Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e3132382e302f31372d3234203d3e20313532313739.roa
File:                     35392e3130372e3132382e302f31372d3234203d3e20313532313739.roa (raw, json)
Hash identifier:          hkk9oWbl6FVQqqsIdGXa8BURGmGbjnZzAMOiIIF5r00=
Subject key identifier:   CF:50:A9:B9:71:4C:04:C0:A0:C9:39:69:64:20:6C:56:5C:A6:C3:D8
Certificate issuer:       /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial:       7005D50A352545AA2C45E09E13AC7675A45E100E
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e3132382e302f31372d3234203d3e20313532313739.roa
Signing time:             Wed 27 May 2026 03:23:24 +0000
ROA not before:           Wed 27 May 2026 03:18:24 +0000
ROA not after:            Wed 26 May 2027 03:23:24 +0000
asID:                     152179
IP address blocks:        59.107.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:38:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:05:d5:0a:35:25:45:aa:2c:45:e0:9e:13:ac:76:75:a4:5e:10:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
        Validity
            Not Before: May 27 03:18:24 2026 GMT
            Not After : May 26 03:23:24 2027 GMT
        Subject: CN=CF50A9B9714C04C0A0C9396964206C565CA6C3D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:67:68:66:d5:23:be:fb:fc:e1:23:d1:ee:1b:
                    a5:4f:bf:cf:f8:13:08:4a:92:4a:db:29:12:dd:ea:
                    14:24:25:fe:bd:95:d5:53:af:c4:14:87:bc:ce:ff:
                    4b:4e:34:2b:e1:07:3f:bd:06:ec:79:49:00:8d:8e:
                    36:0c:6a:aa:f2:2f:fe:e9:36:b5:85:6c:b3:c0:a6:
                    d7:85:eb:43:ba:99:a0:b5:da:bf:ff:d3:2a:f2:18:
                    77:ba:09:55:3c:00:d3:b2:be:f6:54:20:80:47:1f:
                    9a:91:1f:96:97:ef:59:fc:bb:95:29:37:e8:b3:9d:
                    21:7b:2b:c1:3e:2a:86:e2:43:ab:39:63:b6:b6:34:
                    99:2f:8c:7c:06:fa:18:f8:9b:96:0c:19:95:8b:8c:
                    b9:e1:06:42:80:c0:29:6c:24:a4:6d:b1:25:8e:76:
                    11:1f:6b:be:29:c2:74:84:08:aa:39:ac:f2:3c:a1:
                    39:6c:15:fb:94:e3:6f:49:d3:5a:57:17:61:ee:39:
                    e5:65:2d:06:fe:0a:b8:27:96:78:a5:66:64:ca:4b:
                    ca:15:95:2c:11:e0:34:cc:c9:e7:6f:7d:bc:94:4d:
                    67:5d:28:4b:30:41:82:59:ce:bb:00:2f:70:a2:07:
                    cb:c1:f2:94:22:6f:66:1e:a5:20:52:b5:d7:af:d8:
                    29:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:50:A9:B9:71:4C:04:C0:A0:C9:39:69:64:20:6C:56:5C:A6:C3:D8
            X509v3 Authority Key Identifier:
                keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e3132382e302f31372d3234203d3e20313532313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.107.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         37:34:d2:fc:c4:cc:a9:5b:89:3b:c5:64:a6:1a:24:d2:6f:6a:
         e5:c9:e1:be:27:ca:1e:13:6a:59:74:12:0f:c9:bf:68:4c:98:
         56:85:88:71:8d:1d:56:1d:17:38:9c:86:af:9f:24:cc:ba:b5:
         ad:83:58:8c:a1:8e:f5:b3:39:20:96:d3:e1:7e:73:4c:8a:05:
         bb:07:29:be:e8:be:b2:00:bc:9c:49:76:43:f3:e3:05:c9:74:
         37:cb:00:c8:6e:1f:11:f9:e5:b8:5f:8f:8f:f9:64:39:f2:66:
         e3:1f:2e:fb:c4:6e:fe:e4:44:79:10:b9:1e:de:78:1c:50:c7:
         e6:f5:2e:2b:00:de:92:b1:e6:60:47:89:cd:17:45:41:91:49:
         b5:10:85:d2:15:22:37:81:c4:1e:a3:49:91:29:38:86:b8:20:
         e6:3a:40:71:0a:a2:a7:90:62:60:28:12:61:7b:1e:71:d8:6c:
         af:92:1c:d4:66:0e:0b:70:0d:a5:9f:1b:fc:8d:76:32:8d:de:
         66:d3:a2:6d:6d:8f:16:f5:7c:bb:79:b8:56:12:15:d4:c4:8b:
         b3:f8:70:a0:4b:96:17:7a:5e:9a:e5:5b:c5:97:3c:9b:2d:70:
         96:9c:c9:d5:19:9b:51:2b:80:cf:30:74:ca:25:c5:bd:14:51:
         21:7b:ab:c7
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUcAXVCjUlRaosReCeE6x2daReEA4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2
QkY0MjQzRDAeFw0yNjA1MjcwMzE4MjRaFw0yNzA1MjYwMzIzMjRaMDMxMTAvBgNV
BAMTKENGNTBBOUI5NzE0QzA0QzBBMEM5Mzk2OTY0MjA2QzU2NUNBNkMzRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Z2hm1SO++/zhI9HuG6VPv8/4
EwhKkkrbKRLd6hQkJf69ldVTr8QUh7zO/0tONCvhBz+9Bux5SQCNjjYMaqryL/7p
NrWFbLPApteF60O6maC12r//0yryGHe6CVU8ANOyvvZUIIBHH5qRH5aX71n8u5Up
N+iznSF7K8E+KobiQ6s5Y7a2NJkvjHwG+hj4m5YMGZWLjLnhBkKAwClsJKRtsSWO
dhEfa74pwnSECKo5rPI8oTlsFfuU429J01pXF2HuOeVlLQb+CrgnlnilZmTKS8oV
lSwR4DTMyedvfbyUTWddKEswQYJZzrsAL3CiB8vB8pQib2YepSBStdev2Cl7AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUz1CpuXFMBMCgyTlpZCBsVlymw9gwHwYDVR0j
BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD
QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc4MTI4NjcvMC8zNTM5MmUzMTMw
MzcyZTMxMzIzODJlMzAyZjMxMzcyZDMyMzQyMDNkM2UyMDMxMzUzMjMxMzczOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBztrgDANBgkqhkiG9w0BAQsFAAOCAQEANzTS/MTMqVuJO8Vkphok
0m9q5cnhvifKHhNqWXQSD8m/aEyYVoWIcY0dVh0XOJyGr58kzLq1rYNYjKGO9bM5
IJbT4X5zTIoFuwcpvui+sgC8nEl2Q/PjBcl0N8sAyG4fEfnluF+Pj/lkOfJm4x8u
+8Ru/uREeRC5Ht54HFDH5vUuKwDekrHmYEeJzRdFQZFJtRCF0hUiN4HEHqNJkSk4
hrgg5jpAcQqip5BiYCgSYXsecdhsr5Ic1GYOC3ANpZ8b/I12Mo3eZtOibW2PFvV8
u3m4VhIV1MSLs/hwoEuWF3pemuVbxZc8my1wlpzJ1RmbUSuAzzB0yiXFvRRRIXur
xw==
-----END CERTIFICATE-----
Generated at Fri May 29 23:54:00 2026 by rpki-client