Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e2034383038.roa
File:                     35392e3135312e302e302f31372d3332203d3e2034383038.roa (raw, json)
Hash identifier:          yWx639u79WCp190AQf1H01zpvzllxRNJmCFkLd9B94U=
Subject key identifier:   DF:A1:84:51:AD:3E:F2:F4:9B:F8:3A:2C:85:83:F3:D6:70:72:C8:39
Certificate issuer:       /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Certificate serial:       71B3F0DE9E54F37A8048F500DA70EBF8FDC2E67A
Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e2034383038.roa
Signing time:             Tue 14 Apr 2026 03:06:35 +0000
ROA not before:           Tue 14 Apr 2026 03:01:35 +0000
ROA not after:            Tue 13 Apr 2027 03:06:35 +0000
asID:                     4808
IP address blocks:        59.151.0.0/17 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b3:f0:de:9e:54:f3:7a:80:48:f5:00:da:70:eb:f8:fd:c2:e6:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
        Validity
            Not Before: Apr 14 03:01:35 2026 GMT
            Not After : Apr 13 03:06:35 2027 GMT
        Subject: CN=DFA18451AD3EF2F49BF83A2C8583F3D67072C839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:24:40:bd:28:5b:d3:4c:91:d9:46:4d:68:5d:
                    8f:2f:d8:27:8e:c5:66:8a:f1:e3:3e:fc:c3:35:f8:
                    ef:0c:84:de:fc:00:cf:36:48:57:90:13:77:fb:aa:
                    b4:c0:20:9f:aa:a0:5d:a7:04:42:eb:44:c4:d5:d2:
                    e9:e6:75:05:36:b4:8a:fb:07:85:26:ee:ad:ea:f9:
                    6a:01:14:07:d1:3c:3a:24:6d:ae:f1:68:8e:a0:c2:
                    a0:ec:50:2f:87:27:28:90:1d:62:ff:3a:5a:66:31:
                    72:89:ee:f5:8c:0a:bb:d4:54:c3:54:ef:d4:32:90:
                    8c:b2:d7:b4:0f:bf:18:14:cf:16:75:e3:70:e6:65:
                    ce:85:21:11:cd:24:b6:3d:2a:7c:09:a6:a2:50:66:
                    6c:7e:01:67:41:86:25:65:dd:c4:ae:28:3b:11:5d:
                    1d:a4:f2:4c:90:6d:87:85:6b:51:b9:f9:20:60:35:
                    94:e4:06:6b:56:6a:cd:2b:7d:c3:38:3e:c3:c1:6e:
                    81:7f:0a:8e:c0:f7:4f:be:ec:1e:a1:4f:94:89:04:
                    9b:8c:8b:ac:2e:30:a0:5e:fc:5b:3f:7b:a3:0c:a7:
                    3c:b1:29:45:f7:26:ca:68:85:21:c4:de:e6:c5:37:
                    fd:62:63:76:47:77:90:4a:dc:83:c3:aa:b4:96:7d:
                    8f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A1:84:51:AD:3E:F2:F4:9B:F8:3A:2C:85:83:F3:D6:70:72:C8:39
            X509v3 Authority Key Identifier:
                keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.151.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4d:22:49:6a:9f:27:99:0e:5f:28:6a:83:ff:ca:23:fc:8e:e1:
         6e:d1:93:04:2c:ba:6e:cb:4d:f4:36:25:3c:82:b9:b7:16:50:
         dc:62:ea:85:f3:00:10:b8:a3:74:fc:05:42:d3:a9:84:b5:54:
         91:13:54:5c:75:b8:1a:74:19:6b:bb:70:88:9d:bf:1f:d7:68:
         42:74:e8:e8:9a:44:f0:5f:79:18:f3:29:68:d6:9e:e2:3a:bb:
         bb:13:a1:5b:0d:20:6a:3d:2c:8d:58:85:3e:15:a0:08:0e:76:
         ac:b2:54:60:21:2f:75:01:6a:f6:07:0e:06:ab:f3:a8:c0:64:
         fb:4b:33:34:92:44:d5:ac:a2:95:81:13:28:ea:ec:c2:53:61:
         e3:b3:bf:32:80:aa:9b:fa:ab:c5:59:59:e6:52:5a:64:76:1d:
         29:03:19:f7:32:29:eb:52:6e:27:31:25:f0:21:49:cf:fd:f1:
         53:2b:8a:49:1c:fd:16:78:97:57:61:cb:dd:8f:5e:7a:48:82:
         4a:1b:66:9a:f1:8a:a5:ff:ab:d0:3f:ed:13:56:95:ea:85:57:
         14:2d:51:8a:78:99:c9:59:7a:a8:87:66:ec:19:ce:35:85:bd:
         82:c2:7d:6a:50:23:be:67:92:c1:10:8e:1e:f2:3d:ba:61:5e:
         cf:f2:b5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:54:44 2026 by rpki-client