Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e20323037353530.roa
File:                     35382e36362e302e302f31362d3234203d3e20323037353530.roa (raw, json)
Hash identifier:          iv6ddEmrEWIM+9pxEIBy8lwEkTLtMTtx+uCGFc6lMYA=
Subject key identifier:   54:B3:6F:DA:08:7A:07:08:B1:26:51:EB:34:26:89:C7:14:FF:68:D0
Certificate issuer:       /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial:       41D492C778ACAC0BB208E678903311CA2C59FC94
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e20323037353530.roa
Signing time:             Sat 12 Sep 2026 16:21:02 +0000
ROA not before:           Sat 12 Sep 2026 16:16:02 +0000
ROA not after:            Sat 11 Sep 2027 16:21:02 +0000
asID:                     207550
IP address blocks:        58.66.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 00:27:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d4:92:c7:78:ac:ac:0b:b2:08:e6:78:90:33:11:ca:2c:59:fc:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
        Validity
            Not Before: Sep 12 16:16:02 2026 GMT
            Not After : Sep 11 16:21:02 2027 GMT
        Subject: CN=54B36FDA087A0708B12651EB342689C714FF68D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a0:ab:ac:42:6a:7b:6c:0e:a4:fb:7f:45:17:
                    76:51:12:a8:ad:11:bb:d5:99:30:45:7a:59:66:14:
                    19:14:07:b7:62:e5:24:2f:c4:80:a2:f2:cc:c1:40:
                    e1:2b:03:72:9f:6d:ef:6b:5e:63:b6:35:ef:d4:12:
                    ce:ed:e6:fa:b0:92:fb:a4:ca:10:a9:dc:f8:5b:f3:
                    f8:f4:94:ec:74:b7:79:da:fa:4c:c5:74:3a:03:b1:
                    97:59:09:d5:06:d4:5f:8c:95:8f:9e:0a:d4:0b:2d:
                    90:f3:36:3a:54:78:a1:e1:af:fa:fa:7f:77:13:aa:
                    49:4d:00:ba:57:be:27:74:d7:ae:c1:a2:dd:fa:09:
                    b1:ea:08:bd:32:2b:06:e4:f0:d4:cf:1f:67:cb:a9:
                    fb:50:99:1c:82:01:9b:b9:92:a9:82:53:e0:f1:6b:
                    e0:5e:99:9c:ea:61:10:b4:21:ef:12:6a:9e:32:56:
                    c4:a2:fa:69:fc:64:72:58:02:84:da:8d:ad:f8:07:
                    d6:84:dd:76:29:d3:20:87:94:5c:6a:6a:9c:87:f0:
                    00:cf:a1:40:9f:59:9f:cd:4d:f6:7b:81:32:c2:5d:
                    d6:00:b4:96:36:11:ec:02:d4:9a:02:8c:0b:cc:25:
                    c4:b6:cd:72:4d:ca:f5:a6:3b:24:df:f0:ff:00:91:
                    6d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B3:6F:DA:08:7A:07:08:B1:26:51:EB:34:26:89:C7:14:FF:68:D0
            X509v3 Authority Key Identifier:
                keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e20323037353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.66.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6d:4b:9c:61:39:e5:67:df:ad:3e:8f:17:c1:1d:5e:19:19:2c:
         86:9b:c3:81:92:16:7c:eb:b9:71:2a:d4:b1:55:8a:ee:d4:03:
         a1:16:d1:59:89:ea:1b:57:4b:b1:4b:0e:2b:11:4c:9f:ba:b7:
         8a:08:46:c5:42:4d:c6:c2:34:16:13:96:27:be:5a:c8:c8:0c:
         1d:fc:be:d2:25:29:9d:7b:9f:67:91:82:ce:b7:ae:ea:6c:1f:
         c1:81:16:98:dd:c7:29:07:2c:ab:a1:50:b5:36:45:15:19:12:
         04:1d:9d:d3:aa:cd:c6:11:38:f2:65:5a:c8:47:5a:fe:61:b6:
         dd:18:f1:91:a3:3b:bf:28:08:3f:9f:dc:4b:cf:9e:4f:87:26:
         af:82:33:4c:66:88:4b:b8:27:f2:19:4b:d6:ba:db:56:2a:0c:
         45:b4:23:d2:89:71:59:5a:55:38:6f:cc:88:46:00:e3:08:a4:
         9d:8b:3e:b6:f6:15:c2:5f:57:d0:eb:bf:6c:06:e0:fb:ad:e2:
         6d:4b:bb:3c:2d:73:50:f0:42:df:17:40:bb:2b:5c:51:61:5e:
         42:80:cb:e9:e1:81:52:3f:01:e3:ba:18:a6:be:65:12:a7:d9:
         9a:d2:f1:a4:67:0c:d1:8b:04:17:6e:37:4c:ef:d9:8b:ec:24:
         d3:c5:0b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:14:39 2026 by rpki-client