Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS136188.roa
File:                     AS136188.roa (raw, json)
Hash identifier:          IPk6L5PbnrtagcKgNcMFsn9XatPTqlU6nhugSiUOzZ4=
Subject key identifier:   4B:1E:9C:41:FF:55:DA:C0:11:22:2F:95:42:7C:E5:04:17:5A:1B:26
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       51594D9D2FD356F53C2ED280A1CE5160DA4915D9
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS136188.roa
Signing time:             Mon 08 Jun 2026 09:03:47 +0000
ROA not before:           Mon 08 Jun 2026 08:58:47 +0000
ROA not after:            Mon 07 Jun 2027 09:03:47 +0000
asID:                     136188
IP address blocks:        114.66.0.0/18 maxlen: 18
                          114.66.0.0/19 maxlen: 19
                          114.66.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:59:4d:9d:2f:d3:56:f5:3c:2e:d2:80:a1:ce:51:60:da:49:15:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: Jun  8 08:58:47 2026 GMT
            Not After : Jun  7 09:03:47 2027 GMT
        Subject: CN=4B1E9C41FF55DAC011222F95427CE504175A1B26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b1:f2:3f:47:24:af:c2:fc:d9:bf:d6:bd:6b:
                    60:9b:09:37:19:d1:cd:c5:9c:49:a6:ba:1d:79:e7:
                    85:7d:a7:4e:43:b8:33:7d:7e:e1:46:0f:34:4e:8b:
                    a7:61:9d:95:01:ac:f3:62:5d:66:36:74:45:ea:15:
                    43:68:6b:6d:17:de:23:76:13:cf:73:7a:74:aa:13:
                    91:d6:d1:ef:73:28:91:9b:4e:4e:6e:f6:55:43:d2:
                    c6:67:a4:85:ae:36:9c:7a:5d:6d:11:89:8e:3b:d0:
                    21:70:1d:f0:1c:d3:0b:89:17:55:92:a4:67:0e:89:
                    23:13:61:e4:76:7a:ea:2f:75:a6:b7:d4:b9:ff:9c:
                    d6:c1:85:ed:b0:22:1a:13:a4:d7:60:76:79:f6:0f:
                    a5:7c:ca:2a:e0:76:b1:f4:1d:65:f2:4f:13:8a:02:
                    10:a6:a8:9e:89:f5:02:72:84:e8:46:30:f4:64:5f:
                    b6:3a:1d:bb:ab:3b:30:a3:02:e6:a9:53:42:92:d7:
                    db:5e:95:52:28:56:e8:85:e4:ee:1d:02:c5:88:a3:
                    a6:4b:cd:fd:b8:2a:03:cc:1f:8f:1d:49:c6:ba:b7:
                    06:e6:c6:ca:b8:90:0c:11:6f:b1:94:86:4b:b9:b0:
                    36:b8:5c:37:b8:7c:b2:e4:17:d3:a9:c2:e7:8c:45:
                    32:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1E:9C:41:FF:55:DA:C0:11:22:2F:95:42:7C:E5:04:17:5A:1B:26
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS136188.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.66.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         63:fe:a8:39:a8:0a:26:61:42:c0:58:96:63:a6:c4:0b:2d:5e:
         e1:a4:5c:ce:8b:79:9e:76:86:02:3a:14:fe:13:9c:77:5e:bd:
         f8:e5:fc:59:d8:eb:56:e6:63:4e:a0:ac:a0:1e:77:23:e4:b5:
         f9:6f:fb:15:f4:8f:b7:83:be:53:96:0a:61:45:c3:76:dc:0a:
         e0:83:3c:d7:77:e6:bb:c3:89:da:09:47:df:07:ce:4b:7f:54:
         fa:e2:58:6c:71:82:90:17:ed:b5:f9:2d:84:df:65:f9:3f:9d:
         de:d4:e6:1e:7a:c5:d3:53:cf:43:f3:b0:46:84:2b:32:46:81:
         0e:14:b0:b9:1b:54:e3:09:a0:f6:39:f6:67:d0:51:d8:86:8d:
         27:a8:fb:8a:66:cd:0d:17:6a:ac:9f:15:cd:7e:c3:78:f6:e0:
         97:5e:26:45:f5:76:b3:12:0e:ed:b8:b9:88:1e:68:be:da:c2:
         d4:f0:82:d1:1a:da:fc:15:00:6e:34:e8:08:c9:76:81:9e:70:
         b9:04:c6:0f:b4:ab:d9:3d:80:54:18:42:c1:0d:59:87:06:3a:
         6e:c9:22:b0:e6:d9:ad:e2:0a:70:a4:19:8b:09:de:b7:96:65:
         58:ab:1e:aa:74:99:7f:7c:4d:b7:e1:c2:70:88:ec:db:76:63:
         b2:3a:36:c2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:35:40 2026 by rpki-client