45:47:aa:3b:91:0b:9e:69:
         0d:8f:cd:4e:c4:d3:a4:f2:a7:84:ae:d6:bb:9b:c9:5e:95:9e:
         45:a4:c0:3a:e4:f3:b2:1d:a5:ae:03:ab:91:c8:62:47:25:df:
         c3:5b:c0:12:4b:df:cc:1c:24:db:3d:b1:ec:77:88:28:33:3a:
         f7:c1:f8:83:08:4c:e3:f8:2b:07:be:50:99:02:54:68:23:dc:
         1f:0c:d2:7d:6f:c1:1c:c1:5c:ae:24:85:ac:1f:d4:5f:68:5d:
         48:f3:56:b3:fc:08:67:78:b9:c2:f0:56:ca:a0:37:0b:1f:c6:
         b3:34:96:a9:ce:94:83:eb:e6:35:3f:fc:bd:dd:99:b0:d1:57:
         eb:68:11:5c:70:3c:9d:31:3a:4e:b1:2c:2f:6e:d5:57:be:10:
         8c:41:2b:81:4c:5d:ac:84:ff:ae:c3:f1:b1:7d:64:05:a6:3f:
         5c:e5:64:0d:d4:18:a3:8b:b6:1b:a5:74:2b:d5:7d:26:f9:a5:
         d6:cb:6d:fa:7e:17:23:57:ab:63:a6:5f:83:b3:62:ed:43:37:
         5d:b5:23:8a:18:4f:88:ab:4f:fb:96:19:80:1f:5f:a9:2b:ab:
         55:4d:17:0c:e1:3f:a9:5c:7c:09:08:80:4e:9e:6a:94:a6:72:
         ec:4b:c3:54
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUBEGQuCtBA0m5snecXa5xL7q1sw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUx
NkYzQTdFRjAeFw0yNjA0MjgwNzA5NDJaFw0yNzA0MjcwNzE0NDJaMDMxMTAvBgNV
BAMTKDgyRjREQkEzMjYxRkQzMEQzRDRCMjM4QjEzNTkzNzZFM0NDNTRENTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCONPVL1z/188R2DQ1Q+VGwdTA9
ihIBR8ULLTQrI5OUfwQfI/WJm81pLuigB58IAKO6B5Aen6cmhGD5gtDDiBjo7nlu
EJA1/+hj0WqLu0QYheCW6IY6kpA0lc3047tfQM5Tj8idkXso2k9Z7DJu+bn07JE/
5MkgKwpT68ioC+9p5rqz7o0PLh3Y0uVciui8OvguzdYkCr2YT8yecBCXuUQuEEHw
V7Zn9y5KhVaACBX00Ndsr416F5KVN0+pElcAxX5dvtIOE4+NE+JssIEEE81XeM8t
WL/e8tB2Mkq6hn2giXPkZxEeMViQAY1OpOqtDhffZh3iqjh0I5se858gDpwjAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUgvTboyYf0w09SyOLE1k3bjzFTVUwHwYDVR0j
BBgwFoAUkxNmUCC9+V36SqwOHkqajhbzp+8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
MDk2ODc1ODUwOTMwNTg1OC8wLzkzMTM2NjUwMjBCREY5NURGQTRBQUMwRTFFNEE5
QThFMTZGM0E3RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUxNkYzQTdFRi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwMDk2ODc1ODUwOTMwNTg1OC8wLzMxMzgzMzJlMzkz
MTJlMzEzNDM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzMDMyMzEzMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEArdbkDANBgkqhkiG9w0BAQsFAAOCAQEAkcg3hJhZ3dd+GEVHqjuRC55p
DY/NTsTTpPKnhK7Wu5vJXpWeRaTAOuTzsh2lrgOrkchiRyXfw1vAEkvfzBwk2z2x
7HeIKDM698H4gwhM4/grB75QmQJUaCPcHwzSfW/BHMFcriSFrB/UX2hdSPNWs/wI
Z3i5wvBWyqA3Cx/GszSWqc6Ug+vmNT/8vd2ZsNFX62gRXHA8nTE6TrEsL27VV74Q
jEErgUxdrIT/rsPxsX1kBaY/XOVkDdQYo4u2G6V0K9V9Jvml1stt+n4XI1erY6Zf
g7Ni7UM3XbUjihhPiKtP+5YZgB9fqSurVU0XDOE/qVx8CQiATp5qlKZy7EvDVA==
-----END CERTIFICATE-----
Generated at Wed May 13 19:01:03 2026 by rpki-client