Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e203536303438.roa
File:                     35392e3135312e302e302f31372d3332203d3e203536303438.roa (raw, json)
Hash identifier:          dPojVYuy1KL2pJ8cAcOTePgVbO0XZLI9+uP5Avm8aLs=
Subject key identifier:   03:5B:A2:2C:38:53:97:7A:B8:8C:DF:3A:C3:B7:B4:56:CF:CE:51:5C
Certificate issuer:       /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Certificate serial:       7AE340964B26E66A103896286F409F6AF20A4D48
Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e203536303438.roa
Signing time:             Tue 14 Apr 2026 03:06:35 +0000
ROA not before:           Tue 14 Apr 2026 03:01:35 +0000
ROA not after:            Tue 13 Apr 2027 03:06:35 +0000
asID:                     56048
IP address blocks:        59.151.0.0/17 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e3:40:96:4b:26:e6:6a:10:38:96:28:6f:40:9f:6a:f2:0a:4d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
        Validity
            Not Before: Apr 14 03:01:35 2026 GMT
            Not After : Apr 13 03:06:35 2027 GMT
        Subject: CN=035BA22C3853977AB88CDF3AC3B7B456CFCE515C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:81:ee:2d:23:72:9f:d1:80:75:b8:ac:50:39:
                    1b:d8:54:c3:65:e6:f6:0f:b6:c3:e8:75:26:4f:1b:
                    32:c9:c6:b3:f8:29:f5:37:f7:84:37:c0:67:d5:ba:
                    7c:a0:9a:98:46:90:2d:bc:ad:39:0a:15:da:af:37:
                    f7:d0:bc:68:e0:9f:13:f3:5d:09:26:20:8f:6f:5f:
                    24:f5:98:9d:b0:f5:d5:9f:93:65:34:dc:f1:6b:51:
                    69:26:43:45:98:a9:71:62:6a:49:86:bb:1a:c7:8b:
                    04:c5:87:bf:12:3d:85:a9:21:a1:24:2e:4e:f1:0f:
                    1f:84:ad:1e:dd:0c:5a:1f:3e:93:32:47:17:6e:1d:
                    40:30:dc:a1:fb:39:5d:ba:ff:ec:5b:18:aa:1e:04:
                    9c:f4:58:fb:26:16:f7:a1:ef:53:6b:eb:1b:e5:4b:
                    9c:c1:3b:7c:b6:4c:91:20:6c:4d:c9:fa:5b:38:50:
                    15:19:1b:9f:ab:e7:26:a8:cc:9b:63:a4:12:6e:e4:
                    ab:f0:53:ce:98:a5:4a:b0:f3:2e:38:da:3f:9e:7b:
                    0c:b8:34:68:6c:a6:7c:17:65:37:d9:4c:31:90:b9:
                    4b:51:3d:ce:59:9e:7a:0b:82:2e:6c:9b:1f:1a:33:
                    93:6c:f5:f6:23:b3:bf:ce:6e:cb:63:6a:81:33:27:
                    be:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5B:A2:2C:38:53:97:7A:B8:8C:DF:3A:C3:B7:B4:56:CF:CE:51:5C
            X509v3 Authority Key Identifier:
                keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.151.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         61:16:f6:47:3c:d6:74:16:45:a3:80:6b:e3:eb:fc:55:57:8f:
         01:c9:53:3c:51:3a:89:b7:d9:81:dc:0c:3e:cb:8c:30:d3:0e:
         0c:1c:72:41:ab:73:be:7d:47:c1:de:05:39:ec:bd:f0:4a:bb:
         10:d7:ea:e4:cf:de:d0:99:bf:12:1c:71:8e:82:4b:cd:8d:3f:
         9e:f2:c0:91:eb:cf:1b:6a:3e:23:eb:4a:66:38:2c:dd:30:fa:
         a8:ec:51:19:b5:35:bf:55:9c:32:29:65:6d:bc:00:73:5a:c3:
         ee:50:9e:27:aa:09:f6:85:73:6d:79:25:1c:78:bd:b6:43:43:
         a5:59:3e:0c:b1:9b:e7:4b:d7:23:b0:bc:52:92:05:6c:74:ee:
         e0:f2:e1:dc:6f:d4:77:60:fa:0f:f6:fb:ba:7f:1b:21:97:44:
         53:16:6d:53:59:b5:d4:9a:a5:ab:8b:f4:05:c2:0b:b3:c2:7b:
         bb:32:fa:a2:e2:2e:88:0d:05:a3:de:52:13:47:67:6e:fb:f1:
         7c:37:45:1f:a4:40:26:dc:e8:6a:9a:4d:95:ef:92:9e:d6:9b:
         f6:c5:85:30:05:71:c8:a7:18:5e:f3:70:06:32:2c:80:c9:e2:
         97:f0:f7:cc:02:46:35:8c:18:94:84:f0:97:fe:a1:21:40:44:
         ec:c2:48:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:33 2026 by rpki-client