Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e20313438393936.roa
File:                     35382e36362e302e302f31362d3234203d3e20313438393936.roa (raw, json)
Hash identifier:          ByUbifYUrlZFWGCspvUTvFXjFpkEedwApJ/7PaqRoT8=
Subject key identifier:   B0:75:4F:00:35:D2:2B:58:95:18:6F:16:09:70:9A:7B:00:17:05:F4
Certificate issuer:       /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial:       40AFDFFB321B3C5106943CBC301C051AA5FC33B7
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e20313438393936.roa
Signing time:             Sat 12 Sep 2026 16:21:02 +0000
ROA not before:           Sat 12 Sep 2026 16:16:02 +0000
ROA not after:            Sat 11 Sep 2027 16:21:02 +0000
asID:                     148996
IP address blocks:        58.66.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Sep 2026 09:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:af:df:fb:32:1b:3c:51:06:94:3c:bc:30:1c:05:1a:a5:fc:33:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
        Validity
            Not Before: Sep 12 16:16:02 2026 GMT
            Not After : Sep 11 16:21:02 2027 GMT
        Subject: CN=B0754F0035D22B5895186F1609709A7B001705F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9d:a3:23:77:39:e0:ec:7e:5c:89:ea:a9:bc:
                    c1:d0:ea:32:ca:fa:0f:db:5f:60:c8:3e:b1:a0:7b:
                    97:7c:b6:63:7c:8a:d3:4f:08:6b:c9:77:2d:05:de:
                    2e:32:07:2e:2c:75:28:8e:77:ca:45:7c:9c:d5:3c:
                    2a:bf:35:43:36:86:cb:45:4d:db:77:0d:e4:94:11:
                    15:1c:17:8b:53:be:2b:77:36:11:87:ab:ee:78:43:
                    2a:b6:c3:47:03:b9:e4:31:f6:68:ba:6a:b1:23:e2:
                    4e:31:a6:f7:2e:96:db:f1:ba:9b:59:98:ff:20:17:
                    88:cb:b7:9a:d5:43:9a:15:77:87:47:90:60:c3:0b:
                    0a:ab:75:4a:8b:52:0b:21:c6:dd:60:11:95:aa:dc:
                    f6:c5:e0:e1:37:ef:0b:63:3a:bf:60:c9:77:72:24:
                    94:05:0e:99:52:98:a7:22:39:6f:6e:d5:dc:16:2e:
                    7a:9d:8a:e5:2c:7f:05:2d:af:51:cd:29:4a:a6:ef:
                    2c:48:24:b4:0f:c2:73:0f:06:a3:1c:fd:b5:3b:83:
                    80:5e:1e:d4:6f:d1:0a:1c:88:a6:a6:85:84:b1:60:
                    49:9d:9b:d8:4d:34:7a:b2:e7:02:5d:90:db:a7:6b:
                    05:47:ec:5b:75:15:67:72:b1:d9:19:61:8e:c0:a2:
                    51:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:75:4F:00:35:D2:2B:58:95:18:6F:16:09:70:9A:7B:00:17:05:F4
            X509v3 Authority Key Identifier:
                keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e20313438393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.66.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         00:fc:dc:5c:f2:df:0e:55:54:15:fb:49:a9:04:b6:dd:50:d3:
         e6:b6:e4:8c:8a:9c:68:0e:5c:39:ab:4b:05:e9:c2:91:91:d1:
         b4:92:3f:ad:a9:c7:06:c9:ac:79:54:84:9c:46:e3:d4:58:1c:
         a4:68:ab:48:81:db:af:7c:a9:7e:94:33:cd:ae:54:bb:1e:26:
         4b:05:97:73:9d:93:b0:b8:12:43:7b:3d:95:fa:4d:46:30:1b:
         ab:f1:5f:d4:ed:6a:6b:dc:12:d5:62:91:66:81:b3:6a:52:70:
         cf:2d:91:e6:75:3c:b4:22:4c:c3:fa:98:d8:dc:98:2a:64:73:
         28:e1:ba:34:f7:b3:44:ec:98:3c:79:70:95:c9:30:70:16:69:
         6b:06:5c:75:f4:cd:e4:2f:02:40:e0:82:ee:d9:d1:ec:32:04:
         23:72:eb:31:75:0c:89:65:ca:4d:ac:f9:da:6c:16:22:be:34:
         3c:18:bb:46:52:9e:d3:c1:9a:65:24:13:c4:49:72:95:21:50:
         cc:40:aa:59:9c:55:30:41:41:62:b5:64:79:89:14:bf:54:3a:
         c5:e5:ad:b0:6d:75:4a:6f:c6:99:bf:05:25:54:5a:da:42:f1:
         66:25:f5:f0:4d:bf:f9:5b:ba:42:3b:2a:02:b8:ea:f8:f9:a0:
         89:ea:20:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 09:32:45 2026 by rpki-client