Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS59803.roa
File:                     AS59803.roa (raw, json)
Hash identifier:          LGUAblMvIhm2ls/u6OEE9pJVQIfQbyGlRz2jjgz8j4M=
Subject key identifier:   B2:F5:49:E4:48:A0:D3:2C:43:68:EA:00:17:84:74:18:4C:83:41:A2
Certificate issuer:       /CN=1FFF263C64163BC58514B539C10375CCB553D75E
Certificate serial:       3077F844E9CDFDF2B8EBFFE0E6A03C6997D2D8BD
Authority key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS59803.roa
Signing time:             Tue 21 Apr 2026 06:43:23 +0000
ROA not before:           Tue 21 Apr 2026 06:38:23 +0000
ROA not after:            Tue 20 Apr 2027 06:43:23 +0000
asID:                     59803
IP address blocks:        2403:1b80::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 18:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:77:f8:44:e9:cd:fd:f2:b8:eb:ff:e0:e6:a0:3c:69:97:d2:d8:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FFF263C64163BC58514B539C10375CCB553D75E
        Validity
            Not Before: Apr 21 06:38:23 2026 GMT
            Not After : Apr 20 06:43:23 2027 GMT
        Subject: CN=B2F549E448A0D32C4368EA00178474184C8341A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c7:6d:1d:a3:ad:fa:6a:9c:03:0d:49:5b:4c:
                    ab:64:d7:15:00:49:35:40:c9:8c:c3:90:32:91:54:
                    9a:63:6d:6b:4d:cf:6f:9a:6a:51:f2:f2:40:06:57:
                    cf:27:6c:16:85:66:78:74:bf:d2:9c:7b:cf:46:ec:
                    9b:d8:e5:66:6f:27:ad:83:a2:a0:fd:df:d3:c1:52:
                    88:a3:06:95:6c:17:01:d0:72:a9:69:d3:0f:7a:b1:
                    69:65:a9:14:c3:7c:62:6e:a9:18:43:2e:28:41:e4:
                    e5:05:cd:16:4f:9a:7d:ef:13:0d:ed:de:25:56:ea:
                    86:cd:44:7b:e2:f6:4f:b9:a6:a6:95:1d:37:b5:e6:
                    d9:81:b8:74:0e:72:bf:de:f9:df:ac:39:48:51:18:
                    94:66:08:46:07:c2:1a:4e:31:e7:31:55:d8:39:2e:
                    18:8c:1f:ef:e1:d1:25:2a:77:ff:99:2b:e7:98:09:
                    99:76:d7:67:c6:9b:67:53:bf:11:0d:3e:71:04:55:
                    76:7d:95:1d:75:44:bf:38:5b:48:2f:a1:5b:d6:9e:
                    06:b7:bc:89:28:12:f6:a7:00:f8:02:3f:c3:9e:ab:
                    8b:1c:48:01:34:a2:d8:73:dd:f5:c1:7f:d9:79:4f:
                    55:bb:1c:2f:8a:fc:11:03:b9:ad:9a:3f:4d:0b:07:
                    42:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F5:49:E4:48:A0:D3:2C:43:68:EA:00:17:84:74:18:4C:83:41:A2
            X509v3 Authority Key Identifier:
                keyid:1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS59803.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:1b80::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:3a:5a:8b:e0:3d:10:d6:e0:74:e2:51:ac:c5:94:3f:b3:da:
         c7:15:59:24:77:0d:a5:2e:93:44:92:72:e9:8c:20:81:93:a0:
         7a:13:8f:e1:58:cf:83:ed:c5:e0:b7:8a:3e:18:21:33:9f:96:
         97:bc:0f:22:5b:92:62:4a:8b:f1:10:9d:ee:8f:e5:ba:d9:38:
         71:7f:6b:dd:3f:c7:80:fe:06:f3:6b:50:74:d3:ad:75:1a:26:
         de:71:af:de:57:8f:b0:42:7a:0b:11:3a:67:8d:03:66:38:6d:
         50:dc:52:fb:18:d2:24:e7:27:91:b5:94:ac:31:cd:29:cb:9f:
         17:aa:a7:68:37:f2:77:56:75:c7:2e:38:c1:25:94:89:6f:ee:
         b7:0a:2d:4d:77:a7:88:1e:a0:16:10:a6:e7:46:59:d1:84:c7:
         e7:0e:99:54:33:c6:5b:8f:cb:4e:9e:93:71:ba:ad:d6:a4:a2:
         8f:b9:a3:11:2a:8a:8f:e4:b1:6e:48:fc:cb:77:1c:9b:72:56:
         18:48:87:c5:c8:33:b2:e8:c6:06:d5:c9:72:d4:a9:91:e7:53:
         b1:cf:66:fb:80:7b:42:98:2b:20:32:25:c8:eb:63:af:69:22:
         66:44:24:02:56:61:ae:dd:71:85:15:1d:40:9d:6a:67:e1:e6:
         38:be:91:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 03:07:01 2026 by rpki-client