Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3138332e39312e3135322e302f32312d3231203d3e203130323132.roa
File:                     3138332e39312e3135322e302f32312d3231203d3e203130323132.roa (raw, json)
Hash identifier:          Uv5s/b/hQrruzuVQeIThF4XERcR0AO2gI3B1Sw71bsU=
Subject key identifier:   17:C3:BD:D0:33:1B:1F:F0:14:F1:79:DD:E8:BF:05:A7:6D:50:BE:4D
Certificate issuer:       /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial:       47B4F52FB3297406C14A98C3E7E9057177C3C484
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3138332e39312e3135322e302f32312d3231203d3e203130323132.roa
Signing time:             Tue 28 Apr 2026 07:21:38 +0000
ROA not before:           Tue 28 Apr 2026 07:16:38 +0000
ROA not after:            Tue 27 Apr 2027 07:21:38 +0000
asID:                     10212
IP address blocks:        183.91.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b4:f5:2f:b3:29:74:06:c1:4a:98:c3:e7:e9:05:71:77:c3:c4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
        Validity
            Not Before: Apr 28 07:16:38 2026 GMT
            Not After : Apr 27 07:21:38 2027 GMT
        Subject: CN=17C3BDD0331B1FF014F179DDE8BF05A76D50BE4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b6:92:ce:9c:15:72:bc:bb:37:68:75:fd:95:
                    d8:10:3e:63:f5:88:51:f9:04:f8:94:ba:33:56:17:
                    46:21:fd:10:20:53:d4:7f:a8:85:33:81:83:33:6f:
                    1d:5b:d1:37:75:21:bf:96:ba:71:a4:54:47:78:f7:
                    a0:64:cd:af:20:7b:e3:02:5a:80:2f:37:04:49:14:
                    d9:e0:81:b3:45:8e:da:d2:d6:b4:6d:f0:56:63:44:
                    37:fe:35:25:fd:94:31:8b:38:34:4c:4b:2f:65:af:
                    44:44:01:d1:b6:cf:24:49:3e:6a:59:87:95:8d:ba:
                    8e:55:fc:9b:be:d2:31:f8:20:90:d1:0d:d8:20:a3:
                    bc:33:09:89:fd:2b:d3:f7:41:5e:99:5c:d3:60:c4:
                    d1:ec:5a:a9:90:d0:79:41:fc:74:d1:fc:9d:47:54:
                    88:99:a8:32:e7:40:13:9e:9c:c6:ec:4c:b9:81:f4:
                    41:fe:11:c4:ee:a7:7d:1f:78:fa:f0:51:21:c3:59:
                    40:c6:12:2d:91:17:46:34:05:f1:60:a4:af:8e:48:
                    22:24:b3:e5:20:c3:d7:50:39:5f:53:cd:ac:c2:bd:
                    91:b3:7a:4d:c2:6f:a9:19:41:a0:2d:8f:a8:be:f8:
                    f2:7b:db:ee:f2:24:30:e0:00:4f:24:f9:9a:ae:69:
                    53:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C3:BD:D0:33:1B:1F:F0:14:F1:79:DD:E8:BF:05:A7:6D:50:BE:4D
            X509v3 Authority Key Identifier:
                keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3138332e39312e3135322e302f32312d3231203d3e203130323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.91.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         11:c3:06:26:58:32:d3:b9:b2:ec:ee:1b:82:ad:b4:ae:43:3f:
         be:da:a3:08:c0:fd:94:12:44:2e:5c:9e:9d:d0:3d:6a:17:ef:
         8e:c6:21:85:d4:aa:c3:d6:8a:3c:26:2e:c9:f3:57:c6:fb:1b:
         0b:13:fc:3b:d4:f6:2d:c8:8b:7e:d2:3f:5e:ea:06:99:67:18:
         06:dc:89:27:31:0d:88:90:a6:76:b7:45:db:c0:28:67:f8:ba:
         58:f9:ba:7e:37:22:23:7f:83:18:24:7d:65:c1:b3:4f:32:31:
         f4:0c:a6:80:c0:bb:a6:54:c9:a3:4b:0f:d0:65:ac:63:96:cd:
         89:d5:c6:a8:3f:e0:dc:2d:88:56:1c:70:f7:98:1e:2d:56:57:
         4a:4d:b7:b5:72:61:34:8f:e4:72:e9:86:e5:f0:4e:f0:30:ca:
         65:51:7c:68:a7:a5:eb:ec:31:12:45:40:77:20:5d:4f:27:a1:
         57:34:e6:44:a6:6c:1a:48:bf:76:11:40:99:65:ef:4e:01:94:
         1f:77:da:67:46:83:41:fa:92:31:9a:b2:b3:14:9a:e8:00:49:
         84:5a:10:74:56:e6:0e:e6:1a:88:e0:18:a8:3a:27:45:62:2b:
         6d:01:4d:5d:a9:3b:21:fe:97:4a:22:b1:53:63:25:1a:76:3e:
         27:c5:41:f5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 19:01:04 2026 by rpki-client