Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092508673/0/35392e3135332e36342e302f32322d3232203d3e2030.roa
File:                     35392e3135332e36342e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          gYggE55VWRSwMIbG1Cq3gSFhE0CBxFxT1X9h0NKFL8I=
Subject key identifier:   C6:72:49:8B:DF:27:9D:C0:B0:71:1A:2E:28:69:07:64:0B:65:13:4B
Certificate issuer:       /CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Certificate serial:       0641EBF1B027B4F4352DB4D75CAA5FE01F7F151C
Authority key identifier: D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/35392e3135332e36342e302f32322d3232203d3e2030.roa
Signing time:             Thu 04 Jun 2026 08:56:52 +0000
ROA not before:           Thu 04 Jun 2026 08:51:52 +0000
ROA not after:            Thu 03 Jun 2027 08:56:52 +0000
asID:                     0
IP address blocks:        59.153.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 23:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:41:eb:f1:b0:27:b4:f4:35:2d:b4:d7:5c:aa:5f:e0:1f:7f:15:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D569CE49ED940955318F718AEACD6D410BFF66B3
        Validity
            Not Before: Jun  4 08:51:52 2026 GMT
            Not After : Jun  3 08:56:52 2027 GMT
        Subject: CN=C672498BDF279DC0B0711A2E286907640B65134B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bc:20:79:a0:f5:60:3b:d5:ed:66:f9:4e:95:
                    8b:4c:2b:61:8d:78:89:03:eb:9b:2b:44:33:67:f2:
                    45:cb:0f:c7:5a:9f:1f:84:5a:e4:e1:0d:e2:56:f6:
                    d5:31:43:3a:5d:5c:d1:20:0a:56:ff:25:48:69:bb:
                    e2:11:b2:21:70:60:e6:12:f0:88:ac:5f:7e:2e:9e:
                    9d:b8:84:fd:16:3d:bf:29:02:43:f0:b1:40:76:f6:
                    40:98:9e:12:60:dc:7b:0f:1b:ee:82:84:80:f2:f6:
                    86:f8:84:89:35:29:4c:4f:f7:63:e1:e9:39:41:97:
                    04:89:46:67:0d:b4:89:97:c3:e4:0f:9b:29:9e:80:
                    9d:c4:34:6f:3f:15:f2:da:8a:c2:ab:b8:c1:23:37:
                    d0:43:51:0c:e2:1b:b8:68:e6:46:11:15:9e:30:d4:
                    36:29:a6:e4:35:53:5c:e9:82:13:cd:83:2f:47:b5:
                    8c:13:e7:83:23:96:57:c3:c2:a5:92:7b:dc:ff:d5:
                    8f:89:50:9f:29:80:d0:6f:57:7c:31:12:21:43:1d:
                    c2:d4:c0:65:58:28:c1:c9:90:b8:ab:ce:1b:25:b0:
                    7e:38:e5:a2:a5:c4:b3:d4:5b:e4:98:bb:2d:5a:fe:
                    14:54:b9:34:35:19:6d:4f:4f:b3:c7:e3:02:1f:77:
                    16:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:72:49:8B:DF:27:9D:C0:B0:71:1A:2E:28:69:07:64:0B:65:13:4B
            X509v3 Authority Key Identifier:
                keyid:D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/35392e3135332e36342e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.153.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:f9:cd:cf:84:97:9e:1b:2d:b8:9f:90:a8:8b:50:51:1a:d8:
         a1:10:d5:84:d4:77:be:1c:52:7d:89:f4:79:da:59:77:c5:5c:
         e4:39:6a:30:45:ec:13:e2:05:3c:db:a8:37:93:99:2c:dd:78:
         20:9b:b4:56:6e:bc:a1:58:61:63:bb:9d:b9:bf:0f:c6:e7:fb:
         a3:93:9f:b7:c3:de:84:49:da:4a:b4:d5:43:e8:1f:74:26:78:
         22:10:e5:37:a4:24:d3:2f:18:18:d7:bd:11:77:62:8e:7c:2d:
         31:18:47:af:90:27:87:b0:52:92:07:86:48:ea:ea:05:52:e8:
         d6:47:e4:df:3c:a7:7b:a7:3b:6c:0f:14:11:58:34:3c:03:6e:
         b2:7a:58:25:02:58:d4:8b:bf:22:18:e1:82:b5:48:11:ae:60:
         64:f5:fe:92:17:40:cb:82:82:34:88:36:ca:e0:d3:f7:e8:73:
         9f:e8:50:bf:99:11:67:09:41:12:ba:d0:3c:1d:c5:de:e3:bf:
         07:5c:e0:0d:c3:10:52:3e:0f:63:3f:06:ac:0f:32:fc:aa:de:
         1d:43:3d:73:98:00:96:98:79:f0:5d:2a:8e:3c:d1:fb:21:bd:
         a1:6e:89:b1:d7:b0:4c:f3:32:be:a1:6d:fe:4b:1b:2d:97:ca:
         a7:08:45:aa
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUBkHr8bAntPQ1LbTXXKpf4B9/FRwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU2OUNFNDlFRDk0MDk1NTMxOEY3MThBRUFDRDZENDEw
QkZGNjZCMzAeFw0yNjA2MDQwODUxNTJaFw0yNzA2MDMwODU2NTJaMDMxMTAvBgNV
BAMTKEM2NzI0OThCREYyNzlEQzBCMDcxMUEyRTI4NjkwNzY0MEI2NTEzNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTvCB5oPVgO9XtZvlOlYtMK2GN
eIkD65srRDNn8kXLD8danx+EWuThDeJW9tUxQzpdXNEgClb/JUhpu+IRsiFwYOYS
8IisX34unp24hP0WPb8pAkPwsUB29kCYnhJg3HsPG+6ChIDy9ob4hIk1KUxP92Ph
6TlBlwSJRmcNtImXw+QPmymegJ3ENG8/FfLaisKruMEjN9BDUQziG7ho5kYRFZ4w
1DYppuQ1U1zpghPNgy9HtYwT54MjllfDwqWSe9z/1Y+JUJ8pgNBvV3wxEiFDHcLU
wGVYKMHJkLirzhslsH445aKlxLPUW+SYuy1a/hRUuTQ1GW1PT7PH4wIfdxatAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUxnJJi98nncCwcRouKGkHZAtlE0swHwYDVR0j
BBgwFoAU1WnOSe2UCVUxj3GK6s1tQQv/ZrMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjMzMDg1OTA5MjUwODY3My8wL0Q1NjlDRTQ5RUQ5NDA5NTUzMThGNzE4QUVBQ0Q2
RDQxMEJGRjY2QjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRDU2OUNFNDlFRDk0MDk1NTMxOEY3MThBRUFDRDZENDEwQkZGNjZCMy5jZXIw
gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2MzMwODU5MDkyNTA4NjczLzAvMzUzOTJlMzEzNTMz
MmUzNjM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI7mUAw
DQYJKoZIhvcNAQELBQADggEBADn5zc+El54bLbifkKiLUFEa2KEQ1YTUd74cUn2J
9HnaWXfFXOQ5ajBF7BPiBTzbqDeTmSzdeCCbtFZuvKFYYWO7nbm/D8bn+6OTn7fD
3oRJ2kq01UPoH3QmeCIQ5TekJNMvGBjXvRF3Yo58LTEYR6+QJ4ewUpIHhkjq6gVS
6NZH5N88p3unO2wPFBFYNDwDbrJ6WCUCWNSLvyIY4YK1SBGuYGT1/pIXQMuCgjSI
Nsrg0/foc5/oUL+ZEWcJQRK60Dwdxd7jvwdc4A3DEFI+D2M/BqwPMvyq3h1DPXOY
AJaYefBdKo480fshvaFuibHXsEzzMr6hbf5LGy2XyqcIRao=
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:07:05 2026 by rpki-client