Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS9808.roa
File:                     AS9808.roa (raw, json)
Hash identifier:          o4SXJ5ZwZ/qkssIBzkeenJtFuN77CHXWC0rXi0fyIlY=
Subject key identifier:   21:39:ED:A3:68:2D:0D:67:59:0B:AC:E1:4A:02:DF:34:BB:AD:23:AE
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       386E73B7231EBC92B225C177BE4EFA04D7FCB98E
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS9808.roa
Signing time:             Mon 08 Jun 2026 09:03:47 +0000
ROA not before:           Mon 08 Jun 2026 08:58:47 +0000
ROA not after:            Mon 07 Jun 2027 09:03:47 +0000
asID:                     9808
IP address blocks:        101.36.128.0/20 maxlen: 20
                          101.36.144.0/20 maxlen: 20
                          101.36.160.0/20 maxlen: 20
                          101.36.176.0/20 maxlen: 20
                          101.36.192.0/20 maxlen: 20
                          101.36.208.0/20 maxlen: 20
                          101.36.224.0/20 maxlen: 20
                          101.36.240.0/20 maxlen: 20
                          122.14.192.0/20 maxlen: 20
                          122.14.208.0/20 maxlen: 20
                          122.14.224.0/20 maxlen: 20
                          122.14.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:6e:73:b7:23:1e:bc:92:b2:25:c1:77:be:4e:fa:04:d7:fc:b9:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: Jun  8 08:58:47 2026 GMT
            Not After : Jun  7 09:03:47 2027 GMT
        Subject: CN=2139EDA3682D0D67590BACE14A02DF34BBAD23AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:82:f3:e6:dd:20:51:03:5d:2a:3d:8b:85:0d:
                    92:db:7c:83:8b:1e:44:1c:68:62:ce:58:9f:51:b9:
                    c9:e6:b4:e1:de:03:a6:78:b5:da:9d:c6:df:91:52:
                    cc:fa:cd:67:eb:ad:7b:b8:16:e1:35:50:17:7c:47:
                    d0:8b:fb:c4:f4:0c:78:bb:05:66:e6:c5:19:94:56:
                    ef:e5:01:36:8b:16:f1:63:82:7a:98:6d:0b:d2:d2:
                    98:91:b6:ee:d4:21:ee:0d:01:cb:68:a4:77:87:a7:
                    55:72:bf:c5:f8:ac:bf:7b:b2:7e:a1:a6:c7:b2:3e:
                    2f:e8:f1:00:b4:e9:a1:da:1b:ba:7b:e1:fd:60:d5:
                    29:90:6c:75:97:e3:bf:e4:5a:7f:b3:ff:54:d6:4f:
                    f5:22:29:a3:09:96:81:af:0e:06:d6:15:48:fd:3d:
                    3f:db:61:b8:0e:7d:8b:46:dc:31:b2:dc:91:ee:49:
                    06:5f:22:36:3a:83:d8:5f:b2:16:41:a1:5e:34:bc:
                    3a:ef:18:ac:76:1e:81:14:64:84:b6:b5:c5:5e:74:
                    78:c4:3a:ae:5f:02:f5:18:06:69:e0:0b:4d:db:0a:
                    3c:35:28:d1:11:77:c3:30:ab:b2:cb:72:8f:93:90:
                    a1:2d:85:7d:f6:b4:2e:fe:f7:50:53:7f:52:34:48:
                    48:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:39:ED:A3:68:2D:0D:67:59:0B:AC:E1:4A:02:DF:34:BB:AD:23:AE
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS9808.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.36.128.0/17
                  122.14.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         35:de:a9:fe:ef:7c:8a:e8:5d:d3:47:21:7a:6f:8a:d3:bc:fe:
         76:70:0f:e1:6e:27:1c:1f:ff:4c:1f:22:5c:30:71:45:7b:88:
         8e:10:e6:68:fb:a1:38:20:57:0e:e7:08:f9:39:33:5d:99:08:
         3a:a7:03:fe:cc:34:16:68:97:16:f4:d3:1c:aa:4a:4a:13:a9:
         8a:eb:94:6f:78:1b:a6:f1:9d:c0:45:f3:84:5f:95:6f:a9:ab:
         ef:a1:11:b1:57:c7:cc:9a:94:9b:57:68:32:83:ef:72:e5:b6:
         62:45:a1:9f:b8:00:65:ad:c4:5a:5d:06:34:53:b7:47:ff:90:
         7e:29:8a:49:d4:65:6e:7a:72:2d:6f:8d:72:7a:7a:f6:9b:43:
         68:3b:13:a9:53:5d:12:8e:53:f7:27:2c:d9:b5:95:16:1f:ca:
         a0:7a:14:90:2e:2b:44:08:a2:9d:1c:08:f5:41:74:a0:dd:27:
         c9:0b:32:22:29:6c:f9:90:f9:c6:ae:69:4f:e4:40:fe:15:3d:
         62:f2:10:af:d0:97:3f:3b:3a:0b:22:90:3d:e1:ff:ff:0c:fd:
         73:71:d1:4e:77:a0:95:88:35:a6:7e:ea:ef:df:45:25:00:8c:
         ee:73:99:66:46:fa:f6:0d:99:f8:b9:39:27:c5:4e:d5:51:48:
         a7:9f:82:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:22:57 2026 by rpki-client