Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e203233373234.roa
File:                     35392e3135312e302e302f31372d3332203d3e203233373234.roa (raw, json)
Hash identifier:          r/LGsUCpaWo4Hp6PlC2HKivvZ+/MtB+IQE4nuZzvRLU=
Subject key identifier:   61:EB:8F:E1:3F:D8:5F:3D:3A:F9:EE:28:49:7A:E4:E4:88:62:8E:6C
Certificate issuer:       /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Certificate serial:       294E855EDB8243A4CA6898C9C0173A66D85B012C
Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e203233373234.roa
Signing time:             Tue 14 Apr 2026 03:06:35 +0000
ROA not before:           Tue 14 Apr 2026 03:01:35 +0000
ROA not after:            Tue 13 Apr 2027 03:06:35 +0000
asID:                     23724
IP address blocks:        59.151.0.0/17 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:4e:85:5e:db:82:43:a4:ca:68:98:c9:c0:17:3a:66:d8:5b:01:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
        Validity
            Not Before: Apr 14 03:01:35 2026 GMT
            Not After : Apr 13 03:06:35 2027 GMT
        Subject: CN=61EB8FE13FD85F3D3AF9EE28497AE4E488628E6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:89:e8:d6:ec:30:9d:5a:5f:9c:29:50:51:13:
                    26:81:c3:c6:1a:5d:5b:62:e3:52:65:8c:22:08:e2:
                    0e:8b:60:b6:ab:19:f1:77:0c:61:d4:62:38:76:0a:
                    17:8f:23:66:0b:3e:47:6e:88:7f:af:61:03:8a:64:
                    75:77:31:49:5b:be:22:53:73:dd:54:50:57:58:01:
                    ff:c6:07:01:6c:71:4a:37:2c:62:62:55:35:bd:11:
                    dd:98:ca:1b:d6:92:c7:39:31:db:0f:bc:7e:9a:b4:
                    0f:73:5a:4f:86:fc:89:12:5b:4b:4e:fb:d8:ad:96:
                    57:33:02:2d:a9:dd:5c:d8:25:0d:dc:54:7d:ab:8a:
                    8a:24:27:bb:d3:be:6e:31:55:ce:ed:fd:d0:ac:da:
                    68:41:1a:c7:de:a4:f8:01:bc:8f:92:77:4f:a4:42:
                    b9:96:0e:4b:93:55:69:1e:69:82:35:cf:ef:d9:61:
                    e7:63:e9:1e:d2:89:d1:0f:e1:fa:c0:9e:c9:32:28:
                    df:e0:92:6d:7c:58:95:bd:47:d8:56:0d:5c:63:76:
                    3b:30:29:c8:fc:76:f5:40:f7:87:8f:82:59:fe:3a:
                    33:98:da:53:1e:dd:69:24:65:e6:ff:72:c1:eb:78:
                    79:a3:aa:0a:a9:25:4c:02:1b:6b:34:80:76:d9:bc:
                    6a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EB:8F:E1:3F:D8:5F:3D:3A:F9:EE:28:49:7A:E4:E4:88:62:8E:6C
            X509v3 Authority Key Identifier:
                keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.151.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8b:d4:e6:95:d7:91:db:4a:44:4d:e8:c3:ce:0c:9e:87:05:f4:
         8f:ee:a7:8e:93:1c:ee:9f:75:de:f5:6e:a2:ff:79:53:71:8a:
         d9:39:80:76:22:d7:7e:74:09:da:68:07:f9:ad:ec:9c:fd:0c:
         ae:e7:9a:2b:10:d2:b1:0c:52:05:3e:16:62:6a:e3:a1:b8:23:
         4c:6b:62:97:40:69:12:66:4a:67:42:df:77:d0:82:54:97:5e:
         be:f2:28:35:40:d1:11:04:c6:92:f0:04:44:00:b2:46:75:4b:
         49:01:03:62:c3:d7:e7:b6:87:42:01:0f:15:c9:88:f1:95:49:
         c9:04:cd:e1:8e:fd:f5:a7:cb:05:c4:08:97:7c:bd:9e:aa:96:
         01:bb:3c:58:8e:b6:d0:3f:3e:2c:6d:f3:0e:88:be:8d:f8:0d:
         8b:6e:14:e0:22:2e:e1:33:50:7a:f8:c0:92:c6:79:41:a6:71:
         6b:a4:e8:10:44:f6:67:2f:75:1c:57:b7:a7:92:32:d4:f7:1f:
         28:47:ba:97:d9:b5:78:60:14:67:bb:9c:5f:d4:55:be:02:b3:
         e1:ad:0b:6d:46:7a:57:ac:ef:33:71:49:18:c3:00:ef:12:1b:
         b3:0e:c7:ed:70:75:31:73:dd:45:3d:61:ac:2d:6d:88:64:1f:
         2d:3d:d6:a0
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUKU6FXtuCQ6TKaJjJwBc6ZthbASwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVD
NTQ0Qzc0QjAeFw0yNjA0MTQwMzAxMzVaFw0yNzA0MTMwMzA2MzVaMDMxMTAvBgNV
BAMTKDYxRUI4RkUxM0ZEODVGM0QzQUY5RUUyODQ5N0FFNEU0ODg2MjhFNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfiejW7DCdWl+cKVBREyaBw8Ya
XVti41JljCII4g6LYLarGfF3DGHUYjh2ChePI2YLPkduiH+vYQOKZHV3MUlbviJT
c91UUFdYAf/GBwFscUo3LGJiVTW9Ed2YyhvWksc5MdsPvH6atA9zWk+G/IkSW0tO
+9itllczAi2p3VzYJQ3cVH2riookJ7vTvm4xVc7t/dCs2mhBGsfepPgBvI+Sd0+k
QrmWDkuTVWkeaYI1z+/ZYedj6R7SidEP4frAnskyKN/gkm18WJW9R9hWDVxjdjsw
Kcj8dvVA94ePgln+OjOY2lMe3WkkZeb/csHreHmjqgqpJUwCG2s0gHbZvGpXAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUYeuP4T/YXz06+e4oSXrk5IhijmwwHwYDVR0j
BBgwFoAUHFGc0cQVkl5/zpL9og/xjsVEx0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI2NTQ1OTM0ODUzNzM0Ni8xLzFDNTE5Q0QxQzQxNTkyNUU3RkNFOTJGREEyMEZG
MThFQzU0NEM3NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVDNTQ0Qzc0Qi5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2MjY1NDU5MzQ4NTM3MzQ2LzEvMzUzOTJlMzEzNTMx
MmUzMDJlMzAyZjMxMzcyZDMzMzIyMDNkM2UyMDMyMzMzNzMyMzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAc7lwAwDQYJKoZIhvcNAQELBQADggEBAIvU5pXXkdtKRE3ow84MnocF9I/up46T
HO6fdd71bqL/eVNxitk5gHYi1350CdpoB/mt7Jz9DK7nmisQ0rEMUgU+FmJq46G4
I0xrYpdAaRJmSmdC33fQglSXXr7yKDVA0REExpLwBEQAskZ1S0kBA2LD1+e2h0IB
DxXJiPGVSckEzeGO/fWnywXECJd8vZ6qlgG7PFiOttA/Pixt8w6Ivo34DYtuFOAi
LuEzUHr4wJLGeUGmcWuk6BBE9mcvdRxXt6eSMtT3HyhHupfZtXhgFGe7nF/UVb4C
s+GtC21Geles7zNxSRjDAO8SG7MOx+1wdTFz3UU9YawtbYhkHy091qA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:32 2026 by rpki-client