Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS132818.roa
File:                     AS132818.roa (raw, json)
Hash identifier:          enp6j+wQPA+jZ6jClfRx02szBQC6POH+LSyp20J4fVw=
Subject key identifier:   87:00:FF:22:EB:50:FB:4F:9D:41:5C:CD:AA:39:11:C2:01:99:8E:1D
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       38E236B5AD6EFF2795964B4925117F7EA4AC39B8
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS132818.roa
Signing time:             Tue 09 Jun 2026 09:22:12 +0000
ROA not before:           Tue 09 Jun 2026 09:17:12 +0000
ROA not after:            Tue 08 Jun 2027 09:22:12 +0000
asID:                     132818
IP address blocks:        114.112.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e2:36:b5:ad:6e:ff:27:95:96:4b:49:25:11:7f:7e:a4:ac:39:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: Jun  9 09:17:12 2026 GMT
            Not After : Jun  8 09:22:12 2027 GMT
        Subject: CN=8700FF22EB50FB4F9D415CCDAA3911C201998E1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ff:23:1c:76:dc:59:62:e5:82:34:81:af:f8:
                    aa:c5:52:ae:22:4a:77:cf:68:01:2a:a5:de:c4:bc:
                    1b:9c:49:00:84:40:de:c8:2f:5e:b6:13:1b:16:65:
                    7e:0a:d4:b6:68:dc:3b:14:a7:20:49:bc:88:f6:de:
                    14:5d:6a:01:8f:1d:e4:ac:3f:e7:b8:09:b0:1a:89:
                    39:9a:60:1f:5b:0f:b9:bc:82:12:6f:44:4d:f8:7c:
                    48:6b:bd:a1:0d:57:fc:fb:ba:e6:5a:1c:3c:5f:15:
                    e9:3b:29:b7:04:c2:58:a4:35:e6:8f:ad:1d:b2:b4:
                    a9:b1:5c:c3:68:81:f3:3d:3a:5e:45:2e:3a:30:37:
                    16:77:81:f9:31:90:2b:4c:28:f6:93:a0:75:bd:20:
                    46:1d:0c:b4:d8:a5:65:c8:af:1f:24:b8:4a:cd:6e:
                    2b:4c:b0:f0:0a:56:b9:0e:61:9e:67:fc:37:cc:85:
                    ae:85:e4:58:a2:4e:ce:a2:3d:cb:81:2f:17:46:39:
                    0b:1d:ec:f5:42:c5:2e:ef:4d:92:50:14:00:91:6d:
                    ed:2c:cb:a7:83:2e:60:fa:be:bc:de:cb:06:ad:8c:
                    97:d3:66:a9:53:6b:84:49:84:10:15:8e:8c:d3:04:
                    a7:2b:81:4f:a8:ed:e1:ff:c2:00:73:31:8c:c5:03:
                    63:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:00:FF:22:EB:50:FB:4F:9D:41:5C:CD:AA:39:11:C2:01:99:8E:1D
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS132818.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.112.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:21:b7:b2:18:3c:66:f7:b5:25:f1:64:27:2f:68:97:59:f9:
         15:5d:0f:e7:11:5a:70:7c:44:a1:ca:03:dc:b0:38:b5:0a:6a:
         49:be:40:1e:cf:a2:46:31:dd:bd:43:26:d1:ba:96:31:f2:16:
         23:24:eb:a5:b9:d7:0e:2d:a5:ea:91:bd:0f:d7:d1:7f:9d:1c:
         fe:23:90:02:51:7d:48:18:4c:fd:25:6e:46:f0:a5:4e:9a:42:
         72:f9:3a:68:2a:6a:65:e8:99:4a:a6:82:0b:21:eb:33:c1:3c:
         c9:f5:7c:91:d1:59:a3:18:b8:22:ff:69:3c:4b:8a:0e:ed:21:
         28:14:7d:04:34:4f:85:6e:d0:c4:8e:6b:da:3c:9e:85:a4:8a:
         f6:74:33:aa:76:03:93:43:22:80:8e:07:cb:4f:28:ad:5d:9b:
         17:cd:7b:30:ab:d5:f1:9a:cc:7e:a3:56:b3:b4:5e:c5:b9:9d:
         0f:7d:69:78:47:da:a1:6b:78:9a:50:b3:0c:34:98:d8:73:2d:
         02:e0:be:3e:ab:75:8e:4b:1c:73:0a:82:81:e5:fe:27:33:3a:
         94:92:8c:a6:5b:04:9b:e1:97:3c:4b:1c:00:a8:df:7b:0f:e2:
         cb:67:8c:ab:ec:7d:48:e5:27:a0:11:47:2d:11:01:37:b9:07:
         6b:8f:30:73
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:35:41 2026 by rpki-client