Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e3132382e302f31372d3234203d3e2036303937.roa
File:                     35392e3130372e3132382e302f31372d3234203d3e2036303937.roa (raw, json)
Hash identifier:          R2fpMoK+ON1nsO9HvWC0lROfHrH91TX6RVMkrYuYEUk=
Subject key identifier:   85:57:5B:AF:18:C1:5A:EC:EF:13:96:C0:CC:22:47:90:FE:8C:D9:8E
Certificate issuer:       /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial:       53A56FC075E29427930360BE74FB114AFF74C9D5
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e3132382e302f31372d3234203d3e2036303937.roa
Signing time:             Tue 26 May 2026 02:19:04 +0000
ROA not before:           Tue 26 May 2026 02:14:04 +0000
ROA not after:            Tue 25 May 2027 02:19:04 +0000
asID:                     6097
IP address blocks:        59.107.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:38:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a5:6f:c0:75:e2:94:27:93:03:60:be:74:fb:11:4a:ff:74:c9:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
        Validity
            Not Before: May 26 02:14:04 2026 GMT
            Not After : May 25 02:19:04 2027 GMT
        Subject: CN=85575BAF18C15AECEF1396C0CC224790FE8CD98E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1a:17:7a:db:2a:61:1c:7a:8f:84:15:69:c6:
                    1d:c9:9f:10:bd:f8:94:de:e3:7f:c7:60:ef:c1:3a:
                    2d:16:df:15:cf:8b:9d:da:f3:a1:02:2d:dd:a0:7a:
                    a5:e0:0b:57:d2:48:4b:51:f9:94:0e:a4:05:9f:53:
                    12:73:1c:7b:67:fe:d8:89:06:00:73:88:f8:00:ee:
                    da:53:32:05:6c:46:dc:6c:3c:cd:0e:70:ac:bf:f4:
                    a8:86:e6:69:64:4a:36:ad:c6:32:d5:64:25:11:98:
                    c1:65:b7:36:2d:13:07:cf:ee:51:89:24:43:9e:03:
                    c7:ba:d5:32:7e:af:8c:2b:33:90:00:c1:86:4c:e2:
                    f5:63:84:82:88:d0:cf:8a:e3:f1:16:25:c3:08:67:
                    5f:72:63:f1:e3:fb:93:e8:63:f5:21:a8:3b:ae:c2:
                    79:53:11:9b:a4:20:59:20:9f:59:63:96:6d:25:53:
                    ee:ef:62:0b:19:dc:c9:5f:a3:fc:6a:af:3b:f7:78:
                    35:12:12:ea:2f:f8:53:b5:70:d7:c8:fc:a1:af:fb:
                    33:99:7d:c3:e4:4e:51:b6:26:f4:c6:20:05:27:10:
                    f3:dc:d4:58:d9:13:86:66:da:29:51:5d:97:5d:a6:
                    c8:54:db:50:a3:4d:79:e7:47:49:9b:75:31:01:a7:
                    7b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:57:5B:AF:18:C1:5A:EC:EF:13:96:C0:CC:22:47:90:FE:8C:D9:8E
            X509v3 Authority Key Identifier:
                keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e3132382e302f31372d3234203d3e2036303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.107.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         53:fb:ce:e0:85:bc:79:66:4d:d3:61:99:6a:5c:f3:12:3f:4b:
         20:58:1d:75:a6:b5:b4:13:f2:b9:02:5b:09:a4:d7:04:a0:36:
         77:32:93:f1:b7:5c:13:2d:d4:a0:1f:4e:cc:7c:ee:dc:20:9c:
         79:d6:b6:c5:d8:aa:54:5a:c3:b5:03:46:d6:3f:43:a5:90:de:
         2b:63:fd:c4:e6:38:b4:62:10:a9:c9:7d:2f:a6:b9:12:5f:c5:
         a6:53:02:04:73:a1:e8:67:3b:99:6c:51:f4:e8:3f:29:e3:82:
         4c:af:b0:27:35:99:64:3e:9d:99:c2:ee:ed:f8:1d:bb:35:51:
         c6:7b:06:6f:2b:65:e9:09:3a:a8:c7:60:e6:7d:8d:5a:bf:5f:
         a1:ff:65:50:2b:5e:f6:48:16:3a:f6:3f:0f:d2:e3:97:bb:2e:
         20:c3:13:74:62:92:04:d2:ac:b8:f6:42:b5:28:f6:df:96:66:
         a6:79:fb:4e:62:34:03:a4:5f:f2:b6:ea:a6:3a:36:e1:48:3d:
         53:e4:28:e4:be:0e:66:40:7c:e2:03:2c:18:a2:72:13:81:30:
         48:7b:89:82:fb:d0:d8:d2:0c:7f:9b:2b:e6:6a:43:56:b3:f3:
         35:fb:59:4c:eb:46:c0:b3:de:90:04:54:2b:d3:9b:ee:28:d3:
         2b:6d:60:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:32 2026 by rpki-client