Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3139322e302f31392d3139203d3e20313431343235.roa
File:                     35382e36372e3139322e302f31392d3139203d3e20313431343235.roa (raw, json)
Hash identifier:          z3mtuXIhV3UNHB2Womo5TJdShbS2qAGfHvMxnpAWAYA=
Subject key identifier:   37:57:92:EF:57:B4:33:F0:AF:61:EE:96:FF:44:7D:5D:2A:A0:60:2B
Certificate issuer:       /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial:       2BC69E9C70534C4CF96B7C5D7854948552C28807
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3139322e302f31392d3139203d3e20313431343235.roa
Signing time:             Tue 14 Apr 2026 03:27:43 +0000
ROA not before:           Tue 14 Apr 2026 03:22:43 +0000
ROA not after:            Tue 13 Apr 2027 03:27:43 +0000
asID:                     141425
IP address blocks:        58.67.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 08:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c6:9e:9c:70:53:4c:4c:f9:6b:7c:5d:78:54:94:85:52:c2:88:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
        Validity
            Not Before: Apr 14 03:22:43 2026 GMT
            Not After : Apr 13 03:27:43 2027 GMT
        Subject: CN=375792EF57B433F0AF61EE96FF447D5D2AA0602B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:11:53:b3:30:f8:bc:2b:ee:39:6e:39:41:8a:
                    16:1f:18:1d:9a:cb:5d:48:04:15:d3:ae:da:4f:59:
                    cc:3a:b8:10:d8:95:19:c8:1b:d2:93:55:bf:4d:3e:
                    3d:ad:a2:bf:f2:18:14:ff:90:60:b0:f5:83:e7:ca:
                    22:4b:f3:15:4b:40:43:18:43:37:a1:96:59:97:fb:
                    2e:63:c0:e1:24:c8:a3:24:43:dc:40:50:50:a3:3e:
                    3d:3c:2e:3f:67:d1:31:b8:18:9f:2f:c1:80:ca:d9:
                    41:2a:d4:cb:7e:41:6e:c7:60:e0:c8:32:20:8c:21:
                    42:4f:4f:f5:d7:b0:8b:8d:b3:3f:ed:3f:da:a9:e1:
                    dc:ad:99:03:f9:ba:b9:9b:74:fb:43:47:ce:1c:13:
                    9b:a8:65:b9:cd:0e:61:26:2a:72:9a:b9:00:ad:65:
                    18:ae:a0:64:52:94:9b:51:f5:dd:eb:7f:f3:56:7a:
                    d2:d9:b6:10:46:77:4e:3f:de:94:df:b3:8e:3e:57:
                    b9:70:af:8d:f9:72:ff:32:04:fe:6e:04:7f:13:26:
                    71:d6:d7:66:6b:b5:5f:e7:0b:cc:55:63:5e:6f:36:
                    fd:87:7e:ce:96:95:c2:9a:01:a9:01:35:3f:64:88:
                    75:fd:15:dc:7a:08:de:11:8b:39:94:d2:2e:e7:4b:
                    7b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:57:92:EF:57:B4:33:F0:AF:61:EE:96:FF:44:7D:5D:2A:A0:60:2B
            X509v3 Authority Key Identifier:
                keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3139322e302f31392d3139203d3e20313431343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.67.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bf:08:91:9a:00:31:ba:73:78:5f:23:96:c2:88:fb:3e:d5:0c:
         aa:23:06:20:9a:e3:46:4b:95:4c:f8:0c:db:aa:af:e6:ad:58:
         c9:11:94:84:95:92:bb:34:db:33:bc:f5:81:50:e9:5c:84:02:
         ec:aa:49:be:75:ff:f5:d2:29:be:28:b9:07:29:a6:40:66:f8:
         b9:db:66:89:40:c1:11:ef:6e:c1:48:52:19:f8:59:28:01:61:
         55:b3:03:9a:c2:ef:7c:cd:53:95:ed:57:49:12:2b:73:12:65:
         8b:a7:7e:6a:c1:11:f1:63:91:7c:4e:71:15:1b:c7:de:ab:c8:
         6d:59:1f:9a:d0:0e:07:41:3d:ea:45:af:da:32:26:ad:95:77:
         00:37:40:da:40:1e:74:9c:9d:a8:df:3e:b3:3b:e7:04:74:4e:
         90:ba:bf:3e:be:fb:c8:c8:3e:c8:7e:04:ba:2c:c1:51:45:82:
         e9:e8:f4:e9:d0:bf:b7:13:d6:25:4b:41:a2:fa:d3:3b:09:13:
         81:c0:ab:35:91:4b:84:ef:7d:17:fa:83:a5:56:27:6a:49:8c:
         99:e3:bd:9c:fc:b3:88:fa:93:11:a4:c5:6a:68:b5:4f:82:2a:
         87:a6:ea:21:17:4e:fb:65:f7:90:21:fe:58:05:3a:22:78:ae:
         b2:f7:e3:5b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:32 2026 by rpki-client