Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/AS58466.roa
File:                     AS58466.roa (raw, json)
Hash identifier:          kSF22yBAy8SUSPPV8/o7H9vyPUoVyme9wGOZprZ2rcM=
Subject key identifier:   F7:78:B5:82:22:C2:9D:54:4D:43:A0:77:A8:DB:96:80:B8:E6:BB:76
Certificate issuer:       /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
Certificate serial:       2DB905CB83A64A1AC2D4006E03B63354FDFD9821
Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/AS58466.roa
Signing time:             Thu 16 Apr 2026 06:19:46 +0000
ROA not before:           Thu 16 Apr 2026 06:14:46 +0000
ROA not after:            Thu 15 Apr 2027 06:19:46 +0000
asID:                     58466
IP address blocks:        114.67.128.0/17 maxlen: 24
                          114.67.160.0/19 maxlen: 19
                          114.67.192.0/19 maxlen: 19
                          2403:1ec0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b9:05:cb:83:a6:4a:1a:c2:d4:00:6e:03:b6:33:54:fd:fd:98:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
        Validity
            Not Before: Apr 16 06:14:46 2026 GMT
            Not After : Apr 15 06:19:46 2027 GMT
        Subject: CN=F778B58222C29D544D43A077A8DB9680B8E6BB76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b4:af:0a:65:8c:bf:6f:a6:7c:b6:f1:de:7e:
                    94:ac:10:5e:52:6e:b7:54:ca:5d:99:8f:53:9a:29:
                    d3:7a:52:02:e3:b4:f2:45:de:04:fd:ec:04:f8:11:
                    a0:e3:c5:d3:ed:22:92:a0:6c:ef:c3:ed:83:1f:4e:
                    4d:95:13:ea:c5:12:3b:db:10:7d:bd:33:2a:4d:b1:
                    3a:00:22:2e:a2:bb:55:ff:e9:19:8a:47:8e:d7:8b:
                    63:ef:de:79:ba:d7:29:a1:da:0f:c8:a6:e0:2f:f2:
                    22:0c:7e:5a:1e:78:f4:c3:37:1e:9b:76:63:01:03:
                    27:be:cb:2c:12:8a:1a:78:49:49:f3:6e:a9:bf:a0:
                    a9:ed:b3:08:24:74:aa:33:02:8f:1e:47:3e:ef:25:
                    54:90:4c:4a:28:b7:a0:55:cb:b0:b8:8b:e0:6e:38:
                    ff:fa:02:5d:5f:4a:30:62:74:96:bf:d9:83:ca:90:
                    9f:ec:3f:e1:ed:a1:0d:8e:77:b2:46:39:71:e2:e7:
                    f1:fc:c4:33:52:d5:af:26:3d:ef:af:7e:f3:c2:90:
                    b0:f9:19:d6:fb:20:06:14:36:c9:0a:d7:28:49:3a:
                    c5:d5:ca:f5:28:49:68:eb:4b:41:8a:3c:9d:31:2f:
                    df:37:cf:d9:6e:62:f8:26:4d:e5:0f:ba:64:1a:6b:
                    66:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:78:B5:82:22:C2:9D:54:4D:43:A0:77:A8:DB:96:80:B8:E6:BB:76
            X509v3 Authority Key Identifier:
                keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/AS58466.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.67.128.0/17
                IPv6:
                  2403:1ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:e2:9c:7b:19:32:68:07:d7:b6:73:f5:de:aa:10:ee:16:ee:
         65:5b:94:f7:c3:e3:83:9a:57:2d:ef:92:3b:2a:66:de:67:05:
         bf:76:38:a2:12:02:ce:7f:ea:b6:4d:d0:d1:08:58:37:db:f1:
         b6:7f:4e:ac:3d:45:ec:c9:a2:2a:96:1b:49:5c:54:27:b0:74:
         19:b0:80:f2:a5:df:bf:b8:b1:12:a5:6b:f6:e8:91:1d:94:b4:
         58:ee:09:85:77:8a:ec:63:1b:9d:78:4c:57:62:d2:d8:69:d5:
         3d:72:13:f3:20:18:a7:d0:bf:d2:4a:83:19:0f:ad:d2:71:47:
         d8:a8:22:a2:ad:d3:2d:d4:30:90:93:b3:e2:7e:65:52:25:ac:
         f4:26:ca:d4:a8:af:5d:50:fa:27:28:a2:57:d1:36:31:eb:87:
         9d:46:f6:e6:9e:a3:0f:ce:b1:83:46:0f:39:73:79:74:10:42:
         6e:f4:ac:ec:a8:85:ae:4c:45:c1:6f:41:89:74:c3:b4:74:7b:
         df:61:eb:36:97:14:3f:ab:5d:b5:be:7f:02:ae:94:7d:b0:4a:
         3e:12:3d:24:95:5e:2f:36:ce:f4:28:ac:7b:64:5f:75:4d:d6:
         99:c7:e2:b3:39:ed:0c:7a:1d:93:e4:46:1d:e2:c1:22:a3:f7:
         a9:28:8d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:29 2026 by rpki-client