Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS24155.roa
File:                     AS24155.roa (raw, json)
Hash identifier:          73fte1kJmnWyocN43gs842nrc8f/84c6j9viFxoFnJI=
Subject key identifier:   1E:7A:A6:F7:47:EB:29:C5:67:45:D7:7C:B9:55:71:B6:3D:87:21:36
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       78F044332E2DBB941FCB3A7D609CD2CEEEE11336
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS24155.roa
Signing time:             Tue 09 Jun 2026 09:14:18 +0000
ROA not before:           Tue 09 Jun 2026 09:09:18 +0000
ROA not after:            Tue 08 Jun 2027 09:14:18 +0000
asID:                     24155
IP address blocks:        114.112.18.0/24 maxlen: 24
                          114.112.19.0/24 maxlen: 24
                          122.112.124.0/24 maxlen: 24
                          122.115.68.0/24 maxlen: 24
                          122.115.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f0:44:33:2e:2d:bb:94:1f:cb:3a:7d:60:9c:d2:ce:ee:e1:13:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: Jun  9 09:09:18 2026 GMT
            Not After : Jun  8 09:14:18 2027 GMT
        Subject: CN=1E7AA6F747EB29C56745D77CB95571B63D872136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9b:7d:cf:60:00:de:5c:9e:c9:08:3d:e9:44:
                    78:a8:03:08:39:9f:24:f9:8e:d6:0b:c4:24:2a:16:
                    24:84:38:2a:58:80:c4:af:9c:9f:fc:a8:b6:b6:06:
                    60:25:0e:44:43:24:e1:a5:0f:3b:04:03:ab:99:1a:
                    80:71:38:4c:ea:d4:af:4c:cf:5e:f9:b8:d6:18:a1:
                    27:19:44:2f:dc:c9:8d:e7:7a:65:09:fd:41:78:aa:
                    d2:8c:c5:bb:58:92:dd:cf:2f:34:cb:36:f5:0f:ee:
                    94:ba:04:b8:2c:eb:fe:4b:fb:31:e9:b5:b6:69:22:
                    83:cb:06:54:ee:5d:7c:9c:71:9f:38:58:37:03:a1:
                    45:52:b8:c9:34:a5:b5:d6:a3:d4:c3:2e:33:27:c8:
                    02:24:8a:3e:ac:69:85:c9:37:e2:f7:d8:8e:43:7a:
                    3d:85:0b:8b:d1:40:52:ca:99:da:0e:4b:92:fd:0f:
                    b8:5b:f2:ab:49:4e:9c:26:5c:30:fb:63:5a:ff:12:
                    b6:eb:38:7a:87:b2:c8:c3:86:a2:cf:6b:88:7a:e6:
                    a7:f0:bd:fc:c4:e4:1f:e7:c6:19:7d:c8:ee:93:cc:
                    88:bc:04:c7:4a:5f:ac:3d:52:bc:0e:6d:73:eb:b5:
                    4f:da:60:ad:6e:18:6b:2f:53:11:6b:3d:de:c3:5f:
                    2c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7A:A6:F7:47:EB:29:C5:67:45:D7:7C:B9:55:71:B6:3D:87:21:36
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS24155.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.112.18.0/23
                  122.112.124.0/24
                  122.115.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:53:3d:40:8d:14:f6:a9:04:98:7d:98:6f:5c:22:35:d6:39:
         79:11:6e:f9:49:66:dc:a6:cc:02:61:b9:90:54:5a:89:5e:30:
         02:98:c8:bd:ba:2f:b4:2e:69:05:2c:7f:6a:74:20:23:ec:4d:
         59:bf:71:65:a9:05:f2:7e:13:c9:a4:7a:95:7b:98:7c:aa:1e:
         66:4d:3b:ca:b7:ed:7b:a8:41:63:9f:c8:8d:20:f5:e4:6a:db:
         79:ff:30:a7:54:dc:3a:02:3c:80:fd:a8:a3:b2:66:a7:3b:20:
         89:8f:9e:16:40:ba:8c:e1:dc:70:f7:5d:30:c7:91:e7:2d:e5:
         a9:a2:6a:61:fe:85:c4:4b:d6:af:4d:50:21:13:cb:c2:cf:eb:
         6b:88:db:9a:a3:32:39:ff:1c:17:bb:aa:bc:0b:c7:0c:cd:db:
         04:26:94:ed:fc:d4:04:5e:f8:5f:5d:27:3f:d0:60:86:87:eb:
         4a:e6:ea:4c:91:6a:a2:5b:2b:b5:fd:c2:22:58:96:56:ef:87:
         e8:6b:c7:65:5d:3c:02:eb:ee:9e:30:36:f9:05:9d:92:72:c8:
         7e:d1:cc:64:6e:15:55:cb:f3:a5:ab:61:14:95:4a:a0:23:e0:
         67:3d:26:07:55:c1:c0:42:58:dd:83:6a:3e:e3:1e:c6:05:eb:
         a9:ef:9e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:35:42 2026 by rpki-client