Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3135362e302f32342d3234203d3e20313336393539.roa
File:                     35382e36372e3135362e302f32342d3234203d3e20313336393539.roa (raw, json)
Hash identifier:          qABo9KpeNvqmkCRVlxsD0XFTZ1UMcx5u0K4xkhlRM7w=
Subject key identifier:   E7:E0:F7:25:62:87:72:81:14:20:C9:A5:53:18:B7:2F:AE:01:C0:77
Certificate issuer:       /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial:       49854382EB19BE954119685CE2DDCA6D91F483F7
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3135362e302f32342d3234203d3e20313336393539.roa
Signing time:             Tue 14 Apr 2026 03:25:35 +0000
ROA not before:           Tue 14 Apr 2026 03:20:35 +0000
ROA not after:            Tue 13 Apr 2027 03:25:35 +0000
asID:                     136959
IP address blocks:        58.67.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 08:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:85:43:82:eb:19:be:95:41:19:68:5c:e2:dd:ca:6d:91:f4:83:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
        Validity
            Not Before: Apr 14 03:20:35 2026 GMT
            Not After : Apr 13 03:25:35 2027 GMT
        Subject: CN=E7E0F725628772811420C9A55318B72FAE01C077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bb:c6:59:0f:47:92:f9:23:02:4f:e6:b0:9b:
                    44:f1:d8:c4:2a:08:d2:62:42:ed:0c:f0:b4:d2:7b:
                    fd:73:47:42:76:76:3c:9e:31:92:b1:ed:50:9c:77:
                    66:f2:51:b9:7d:ee:07:27:a7:2f:66:32:bb:cb:f7:
                    cc:ed:b0:fc:1d:c9:87:c2:29:2d:3b:e3:ef:4a:be:
                    f8:ec:4d:74:68:86:ba:cf:85:c9:55:5d:bb:dc:69:
                    81:7a:a3:fa:6a:d7:fd:20:d6:32:64:87:d8:39:bf:
                    a1:93:ed:fe:e1:c4:be:3c:08:9a:ac:78:f6:05:ee:
                    3d:c9:01:df:bf:ff:25:82:d7:ab:69:59:f4:83:9c:
                    58:93:39:d7:1a:5c:6e:e9:02:84:ff:ee:12:6b:7e:
                    c1:e8:1a:3f:77:5b:3f:14:c3:a9:4e:a7:ce:30:c5:
                    a4:23:12:f4:86:b7:cc:20:ac:58:c6:bb:8b:15:f5:
                    ef:a7:50:0f:1e:dd:e7:79:0f:b1:f0:9d:d2:7e:4e:
                    4d:09:da:4d:0e:65:09:77:71:a3:ad:fe:d9:3d:84:
                    2f:b4:0c:87:43:e3:94:d4:0d:ac:b1:6e:d1:1f:8a:
                    93:4c:92:0c:56:33:94:1f:f8:13:64:3a:3f:20:dd:
                    8a:ef:71:4a:75:99:0b:e6:ca:67:2c:19:40:0c:6d:
                    2a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E0:F7:25:62:87:72:81:14:20:C9:A5:53:18:B7:2F:AE:01:C0:77
            X509v3 Authority Key Identifier:
                keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3135362e302f32342d3234203d3e20313336393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.67.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:cf:97:69:50:8a:22:a7:d7:5e:11:03:8a:88:18:77:59:22:
         f8:56:fb:ef:91:6e:64:0a:c5:44:05:7a:3c:b1:25:c5:75:8a:
         8e:1d:c4:2b:71:db:c3:4a:5b:47:2f:8c:61:58:c7:45:7d:24:
         9d:a7:8c:c0:9d:46:3f:f7:db:ec:ea:05:b6:88:23:af:64:b2:
         84:8b:08:b3:fc:cb:7f:7d:3b:4b:05:34:4a:ce:93:41:d2:b0:
         25:af:51:ab:9a:6f:2f:75:e2:0d:c4:d5:2b:f6:f6:4a:c9:8f:
         37:3f:d3:6f:b1:9d:66:50:83:d2:70:99:7e:67:e4:48:12:8c:
         58:0d:31:59:5b:de:4f:3b:b8:37:f1:f3:a9:ea:f8:3d:c7:42:
         c3:72:c3:ce:e1:95:cc:a0:84:50:2e:8b:ac:88:cc:46:42:47:
         d5:fe:21:98:25:72:5b:13:b3:a7:7c:d8:db:74:57:7b:80:d5:
         ce:49:34:80:20:be:8e:1a:f0:48:d6:38:be:f3:79:a0:86:5b:
         68:48:50:03:d1:da:b4:1b:b0:ee:2c:97:47:af:b0:0b:b4:5f:
         86:49:b6:74:5f:51:85:49:b4:a4:c7:69:a9:f5:6f:0f:82:5a:
         6a:e0:aa:8d:0a:54:40:af:72:53:05:ee:d8:6c:44:13:f6:9f:
         c2:f6:56:65
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:26 2026 by rpki-client