Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e2039333034.roa
File:                     35382e36362e302e302f31362d3234203d3e2039333034.roa (raw, json)
Hash identifier:          7BPsPVKRjB3xCyJzXwZNrqGfnUXXQEp6ORVFfuVBuuA=
Subject key identifier:   90:8B:8F:A5:62:31:89:EC:DA:65:00:46:B2:2F:6B:FD:01:8B:00:9D
Certificate issuer:       /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial:       29AA7F958256EBB001753FEAA970A62817CF65DB
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e2039333034.roa
Signing time:             Tue 26 May 2026 02:19:04 +0000
ROA not before:           Tue 26 May 2026 02:14:04 +0000
ROA not after:            Tue 25 May 2027 02:19:04 +0000
asID:                     9304
IP address blocks:        58.66.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:38:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:aa:7f:95:82:56:eb:b0:01:75:3f:ea:a9:70:a6:28:17:cf:65:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
        Validity
            Not Before: May 26 02:14:04 2026 GMT
            Not After : May 25 02:19:04 2027 GMT
        Subject: CN=908B8FA5623189ECDA650046B22F6BFD018B009D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b1:30:29:32:6c:c6:95:ea:43:b3:8f:36:52:
                    4f:24:16:0e:5c:65:ed:68:b6:9c:58:ef:ba:50:af:
                    87:f7:ea:e5:9f:ad:94:f0:8a:c2:07:aa:e5:6a:69:
                    03:b2:86:50:95:3d:fb:a0:43:fe:b9:d9:da:e4:2b:
                    db:08:70:58:b1:0d:c2:bf:ad:78:65:82:a4:f8:62:
                    af:4d:41:a7:d1:49:29:a6:4a:e1:c8:4c:ba:f1:77:
                    25:1b:1d:9b:c5:36:1e:47:bf:a0:a4:d1:23:68:2b:
                    33:8d:1e:5f:f7:db:93:2e:bd:5d:20:15:2c:27:05:
                    97:e5:be:e2:e7:d7:54:bc:d1:0c:e4:19:23:42:e5:
                    f0:5b:bd:f0:ab:fd:b7:26:e7:9e:29:fe:97:29:40:
                    db:0f:ce:55:1e:94:e2:35:d8:65:6b:16:5c:0c:73:
                    7a:82:e5:0a:72:5c:ca:55:f6:bc:7e:30:45:76:69:
                    e5:ef:e2:a2:ee:a6:1e:70:34:66:0d:13:b9:b0:72:
                    a0:f7:63:90:e3:f7:b5:fc:00:40:5c:43:03:a7:8f:
                    5c:70:37:47:b0:08:dc:e0:8b:9c:e6:3b:28:67:b4:
                    e2:db:8e:e7:ab:47:cd:5c:5f:a0:7d:9e:69:bc:6d:
                    f9:f2:23:a3:26:ae:c3:67:95:13:6b:c5:c1:a1:40:
                    f5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8B:8F:A5:62:31:89:EC:DA:65:00:46:B2:2F:6B:FD:01:8B:00:9D
            X509v3 Authority Key Identifier:
                keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.66.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a9:22:ae:59:9e:55:80:ea:aa:4c:86:6a:d5:3b:08:a1:04:4b:
         58:d1:3a:37:98:91:b4:88:8b:ca:fe:72:01:eb:80:51:78:82:
         1e:47:4e:ff:90:20:fe:59:19:e2:75:1a:c4:68:ff:a5:84:79:
         31:3c:71:34:01:9e:ab:3a:ae:11:7b:b3:ab:b8:ef:23:31:4d:
         e1:53:12:8c:83:a3:d7:58:d0:d5:82:e0:30:fc:37:bf:44:4b:
         ac:5f:2f:e4:31:4e:6d:4c:f3:7f:90:ef:a2:4e:3b:27:93:44:
         c1:f6:1c:b1:b4:4e:34:95:32:d3:63:2f:06:22:4c:be:fe:cd:
         f5:7b:f3:71:28:3f:d3:b1:98:cc:32:60:9a:cc:17:78:b0:08:
         21:1f:7a:56:19:80:62:f1:2c:8f:08:55:06:60:70:58:db:85:
         1d:44:d1:68:27:58:cd:43:77:63:04:3e:23:3e:d7:06:2f:a2:
         38:2d:2d:06:c0:e6:73:de:d6:31:a2:ee:39:f8:c5:d2:2c:2d:
         82:16:34:9e:af:94:56:f5:2f:c6:a8:6f:57:58:e9:b3:b2:9d:
         00:e0:6f:08:da:76:d7:e1:d1:21:ce:50:c4:cb:e2:52:7b:30:
         5b:ca:dc:ca:bd:8a:5c:f1:be:97:1c:72:78:a4:56:1c:6b:98:
         18:1c:32:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:55:52 2026 by rpki-client