Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/AS58540.roa
File:                     AS58540.roa (raw, json)
Hash identifier:          ODEMxdA+rDgGXKZmPBMgK9yomv/d+1QGAeEkWm3Q6yA=
Subject key identifier:   88:69:1F:4F:12:CB:96:6F:F3:78:FA:5F:C2:CC:EF:E8:A2:B9:9D:81
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       69DF91AEE7E3B7C6D3A7EF306C97D8E5CAA4E4BE
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/AS58540.roa
Signing time:             Sun 17 May 2026 10:00:01 +0000
ROA not before:           Sun 17 May 2026 09:55:01 +0000
ROA not after:            Sun 16 May 2027 10:00:01 +0000
asID:                     58540
IP address blocks:        180.76.198.0/23 maxlen: 24
                          182.61.128.0/23 maxlen: 24
                          182.61.192.0/23 maxlen: 24
                          182.61.194.0/23 maxlen: 24
                          182.61.196.0/23 maxlen: 24
                          182.61.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:10:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:df:91:ae:e7:e3:b7:c6:d3:a7:ef:30:6c:97:d8:e5:ca:a4:e4:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: May 17 09:55:01 2026 GMT
            Not After : May 16 10:00:01 2027 GMT
        Subject: CN=88691F4F12CB966FF378FA5FC2CCEFE8A2B99D81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dd:80:dd:7e:23:20:5f:25:b4:55:b3:52:d3:
                    8b:09:05:42:d9:01:0c:1a:05:21:56:c7:f9:ee:64:
                    3a:93:39:56:da:6a:2f:49:38:aa:7b:e5:9d:63:9e:
                    a9:52:04:05:72:3e:08:36:ce:3e:35:77:6e:59:a1:
                    74:b9:8b:60:41:8c:96:c5:42:04:2d:0a:77:34:0f:
                    40:8c:f1:8a:40:d2:36:d0:27:6e:2a:35:1c:b2:cb:
                    7d:ef:b8:cd:2e:d0:6d:7c:16:0a:93:a6:d4:2b:ba:
                    05:bc:ba:84:6a:5e:d9:53:8f:30:7c:87:05:15:04:
                    6f:90:7f:d4:f5:7d:43:59:54:3f:59:18:19:46:c4:
                    24:a0:98:2e:36:58:a9:ba:00:b7:58:d2:87:7b:b4:
                    be:41:f3:0f:91:6b:de:96:20:3e:73:9d:4c:81:13:
                    bc:12:b4:67:59:0c:02:b3:e9:a6:a1:05:20:ca:84:
                    35:30:66:34:36:37:c0:04:fd:85:a8:e7:92:d7:e2:
                    e0:8c:41:39:a4:87:1f:12:4e:36:7b:7f:46:4e:d5:
                    97:2f:89:8e:a7:c8:5c:11:11:2f:f6:7c:34:f3:23:
                    04:ce:89:7e:b7:65:37:21:97:23:04:6b:d6:fa:35:
                    c1:84:40:da:26:9d:b7:9e:ef:82:ae:7e:8e:8b:35:
                    ec:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:69:1F:4F:12:CB:96:6F:F3:78:FA:5F:C2:CC:EF:E8:A2:B9:9D:81
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/AS58540.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.76.198.0/23
                  182.61.128.0/23
                  182.61.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2c:aa:97:df:f7:26:5e:50:42:13:92:9d:cf:85:87:51:9c:7e:
         f6:63:7f:bb:fb:6b:34:d9:73:3c:0d:47:0c:bf:67:8f:cd:f4:
         14:d6:56:ac:50:98:62:db:24:8b:d4:08:ef:91:9f:56:ec:7d:
         23:80:7c:dc:e9:bc:1b:d4:b4:c5:dd:80:a6:d3:6c:ab:fb:51:
         20:67:33:ea:92:73:9d:07:8e:ec:38:f7:75:f8:77:bc:37:49:
         31:df:bc:1d:78:e0:f0:a6:81:56:be:62:ab:6e:3d:1e:57:fe:
         5f:ed:34:31:8c:e2:f1:cc:2a:a8:f6:fe:be:38:1b:9f:3c:e6:
         9b:4b:b9:94:f8:58:f4:35:0a:08:ab:45:28:04:27:c0:f1:e3:
         41:c6:b9:b4:a6:b2:e5:15:ff:73:4f:b2:d7:a9:f0:4c:64:3f:
         e6:42:5d:9b:f2:fe:98:a1:fe:03:81:71:d7:37:cd:ad:06:ef:
         22:70:b3:e5:d8:3e:4a:6b:5d:5a:97:8f:6f:74:5d:86:26:0c:
         27:65:e5:b6:a4:f6:68:2f:89:53:c8:05:4d:68:e1:33:dc:5c:
         7d:61:1f:b0:1e:3d:b8:9d:3b:3c:6b:59:98:6c:f7:48:35:21:
         6d:35:36:96:7c:9b:f4:e9:34:9a:f4:3b:0f:f8:04:f5:36:6f:
         6c:a2:d0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:49:09 2026 by rpki-client