Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e3132382e302f31372d3234203d3e203138383131.roa
File:                     35392e3130372e3132382e302f31372d3234203d3e203138383131.roa (raw, json)
Hash identifier:          4zMPAct8WGPg727Z2TIdQiAJgkZ2f9qQiSSnTYu9shw=
Subject key identifier:   A6:C8:60:B2:FC:A6:A1:FC:E4:6E:5E:D4:E6:3B:CE:D6:77:D1:0B:99
Certificate issuer:       /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial:       3C21350E9EA808B029A73CD25B3B8A075A7CE8B7
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e3132382e302f31372d3234203d3e203138383131.roa
Signing time:             Tue 26 May 2026 02:19:03 +0000
ROA not before:           Tue 26 May 2026 02:14:03 +0000
ROA not after:            Tue 25 May 2027 02:19:03 +0000
asID:                     18811
IP address blocks:        59.107.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:38:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:21:35:0e:9e:a8:08:b0:29:a7:3c:d2:5b:3b:8a:07:5a:7c:e8:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
        Validity
            Not Before: May 26 02:14:03 2026 GMT
            Not After : May 25 02:19:03 2027 GMT
        Subject: CN=A6C860B2FCA6A1FCE46E5ED4E63BCED677D10B99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:a2:2d:50:8a:9c:b1:c3:4e:d9:82:c9:27:
                    81:86:1d:d9:cc:4e:6a:0f:4c:22:80:57:a4:5f:24:
                    ea:be:a1:2f:76:bc:bf:a4:86:0f:93:22:2a:84:e4:
                    71:59:4f:f3:a7:1c:8e:c8:b8:3a:e4:ed:56:14:d3:
                    7e:5d:a5:61:49:74:99:63:4b:a8:3b:01:6c:a1:83:
                    3b:21:4a:7c:c4:cd:7b:e7:39:06:65:dd:f3:5e:61:
                    f0:24:78:3b:0e:e7:e5:8a:a3:64:f6:51:02:47:a8:
                    7d:95:6b:33:5e:2e:75:60:3b:1a:a9:1d:f1:1a:6d:
                    f1:e3:df:6d:d9:7e:6c:93:dc:e9:33:3f:a5:6b:02:
                    ad:e2:c8:b7:70:5a:68:00:7f:05:6a:d8:04:4a:68:
                    27:94:b3:97:9b:e2:ca:ae:27:b3:62:99:de:7f:95:
                    58:9a:86:61:18:c8:f5:14:88:b2:50:2a:2f:2d:01:
                    f7:e0:5d:22:a5:7c:7e:79:51:77:97:93:4b:d1:05:
                    80:1c:cc:8b:6f:67:cd:f1:d0:e8:55:c1:d2:de:c3:
                    c3:4e:5f:46:98:0d:ff:e0:59:16:fb:14:42:03:52:
                    80:32:c8:ec:9b:ac:1c:55:ad:ad:3b:65:1f:21:16:
                    f5:de:6e:05:be:7b:c3:a6:3f:46:f2:fe:9b:8f:15:
                    57:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C8:60:B2:FC:A6:A1:FC:E4:6E:5E:D4:E6:3B:CE:D6:77:D1:0B:99
            X509v3 Authority Key Identifier:
                keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e3132382e302f31372d3234203d3e203138383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.107.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         59:ac:cc:f4:09:40:9f:75:d0:17:9a:33:65:92:d3:d0:6b:90:
         29:cc:e4:03:44:88:f5:68:31:93:48:9b:77:c6:13:82:0e:0d:
         f3:60:e0:b3:15:d2:44:41:b2:f7:2f:76:a3:25:5f:7f:b9:a4:
         69:fb:f8:6b:d8:22:9b:e8:72:73:14:8f:d4:87:ec:0a:6f:7d:
         68:32:1c:07:a1:49:78:38:b9:da:59:0b:3e:e5:81:c8:af:e2:
         45:d7:aa:1e:28:00:c8:97:8e:b6:0c:05:a8:55:98:5b:f6:88:
         cc:42:4c:6f:bc:33:75:42:6b:68:a6:1e:80:93:cf:16:18:22:
         e0:17:fd:1c:2e:35:77:23:75:96:57:af:f3:03:f8:42:f9:5e:
         e4:bd:95:ec:c9:2e:3e:f7:0a:18:6c:22:70:99:fc:a3:a1:d6:
         9f:31:17:dc:86:5e:80:04:95:a2:70:b6:c1:9b:71:dd:64:d1:
         2b:87:0e:2c:f6:4e:99:26:88:0b:de:d1:d5:07:63:fd:ee:69:
         93:f1:d4:f3:6e:67:29:66:da:e5:cf:2c:1d:5d:cf:9c:d9:2c:
         74:ee:60:f1:6f:36:69:cf:08:86:d9:d8:f2:e7:c7:15:82:99:
         1c:52:6f:5c:9e:48:e6:34:c5:31:c8:d7:41:00:bd:bf:a6:50:
         8c:08:d7:5d
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUPCE1Dp6oCLAppzzSWzuKB1p86LcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2
QkY0MjQzRDAeFw0yNjA1MjYwMjE0MDNaFw0yNzA1MjUwMjE5MDNaMDMxMTAvBgNV
BAMTKEE2Qzg2MEIyRkNBNkExRkNFNDZFNUVENEU2M0JDRUQ2NzdEMTBCOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5V6ItUIqcscNO2YLJJ4GGHdnM
TmoPTCKAV6RfJOq+oS92vL+khg+TIiqE5HFZT/OnHI7IuDrk7VYU035dpWFJdJlj
S6g7AWyhgzshSnzEzXvnOQZl3fNeYfAkeDsO5+WKo2T2UQJHqH2VazNeLnVgOxqp
HfEabfHj323ZfmyT3OkzP6VrAq3iyLdwWmgAfwVq2ARKaCeUs5eb4squJ7Nimd5/
lViahmEYyPUUiLJQKi8tAffgXSKlfH55UXeXk0vRBYAczItvZ83x0OhVwdLew8NO
X0aYDf/gWRb7FEIDUoAyyOybrBxVra07ZR8hFvXebgW+e8OmP0by/puPFVcTAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUpshgsvymofzkbl7U5jvO1nfRC5kwHwYDVR0j
BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD
QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0NzgxMjg2Ny8wLzM1MzkyZTMxMzAz
NzJlMzEzMjM4MmUzMDJmMzEzNzJkMzIzNDIwM2QzZTIwMzEzODM4MzEzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBztrgDANBgkqhkiG9w0BAQsFAAOCAQEAWazM9AlAn3XQF5ozZZLT0GuQ
KczkA0SI9Wgxk0ibd8YTgg4N82DgsxXSREGy9y92oyVff7mkafv4a9gim+hycxSP
1IfsCm99aDIcB6FJeDi52lkLPuWByK/iRdeqHigAyJeOtgwFqFWYW/aIzEJMb7wz
dUJraKYegJPPFhgi4Bf9HC41dyN1llev8wP4Qvle5L2V7MkuPvcKGGwicJn8o6HW
nzEX3IZegASVonC2wZtx3WTRK4cOLPZOmSaIC97R1Qdj/e5pk/HU825nKWba5c8s
HV3PnNksdO5g8W82ac8IhtnY8ufHFYKZHFJvXJ5I5jTFMcjXQQC9v6ZQjAjXXQ==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:59 2026 by rpki-client