Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e203137343238.roa
File:                     35392e3135312e302e302f31372d3332203d3e203137343238.roa (raw, json)
Hash identifier:          piGk2O6opgtRewC/1WWsHXc4ehqS4VsnUIcBazapLXs=
Subject key identifier:   0F:28:CB:02:39:66:E4:90:97:5F:E7:94:B5:B0:5D:CD:9B:09:BA:09
Certificate issuer:       /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Certificate serial:       2BCB547187120D1C15F6E278628F3E5FB72ABC22
Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e203137343238.roa
Signing time:             Tue 14 Apr 2026 03:06:35 +0000
ROA not before:           Tue 14 Apr 2026 03:01:35 +0000
ROA not after:            Tue 13 Apr 2027 03:06:35 +0000
asID:                     17428
IP address blocks:        59.151.0.0/17 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:cb:54:71:87:12:0d:1c:15:f6:e2:78:62:8f:3e:5f:b7:2a:bc:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
        Validity
            Not Before: Apr 14 03:01:35 2026 GMT
            Not After : Apr 13 03:06:35 2027 GMT
        Subject: CN=0F28CB023966E490975FE794B5B05DCD9B09BA09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e0:b0:2c:07:66:db:0c:0c:71:9e:c2:e1:37:
                    cf:3b:22:32:c4:19:63:1b:42:91:b9:f1:31:a9:6b:
                    a3:81:f9:01:dd:47:52:ed:48:28:ad:eb:2a:e1:9d:
                    56:2c:98:46:0b:03:ec:90:60:65:5f:e0:f5:f8:48:
                    d7:f2:36:ff:3a:04:70:14:42:7d:5f:41:83:78:34:
                    ad:c3:a0:ac:94:b4:a4:ac:17:d1:4d:d3:29:44:cd:
                    8b:3d:93:64:2c:d1:30:84:2a:94:c9:21:fc:14:02:
                    6f:8a:a4:21:73:8f:0c:a9:13:69:cb:0a:02:31:d1:
                    65:0c:ba:6d:05:5a:d5:a0:6f:30:d0:0b:88:c3:cf:
                    94:cf:15:d5:fc:d4:5b:9d:3c:85:52:6e:9e:23:71:
                    93:21:60:4b:02:9a:8d:0d:92:2b:c8:80:84:29:69:
                    77:aa:bb:59:28:4e:b3:0f:fa:ef:f2:81:fd:60:cc:
                    d7:51:b5:f1:b2:62:db:e1:39:71:6d:46:fd:7b:58:
                    d9:e7:13:ca:2f:c1:31:7b:a3:29:87:0c:c3:3e:a0:
                    83:a4:d0:f4:d3:f5:8f:71:d2:2f:7b:04:14:c9:2e:
                    a7:1c:eb:63:14:5c:fa:21:e1:0f:f8:b9:74:a4:8e:
                    84:f5:8b:38:7d:51:0a:f1:02:80:0b:92:df:33:a7:
                    93:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:28:CB:02:39:66:E4:90:97:5F:E7:94:B5:B0:5D:CD:9B:09:BA:09
            X509v3 Authority Key Identifier:
                keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e203137343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.151.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         71:a8:da:58:39:18:5e:2a:43:ce:26:2e:a5:77:6a:fc:cf:ec:
         24:56:ef:43:e8:30:8d:15:75:b1:a5:6b:f0:64:ca:22:4b:1f:
         28:73:7a:31:d7:ce:a7:5b:ff:a8:56:67:2c:d1:56:5c:8d:ac:
         b1:b3:c3:30:91:19:88:38:b2:68:54:37:24:a8:cc:31:fd:05:
         d7:f2:a8:85:80:c4:fd:d4:37:42:3d:c0:3d:60:24:e8:b2:3e:
         55:95:83:82:ef:eb:6a:99:7b:90:13:a9:a0:66:81:d1:ca:62:
         c6:ac:f8:46:53:03:2d:41:fe:b8:7d:4d:7f:29:11:a0:a7:82:
         c3:b4:d4:ab:be:97:07:49:da:24:0a:30:86:80:b9:21:29:42:
         04:e2:1a:39:7d:fd:63:30:c3:85:c9:26:8a:b1:0e:85:12:f9:
         1a:c8:59:db:ca:97:3f:62:6e:a5:18:89:59:1c:1f:3f:31:60:
         c3:04:bb:33:fe:3e:ca:90:d5:ce:60:5f:c8:1b:02:38:b8:cf:
         7f:fe:3f:3d:61:d2:44:94:ad:d7:8e:42:b6:16:31:ef:50:70:
         63:15:53:72:28:e8:92:8f:9a:94:cf:07:e5:8e:3b:64:b7:f4:
         eb:1f:d4:6a:c8:2d:02:cd:71:9e:38:91:4f:8c:ef:93:89:81:
         f0:bc:94:ad
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUK8tUcYcSDRwV9uJ4Yo8+X7cqvCIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVD
NTQ0Qzc0QjAeFw0yNjA0MTQwMzAxMzVaFw0yNzA0MTMwMzA2MzVaMDMxMTAvBgNV
BAMTKDBGMjhDQjAyMzk2NkU0OTA5NzVGRTc5NEI1QjA1RENEOUIwOUJBMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB4LAsB2bbDAxxnsLhN887IjLE
GWMbQpG58TGpa6OB+QHdR1LtSCit6yrhnVYsmEYLA+yQYGVf4PX4SNfyNv86BHAU
Qn1fQYN4NK3DoKyUtKSsF9FN0ylEzYs9k2Qs0TCEKpTJIfwUAm+KpCFzjwypE2nL
CgIx0WUMum0FWtWgbzDQC4jDz5TPFdX81FudPIVSbp4jcZMhYEsCmo0NkivIgIQp
aXequ1koTrMP+u/ygf1gzNdRtfGyYtvhOXFtRv17WNnnE8ovwTF7oymHDMM+oIOk
0PTT9Y9x0i97BBTJLqcc62MUXPoh4Q/4uXSkjoT1izh9UQrxAoALkt8zp5M3AgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUDyjLAjlm5JCXX+eUtbBdzZsJugkwHwYDVR0j
BBgwFoAUHFGc0cQVkl5/zpL9og/xjsVEx0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI2NTQ1OTM0ODUzNzM0Ni8xLzFDNTE5Q0QxQzQxNTkyNUU3RkNFOTJGREEyMEZG
MThFQzU0NEM3NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVDNTQ0Qzc0Qi5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2MjY1NDU5MzQ4NTM3MzQ2LzEvMzUzOTJlMzEzNTMx
MmUzMDJlMzAyZjMxMzcyZDMzMzIyMDNkM2UyMDMxMzczNDMyMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAc7lwAwDQYJKoZIhvcNAQELBQADggEBAHGo2lg5GF4qQ84mLqV3avzP7CRW70Po
MI0VdbGla/BkyiJLHyhzejHXzqdb/6hWZyzRVlyNrLGzwzCRGYg4smhUNySozDH9
BdfyqIWAxP3UN0I9wD1gJOiyPlWVg4Lv62qZe5ATqaBmgdHKYsas+EZTAy1B/rh9
TX8pEaCngsO01Ku+lwdJ2iQKMIaAuSEpQgTiGjl9/WMww4XJJoqxDoUS+RrIWdvK
lz9ibqUYiVkcHz8xYMMEuzP+PsqQ1c5gX8gbAji4z3/+Pz1h0kSUrdeOQrYWMe9Q
cGMVU3Io6JKPmpTPB+WOO2S39Osf1GrILQLNcZ44kU+M75OJgfC8lK0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:30 2026 by rpki-client