Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3135362e302f32332d3233203d3e203233383532.roa
File:                     35382e36372e3135362e302f32332d3233203d3e203233383532.roa (raw, json)
Hash identifier:          g7wpjUMRrsTc0CeAv2ePQApPEgNfCmxDKAUZSt/1I94=
Subject key identifier:   75:61:4B:F8:8E:FD:07:F7:06:EA:2F:24:89:2B:D8:6F:A0:14:44:87
Certificate issuer:       /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial:       7D6BCF19E3EDA2C51685A79D87AE0A14E42C150B
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3135362e302f32332d3233203d3e203233383532.roa
Signing time:             Tue 14 Apr 2026 03:25:35 +0000
ROA not before:           Tue 14 Apr 2026 03:20:35 +0000
ROA not after:            Tue 13 Apr 2027 03:25:35 +0000
asID:                     23852
IP address blocks:        58.67.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 08:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6b:cf:19:e3:ed:a2:c5:16:85:a7:9d:87:ae:0a:14:e4:2c:15:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
        Validity
            Not Before: Apr 14 03:20:35 2026 GMT
            Not After : Apr 13 03:25:35 2027 GMT
        Subject: CN=75614BF88EFD07F706EA2F24892BD86FA0144487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7d:49:99:e3:c8:bc:10:0c:d0:66:e3:8f:26:
                    db:58:10:65:12:8a:08:7e:27:6a:2f:15:05:c5:1b:
                    73:09:e7:24:dd:3f:29:42:a2:72:ec:f7:9e:75:cd:
                    88:2d:65:e1:36:41:66:af:4a:84:bd:69:3d:8e:2c:
                    99:c0:2a:ff:e3:be:4e:32:f0:8e:3c:16:4f:3c:ed:
                    b7:ab:6d:a1:42:53:28:36:f9:63:c6:65:65:2b:7f:
                    b3:0a:c9:7b:1c:30:97:bb:7a:54:f8:da:90:18:24:
                    25:fc:d4:18:66:07:9f:09:91:bd:a6:f8:54:de:fd:
                    b0:7a:5d:0e:83:e6:98:98:92:4a:47:fe:42:60:3e:
                    e0:a2:f4:3c:2b:05:8a:a3:b8:94:d0:19:a2:ad:07:
                    d3:6d:34:f0:d7:f9:54:08:bb:fe:44:e0:43:1a:a1:
                    44:d9:4f:ec:cb:78:95:58:49:cb:cf:df:6b:2f:48:
                    d6:fb:19:df:be:42:0c:55:31:90:41:3d:5b:58:39:
                    d2:9e:cb:ae:e7:19:38:f9:c3:5e:a2:4f:ed:a9:53:
                    e5:9e:e4:33:d7:8f:11:1d:fe:ff:f3:44:00:f6:6b:
                    3f:52:43:cd:93:e6:a0:ef:55:8a:b8:bb:4d:75:74:
                    fb:ea:73:fa:dc:59:69:38:a6:90:af:b0:95:51:44:
                    f8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:61:4B:F8:8E:FD:07:F7:06:EA:2F:24:89:2B:D8:6F:A0:14:44:87
            X509v3 Authority Key Identifier:
                keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3135362e302f32332d3233203d3e203233383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.67.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:d4:21:7d:a8:19:7b:33:ca:58:e4:43:d7:5f:6f:0a:d1:ee:
         b5:36:d8:17:fd:80:12:1f:2c:0a:dd:b2:a0:f6:95:17:09:e1:
         01:4f:77:c9:11:6c:f1:8e:39:d6:f2:41:58:49:f7:c2:93:a6:
         f7:0e:61:a7:7b:53:5e:68:d0:3d:86:53:d4:29:da:89:67:82:
         16:ba:ea:d9:e7:32:58:68:8a:0b:f9:ca:eb:ba:3d:28:2a:42:
         ee:36:8b:b7:51:de:78:58:7a:44:6e:c7:d9:7c:21:c4:96:c8:
         5f:4f:ec:a4:07:c3:80:cf:e7:3e:51:cc:23:34:9a:d8:0b:16:
         ff:3b:00:d2:04:96:e8:45:07:86:83:d5:82:17:26:8e:ef:fb:
         2a:53:59:c5:70:0a:b6:a3:36:36:04:f0:ed:0a:41:83:b9:b8:
         30:9c:e1:2b:49:99:72:96:d7:64:12:7a:8c:ac:51:a6:48:75:
         ed:51:d4:6b:02:76:ef:1f:00:a8:a3:2d:26:4c:89:c9:ed:e2:
         8c:c2:2e:7c:81:fd:23:0e:ab:3a:5d:28:b3:c6:a2:dc:1f:01:
         b4:46:70:38:37:22:45:8d:b7:b2:8e:f8:f3:f6:67:14:94:9b:
         00:27:4b:c9:98:16:24:6f:57:fd:2a:e0:03:0f:e7:0f:1a:44:
         93:4d:9c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:34 2026 by rpki-client