Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106871076220043283/0/3131392e33382e3139322e302f32302d3230203d3e203338333637.roa
File:                     3131392e33382e3139322e302f32302d3230203d3e203338333637.roa (raw, json)
Hash identifier:          niXTpol86vmz6DcPKGxvQoGJAvpzazIgo8KhQW4C54k=
Subject key identifier:   A5:38:B2:9C:6F:18:18:FF:49:DC:06:CE:A7:7A:29:A4:E6:78:D4:AB
Certificate issuer:       /CN=644F9AE827627B0357D7972FE08D569A0CB97C31
Certificate serial:       1DD1AB78A3242AE24353D4621C62EED44E20BFDF
Authority key identifier: 64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/3131392e33382e3139322e302f32302d3230203d3e203338333637.roa
Signing time:             Wed 13 May 2026 09:13:05 +0000
ROA not before:           Wed 13 May 2026 09:08:05 +0000
ROA not after:            Wed 12 May 2027 09:13:05 +0000
asID:                     38367
IP address blocks:        119.38.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d1:ab:78:a3:24:2a:e2:43:53:d4:62:1c:62:ee:d4:4e:20:bf:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644F9AE827627B0357D7972FE08D569A0CB97C31
        Validity
            Not Before: May 13 09:08:05 2026 GMT
            Not After : May 12 09:13:05 2027 GMT
        Subject: CN=A538B29C6F1818FF49DC06CEA77A29A4E678D4AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8b:99:1f:af:29:75:77:7b:63:ed:13:64:5e:
                    85:ba:11:8f:24:58:65:55:33:77:f1:34:c8:01:d5:
                    3e:5b:b6:fe:f9:1e:09:4a:9e:4d:c9:18:3a:5e:26:
                    b7:99:f1:c0:84:58:1d:10:7b:cd:a1:df:e8:b1:43:
                    94:f3:1a:4f:0c:8b:5f:fe:d4:57:c8:5d:66:fa:cd:
                    39:32:cc:e5:2f:ea:6b:04:fd:db:21:e4:ce:2f:49:
                    9f:b1:c1:61:be:2e:3a:33:35:2f:01:19:9b:c6:07:
                    29:c5:0c:4b:8b:9f:ab:58:1a:38:62:27:d1:f9:6e:
                    37:3e:45:37:bb:6b:48:c3:0a:84:26:66:8a:0e:b6:
                    4f:34:21:bd:5a:c8:d2:71:b3:63:88:55:72:3f:2e:
                    5d:45:39:09:8b:7f:17:67:66:8c:73:a7:a5:6f:7a:
                    3f:96:e1:f5:98:c6:4e:02:75:10:10:84:c5:1e:b7:
                    56:4b:04:4e:2c:23:75:ed:60:30:50:18:56:78:f4:
                    ec:b6:d5:e3:ac:a0:4d:22:86:dd:af:c6:be:6d:b7:
                    c2:e8:93:c7:67:78:c9:d0:35:5d:a1:8c:04:2a:aa:
                    b7:21:b0:b4:ba:70:c4:53:35:16:31:da:ee:5e:dd:
                    d3:34:56:59:f8:11:87:29:12:44:bc:54:45:b6:34:
                    64:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:38:B2:9C:6F:18:18:FF:49:DC:06:CE:A7:7A:29:A4:E6:78:D4:AB
            X509v3 Authority Key Identifier:
                keyid:64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/3131392e33382e3139322e302f32302d3230203d3e203338333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.38.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cb:b9:40:29:e3:72:2d:27:a5:6e:97:63:2b:cd:88:a4:39:4f:
         20:74:93:30:0b:f0:82:a8:40:c5:04:f4:f8:35:be:8d:aa:77:
         a6:31:95:16:f6:7a:70:83:8c:fe:c1:f5:2a:1e:5d:5f:50:52:
         78:e0:ef:00:3e:a5:10:92:83:e3:c4:24:f5:e1:70:c9:f2:bb:
         f8:8c:d3:ab:f5:32:8f:c4:2e:7c:91:f3:b3:f6:d9:b2:40:91:
         69:94:87:2e:06:60:27:a0:ea:60:69:26:27:0e:7b:ee:38:84:
         f1:7b:c3:53:ac:a8:59:6b:5c:1b:b2:df:d2:5f:4d:b7:c8:03:
         04:64:24:ec:13:ba:c1:fc:ce:b8:91:6e:52:97:04:97:cf:86:
         f8:e5:62:a8:dd:6b:66:38:df:cc:37:87:a0:0f:d2:51:a8:a8:
         75:9f:cc:84:ba:d7:67:b0:f8:01:f2:4d:b8:58:4c:8d:d7:b7:
         5c:d1:0f:36:7e:e0:87:10:3a:00:3c:0a:a0:3b:65:5f:d4:3d:
         c6:fa:35:8d:1f:25:15:5c:6a:fe:50:7b:f7:c8:41:66:9e:00:
         49:cc:c7:00:9a:18:ec:e0:74:5c:8c:c8:50:c6:0e:fa:e3:df:
         84:c7:85:8f:60:c6:2f:78:cc:cc:45:48:1b:f6:e1:05:c2:4a:
         2d:d4:a1:13
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUHdGreKMkKuJDU9RiHGLu1E4gv98wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ0RjlBRTgyNzYyN0IwMzU3RDc5NzJGRTA4RDU2OUEw
Q0I5N0MzMTAeFw0yNjA1MTMwOTA4MDVaFw0yNzA1MTIwOTEzMDVaMDMxMTAvBgNV
BAMTKEE1MzhCMjlDNkYxODE4RkY0OURDMDZDRUE3N0EyOUE0RTY3OEQ0QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNi5kfryl1d3tj7RNkXoW6EY8k
WGVVM3fxNMgB1T5btv75HglKnk3JGDpeJreZ8cCEWB0Qe82h3+ixQ5TzGk8Mi1/+
1FfIXWb6zTkyzOUv6msE/dsh5M4vSZ+xwWG+LjozNS8BGZvGBynFDEuLn6tYGjhi
J9H5bjc+RTe7a0jDCoQmZooOtk80Ib1ayNJxs2OIVXI/Ll1FOQmLfxdnZoxzp6Vv
ej+W4fWYxk4CdRAQhMUet1ZLBE4sI3XtYDBQGFZ49Oy21eOsoE0iht2vxr5tt8Lo
k8dneMnQNV2hjAQqqrchsLS6cMRTNRYx2u5e3dM0Vln4EYcpEkS8VEW2NGTlAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUpTiynG8YGP9J3AbOp3oppOZ41KswHwYDVR0j
BBgwFoAUZE+a6CdiewNX15cv4I1Wmgy5fDEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njg3MTA3NjIyMDA0MzI4My8wLzY0NEY5QUU4Mjc2MjdCMDM1N0Q3OTcyRkUwOEQ1
NjlBMENCOTdDMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNjQ0RjlBRTgyNzYyN0IwMzU3RDc5NzJGRTA4RDU2OUEwQ0I5N0MzMS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNjg3MTA3NjIyMDA0MzI4My8wLzMxMzEzOTJlMzMz
ODJlMzEzOTMyMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzMzODMzMzYzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBHcmwDANBgkqhkiG9w0BAQsFAAOCAQEAy7lAKeNyLSelbpdjK82IpDlP
IHSTMAvwgqhAxQT0+DW+jap3pjGVFvZ6cIOM/sH1Kh5dX1BSeODvAD6lEJKD48Qk
9eFwyfK7+IzTq/Uyj8QufJHzs/bZskCRaZSHLgZgJ6DqYGkmJw577jiE8XvDU6yo
WWtcG7Lf0l9Nt8gDBGQk7BO6wfzOuJFuUpcEl8+G+OViqN1rZjjfzDeHoA/SUaio
dZ/MhLrXZ7D4AfJNuFhMjde3XNEPNn7ghxA6ADwKoDtlX9Q9xvo1jR8lFVxq/lB7
98hBZp4ASczHAJoY7OB0XIzIUMYO+uPfhMeFj2DGL3jMzEVIG/bhBcJKLdShEw==
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:11 2026 by rpki-client