Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e2039383032.roa
File:                     35392e3135312e302e302f31372d3332203d3e2039383032.roa (raw, json)
Hash identifier:          iBbJZXHPeq9OKSYThwM+5qp/2KpXhDM5P/OHhwsSOMM=
Subject key identifier:   83:68:6F:10:B0:0E:C4:C3:3B:4F:37:9F:DA:77:A0:D5:3C:FD:B2:70
Certificate issuer:       /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Certificate serial:       7138383544BF8FF024918891FC0BD8C8BA062ABD
Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e2039383032.roa
Signing time:             Tue 14 Apr 2026 03:06:35 +0000
ROA not before:           Tue 14 Apr 2026 03:01:35 +0000
ROA not after:            Tue 13 Apr 2027 03:06:35 +0000
asID:                     9802
IP address blocks:        59.151.0.0/17 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:38:38:35:44:bf:8f:f0:24:91:88:91:fc:0b:d8:c8:ba:06:2a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
        Validity
            Not Before: Apr 14 03:01:35 2026 GMT
            Not After : Apr 13 03:06:35 2027 GMT
        Subject: CN=83686F10B00EC4C33B4F379FDA77A0D53CFDB270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5e:cf:08:f2:8d:62:f3:bd:c0:eb:94:62:5a:
                    25:1d:85:ed:77:da:b4:b0:57:34:d4:4e:15:91:92:
                    df:81:9d:2e:10:ab:2d:b2:e0:46:25:e1:90:35:6e:
                    84:bb:0f:c1:dc:54:99:42:60:85:90:ca:15:58:4a:
                    73:78:b6:17:6f:68:e1:45:46:35:01:f9:e8:9b:94:
                    78:a9:7a:5b:99:17:49:7c:68:09:75:96:a5:d1:2e:
                    f4:b9:79:ec:ae:b6:42:26:ae:a6:de:6f:23:fe:5c:
                    c5:3f:47:2d:bb:df:6c:7f:4d:ed:4f:86:f1:6b:d5:
                    33:63:d3:38:e8:a7:2e:ea:bc:2e:59:07:fd:ee:1d:
                    00:ce:3c:7f:8b:65:65:9e:09:28:2b:5c:2f:29:84:
                    4f:58:66:2b:f4:5b:03:bd:74:5a:84:9f:42:db:57:
                    51:89:53:20:c0:cb:23:92:c6:c8:58:3a:eb:82:03:
                    39:a9:16:8b:07:ed:fb:55:d0:00:3a:40:98:5e:c6:
                    f2:3c:bf:58:f1:16:b0:03:28:4b:0a:c9:0d:5b:53:
                    74:4c:41:38:06:ea:a2:92:f1:d7:fb:83:fb:3c:62:
                    1a:c0:bf:da:0f:52:51:f9:5a:f9:33:98:de:20:f5:
                    03:2d:92:05:df:18:d9:5c:0b:90:e9:eb:f3:98:99:
                    23:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:68:6F:10:B0:0E:C4:C3:3B:4F:37:9F:DA:77:A0:D5:3C:FD:B2:70
            X509v3 Authority Key Identifier:
                keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e2039383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.151.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         97:64:ba:b1:8c:f2:c3:09:6b:42:61:c1:77:6a:ac:66:65:30:
         54:65:e1:9d:c3:bd:c9:fb:a0:50:a4:de:19:e0:41:3a:e8:2b:
         f3:cb:4a:78:7c:a1:41:46:02:a4:1d:22:a8:d8:18:32:11:45:
         f4:14:4a:45:06:15:6d:31:8b:fd:17:4a:15:8b:d5:14:33:86:
         26:ea:ea:8d:0f:09:56:24:98:90:21:5b:ea:2c:54:67:a5:a0:
         c6:5e:36:9e:af:46:f5:e4:25:86:59:2c:ae:43:94:c5:95:c1:
         37:1e:e9:77:bf:0c:1d:fd:b1:fe:a2:58:64:34:d2:41:db:32:
         02:3d:74:56:79:b2:9d:e7:3b:29:bf:11:a7:b6:f5:17:3d:c0:
         10:4b:d7:7b:87:98:10:ee:1d:e2:f6:ae:eb:84:48:14:de:ff:
         62:aa:d3:9d:65:86:8a:95:08:de:89:5c:8e:64:9f:17:ac:f7:
         0f:d2:54:47:cc:8b:a1:a5:af:4b:e0:ac:0d:3f:73:83:30:f2:
         b9:1f:3d:f8:16:84:b8:74:8b:8e:f4:e6:c7:d5:7d:9a:3a:df:
         e3:38:2a:ca:35:e6:28:1d:97:13:06:ec:97:47:e0:8c:50:7f:
         53:25:f3:be:4c:12:44:f6:bf:92:34:8b:e3:ba:90:4f:c4:de:
         77:0f:27:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:33 2026 by rpki-client