Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/AS58466.roa
File:                     AS58466.roa (raw, json)
Hash identifier:          pNtrvsIxnKSPSR3qrnhNlUDUeD+0ItvWPxCmkPmSobo=
Subject key identifier:   DA:6C:A8:06:D4:6E:5A:FA:FC:97:05:EC:4F:DB:E8:9C:56:97:97:9D
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       116ED87C2C4A347731643E6741F2FF62D748FEC2
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/AS58466.roa
Signing time:             Sun 17 May 2026 10:00:01 +0000
ROA not before:           Sun 17 May 2026 09:55:01 +0000
ROA not after:            Sun 16 May 2027 10:00:01 +0000
asID:                     58466
IP address blocks:        106.13.252.0/22 maxlen: 24
                          240c:409f:2000::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:10:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:6e:d8:7c:2c:4a:34:77:31:64:3e:67:41:f2:ff:62:d7:48:fe:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: May 17 09:55:01 2026 GMT
            Not After : May 16 10:00:01 2027 GMT
        Subject: CN=DA6CA806D46E5AFAFC9705EC4FDBE89C5697979D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f9:b2:42:93:b4:b6:b0:da:c3:26:96:c7:53:
                    a0:12:cd:b6:d0:3c:31:38:e3:8f:20:34:0d:f4:10:
                    16:6f:8c:42:69:28:7e:cb:74:93:e1:fb:e0:aa:6c:
                    c8:a3:87:a1:29:d2:b6:b1:4c:bb:bb:d8:28:91:ea:
                    fe:31:69:b4:32:14:f4:26:74:2f:1a:a4:6c:28:73:
                    e4:41:80:34:60:54:35:3e:14:72:8d:ef:84:f4:cb:
                    bf:98:38:79:16:43:95:a6:c4:d7:73:b4:47:c8:33:
                    f3:87:ab:f7:36:06:78:eb:3a:86:0e:d4:5f:b5:d7:
                    05:f3:ae:fa:50:f5:ef:3e:b9:fa:7e:0a:1b:27:4b:
                    ff:f6:a9:c3:8c:b4:4a:77:c3:02:9c:b1:e6:af:23:
                    0a:77:d2:86:12:10:ae:01:48:56:19:ba:de:bb:1c:
                    ba:d2:57:79:30:c7:66:6f:93:08:c8:19:fc:a6:f6:
                    31:78:0b:ce:d1:56:3b:72:55:44:df:b9:a7:f5:8a:
                    34:07:d7:ad:7a:f6:b6:08:ad:e7:10:3f:fe:3e:75:
                    33:74:96:8d:d4:00:50:e4:6c:46:b2:cc:11:18:6d:
                    35:41:09:68:25:24:31:c8:64:9e:2e:65:01:81:9b:
                    df:a6:c2:64:f2:59:cb:97:1a:b1:70:d2:cc:70:5c:
                    81:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6C:A8:06:D4:6E:5A:FA:FC:97:05:EC:4F:DB:E8:9C:56:97:97:9D
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/AS58466.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.13.252.0/22
                IPv6:
                  240c:409f:2000::/46

    Signature Algorithm: sha256WithRSAEncryption
         04:98:42:b3:01:9b:f4:5d:84:70:82:9f:4e:07:45:4b:3e:c0:
         eb:9a:e3:e3:3c:62:1f:e0:11:e4:a5:32:45:58:a2:f5:b8:3f:
         e2:da:fb:45:70:8e:96:09:36:93:5b:71:7f:74:9c:8d:71:2d:
         e4:23:10:60:d9:f9:eb:72:1e:8d:f9:c5:17:2b:e4:ac:97:b7:
         34:aa:96:c2:34:78:dd:32:13:43:94:5d:7f:42:8a:48:8b:16:
         20:3d:77:8f:c8:c1:8a:fd:3a:d9:c4:01:36:d1:9d:14:57:ba:
         3c:ae:61:11:58:bf:73:46:6a:94:d2:40:9c:15:ef:f8:aa:3a:
         02:c9:de:07:34:a8:34:9f:77:8b:0f:b5:05:96:5a:52:ce:ed:
         61:bc:9f:95:8c:2a:13:b0:8f:e0:5d:a5:f7:a4:b8:10:9b:46:
         8f:57:c5:ea:be:b9:ae:04:88:67:cc:15:ba:07:50:a9:b3:e1:
         3d:b6:91:0e:35:4e:56:04:0f:ea:7c:92:a5:49:65:36:09:1c:
         e6:85:7c:64:a3:84:3d:91:82:eb:87:06:d0:fa:b7:32:72:59:
         4b:9f:f0:8f:b1:83:e6:52:b8:93:b6:a7:db:be:28:56:c0:b6:
         3d:f3:40:4b:43:11:86:ec:24:01:8b:51:6d:fe:8e:4f:bb:5c:
         15:d0:27:37
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUEW7YfCxKNHcxZD5nQfL/YtdI/sIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRB
OEVCQTcwRTAeFw0yNjA1MTcwOTU1MDFaFw0yNzA1MTYxMDAwMDFaMDMxMTAvBgNV
BAMTKERBNkNBODA2RDQ2RTVBRkFGQzk3MDVFQzRGREJFODlDNTY5Nzk3OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP+bJCk7S2sNrDJpbHU6ASzbbQ
PDE4448gNA30EBZvjEJpKH7LdJPh++CqbMijh6Ep0raxTLu72CiR6v4xabQyFPQm
dC8apGwoc+RBgDRgVDU+FHKN74T0y7+YOHkWQ5WmxNdztEfIM/OHq/c2BnjrOoYO
1F+11wXzrvpQ9e8+ufp+ChsnS//2qcOMtEp3wwKcseavIwp30oYSEK4BSFYZut67
HLrSV3kwx2ZvkwjIGfym9jF4C87RVjtyVUTfuaf1ijQH16169rYIrecQP/4+dTN0
lo3UAFDkbEayzBEYbTVBCWglJDHIZJ4uZQGBm9+mwmTyWcuXGrFw0sxwXIE9AgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQU2myoBtRuWvr8lwXsT9vonFaXl50wHwYDVR0j
BBgwFoAUoZZyIGqdp99ClTbJv/ralKjrpw4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjcyMzM3MjExMzkyMi8wL0ExOTY3MjIwNkE5REE3REY0Mjk1MzZDOUJGRkFE
QTk0QThFQkE3MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRBOEVCQTcwRS5jZXIw
XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxMTM5MjIvMC9BUzU4NDY2LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA
ATAGAwQCag38MA8EAgACMAkDBwIkDECfIAAwDQYJKoZIhvcNAQELBQADggEBAASY
QrMBm/RdhHCCn04HRUs+wOua4+M8Yh/gEeSlMkVYovW4P+La+0VwjpYJNpNbcX90
nI1xLeQjEGDZ+etyHo35xRcr5KyXtzSqlsI0eN0yE0OUXX9CikiLFiA9d4/IwYr9
OtnEATbRnRRXujyuYRFYv3NGapTSQJwV7/iqOgLJ3gc0qDSfd4sPtQWWWlLO7WG8
n5WMKhOwj+BdpfekuBCbRo9Xxeq+ua4EiGfMFboHUKmz4T22kQ41TlYED+p8kqVJ
ZTYJHOaFfGSjhD2RguuHBtD6tzJyWUuf8I+xg+ZSuJO2p9u+KFbAtj3zQEtDEYbs
JAGLUW3+jk+7XBXQJzc=
-----END CERTIFICATE-----
Generated at Fri May 29 23:49:09 2026 by rpki-client