Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097055396041850881/0/35392e3135332e33322e302f32322d3232203d3e203539303239.roa
File:                     35392e3135332e33322e302f32322d3232203d3e203539303239.roa (raw, json)
Hash identifier:          Z7syMJ30P81OjYykDejBsyFrMw44QIx8lXUoBiNf0kY=
Subject key identifier:   2B:DA:06:FA:6D:1A:3F:1E:1A:FB:39:CC:1E:7B:3D:40:C0:E1:C3:EC
Certificate issuer:       /CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
Certificate serial:       6B8DD71166FAE6D1833DC1674C3DB67C9636655D
Authority key identifier: 78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/35392e3135332e33322e302f32322d3232203d3e203539303239.roa
Signing time:             Thu 16 Apr 2026 07:14:30 +0000
ROA not before:           Thu 16 Apr 2026 07:09:30 +0000
ROA not after:            Thu 15 Apr 2027 07:14:30 +0000
asID:                     59029
IP address blocks:        59.153.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:8d:d7:11:66:fa:e6:d1:83:3d:c1:67:4c:3d:b6:7c:96:36:65:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
        Validity
            Not Before: Apr 16 07:09:30 2026 GMT
            Not After : Apr 15 07:14:30 2027 GMT
        Subject: CN=2BDA06FA6D1A3F1E1AFB39CC1E7B3D40C0E1C3EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:09:e3:20:28:83:cb:98:f7:bb:6d:3c:79:aa:
                    29:70:a1:c6:68:41:99:97:8a:a8:87:23:98:91:69:
                    d5:81:32:6d:45:49:67:f4:14:f3:13:bc:73:10:77:
                    6a:ac:1b:27:4f:b2:70:9e:a1:42:71:bd:c7:57:4d:
                    44:bf:a2:6e:ad:c4:52:86:37:1c:bb:d5:49:6b:d2:
                    a2:16:14:f3:b7:42:20:94:31:13:f0:c0:df:de:69:
                    8f:6a:9e:38:79:33:e8:aa:f9:95:eb:73:e9:ae:74:
                    0d:d5:08:95:ad:65:67:7d:e4:f2:41:4f:89:9b:e1:
                    f2:dc:06:b2:26:82:25:06:88:05:7a:b9:99:12:26:
                    81:1a:59:5b:79:0a:99:20:75:b8:4c:25:64:58:d7:
                    1d:10:95:88:98:74:ad:2b:d6:fb:a3:a7:a7:cd:47:
                    45:5f:84:01:ef:2b:1f:bc:26:d9:d5:97:88:c6:6b:
                    0f:80:87:f4:22:e8:c7:91:55:d7:a1:6f:19:64:dc:
                    5a:36:e1:58:90:10:02:83:92:27:9f:de:ab:60:4b:
                    fa:5a:22:5f:d8:e7:11:4f:87:19:e0:a7:98:f5:21:
                    89:84:ff:c3:dd:55:6f:b5:3c:4c:de:f8:3f:44:a9:
                    b3:4c:6e:1d:a3:c5:60:6c:7a:e4:c5:03:ee:f0:56:
                    bf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DA:06:FA:6D:1A:3F:1E:1A:FB:39:CC:1E:7B:3D:40:C0:E1:C3:EC
            X509v3 Authority Key Identifier:
                keyid:78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/35392e3135332e33322e302f32322d3232203d3e203539303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.153.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:12:5c:03:c2:f1:1f:9b:c7:44:07:74:b9:86:44:a5:28:a1:
         29:e8:e3:83:43:12:b4:bc:85:ce:d7:2b:f7:54:76:0a:36:fc:
         60:30:d7:ab:08:7c:7f:48:d1:93:e2:e7:53:f4:53:c4:a9:17:
         ed:34:e1:16:83:d7:39:30:a9:6c:be:1b:50:d1:5c:6b:6f:b6:
         43:3a:7b:73:1d:fd:d4:6e:3e:af:e9:95:3f:08:11:17:78:45:
         71:65:40:84:1b:cb:4b:ac:a6:15:2b:87:30:5e:c8:b1:2b:5d:
         98:64:9a:12:f6:c3:34:bc:f9:81:94:d7:ba:58:c0:a8:76:a0:
         90:3f:6a:eb:5d:fe:03:6a:79:c5:da:35:d6:e5:bd:e3:4e:00:
         db:89:20:d9:b1:e1:6d:32:9b:51:6c:8a:b8:11:53:55:c8:eb:
         55:18:9e:41:41:f1:36:d5:38:6b:91:f0:db:c8:c3:93:dd:81:
         99:4b:96:bf:40:34:59:d1:3e:f1:e4:bb:2c:0f:f1:15:2e:48:
         aa:9e:9a:c9:02:bb:87:86:6d:92:e7:1d:4c:fb:5e:d4:96:31:
         24:eb:86:dc:5c:80:6b:0d:63:fa:8b:03:af:1f:a4:78:70:82:
         db:11:fd:4f:43:03:09:df:b4:33:93:2d:1c:ef:82:41:77:26:
         ec:e7:d1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:43:19 2026 by rpki-client