Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095917566238392322/0/35392e3135332e3133362e302f32322d3232203d3e2030.roa
File:                     35392e3135332e3133362e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          Akc4Wv2MwD9SISrtJFKeSxsyastNqtHvJxyrpkR1FEQ=
Subject key identifier:   49:DC:11:26:3C:33:D5:31:4F:EE:87:BA:59:E9:50:00:87:6B:C7:3A
Certificate issuer:       /CN=55983C77C95B9F0B7F1FAE231EBB1CBCCDC36894
Certificate serial:       2B10A5AD21868C0A02B64FFFD1449709BA77022E
Authority key identifier: 55:98:3C:77:C9:5B:9F:0B:7F:1F:AE:23:1E:BB:1C:BC:CD:C3:68:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/55983C77C95B9F0B7F1FAE231EBB1CBCCDC36894.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095917566238392322/0/35392e3135332e3133362e302f32322d3232203d3e2030.roa
Signing time:             Thu 16 Apr 2026 01:36:25 +0000
ROA not before:           Thu 16 Apr 2026 01:31:25 +0000
ROA not after:            Thu 15 Apr 2027 01:36:25 +0000
asID:                     0
IP address blocks:        59.153.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095917566238392322/0/55983C77C95B9F0B7F1FAE231EBB1CBCCDC36894.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095917566238392322/0/55983C77C95B9F0B7F1FAE231EBB1CBCCDC36894.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/55983C77C95B9F0B7F1FAE231EBB1CBCCDC36894.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 17:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:10:a5:ad:21:86:8c:0a:02:b6:4f:ff:d1:44:97:09:ba:77:02:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55983C77C95B9F0B7F1FAE231EBB1CBCCDC36894
        Validity
            Not Before: Apr 16 01:31:25 2026 GMT
            Not After : Apr 15 01:36:25 2027 GMT
        Subject: CN=49DC11263C33D5314FEE87BA59E95000876BC73A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:5a:fc:bd:b2:99:b4:e9:08:17:bd:91:41:
                    26:80:92:2b:37:30:f4:09:42:d4:0b:ef:38:8e:65:
                    01:e9:a3:39:b6:7b:6c:c7:28:f5:42:e0:5f:b0:b3:
                    3d:f1:9f:b2:cf:91:31:18:29:17:6d:95:ed:cb:a1:
                    a8:b9:4b:0d:f7:9d:61:01:ba:d0:9b:a6:9f:d3:61:
                    4d:5e:61:ff:8e:fd:7a:14:b9:77:3e:b6:0d:58:52:
                    d0:51:8d:ff:93:60:00:7a:03:e1:59:ec:23:03:06:
                    6a:67:ea:80:ba:79:05:e6:aa:79:ae:ff:ce:45:e3:
                    09:9f:7e:ae:bb:eb:29:59:d4:32:ec:7f:55:13:73:
                    ee:b4:92:99:74:f3:e4:33:b1:86:a6:ca:3f:f2:fe:
                    d4:8a:a0:d7:06:0b:95:b5:1f:c1:21:d4:72:d7:b8:
                    23:e2:fd:64:b2:f0:1b:45:72:cb:ac:c0:09:6b:f6:
                    4e:97:b2:e9:3f:64:a3:ec:e9:6d:d8:03:c6:7d:37:
                    42:b8:30:6b:99:24:1b:59:b4:05:22:e7:35:b0:2e:
                    79:e8:25:8c:c7:bf:8c:d9:6f:9c:0f:47:ee:7d:c4:
                    95:31:1d:d5:3e:ad:78:63:29:83:16:c0:03:ac:a4:
                    f8:29:30:df:07:2a:95:8a:54:7a:cf:b9:21:7a:cb:
                    34:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DC:11:26:3C:33:D5:31:4F:EE:87:BA:59:E9:50:00:87:6B:C7:3A
            X509v3 Authority Key Identifier:
                keyid:55:98:3C:77:C9:5B:9F:0B:7F:1F:AE:23:1E:BB:1C:BC:CD:C3:68:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095917566238392322/0/55983C77C95B9F0B7F1FAE231EBB1CBCCDC36894.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/55983C77C95B9F0B7F1FAE231EBB1CBCCDC36894.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095917566238392322/0/35392e3135332e3133362e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.153.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:ae:01:dc:4c:31:b1:d2:2d:33:0a:91:9b:e9:70:37:82:49:
         78:f5:ba:db:bd:de:e5:45:af:a1:6b:49:54:ab:ae:f7:b6:c4:
         b5:41:4d:43:7c:c4:ac:5b:38:7f:83:78:06:03:fb:f0:1b:69:
         b8:89:0d:d4:54:9f:3e:c5:77:94:ef:0f:4b:9c:e9:16:a6:45:
         88:de:18:97:89:25:46:68:39:bb:78:35:84:05:48:2e:b6:74:
         01:7b:1d:49:46:fb:57:dc:d3:94:e7:c5:a5:57:18:4c:5f:22:
         e4:8a:27:8d:fa:14:2e:e9:91:e1:7a:f2:e2:52:da:ff:8f:e7:
         fc:b6:d7:28:4a:c6:32:2c:d7:c7:a7:ce:5e:2a:5d:60:d7:37:
         9d:72:09:8e:0c:36:9f:8d:ee:f2:77:c8:83:55:55:38:bd:dc:
         64:e9:a8:db:52:a5:e4:2c:b7:c8:e9:da:9e:48:b8:b0:4f:ef:
         8f:55:3d:09:ef:e0:78:19:61:6e:89:3d:9c:0f:fb:ab:0a:78:
         3f:65:fa:58:bf:6b:cb:89:2d:09:83:12:72:c0:b6:f7:59:94:
         d8:90:f6:d9:bc:a4:42:c0:28:b3:74:89:a2:ec:35:02:cd:82:
         5d:cb:be:8f:46:60:2d:4c:03:2b:fe:6d:51:c6:29:de:d2:23:
         ca:4e:1a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:36:06 2026 by rpki-client