Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/AS58519.roa
File:                     AS58519.roa (raw, json)
Hash identifier:          eb2ThEg1K6SyttUCFraxaDXvdAniDXiuEUcBK1/gT9M=
Subject key identifier:   21:D9:DB:CE:58:03:B8:11:2C:9F:82:21:F2:E4:8A:13:83:EB:85:63
Certificate issuer:       /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE
Certificate serial:       628ACCDE1DD8391BF57F5369A4B4103C00E1470D
Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/AS58519.roa
Signing time:             Thu 11 Jun 2026 16:02:05 +0000
ROA not before:           Thu 11 Jun 2026 15:57:05 +0000
ROA not after:            Thu 10 Jun 2027 16:02:05 +0000
asID:                     58519
IP address blocks:        103.161.220.0/23 maxlen: 23
                          116.63.128.0/18 maxlen: 18
                          122.9.128.0/19 maxlen: 19
                          122.9.160.0/20 maxlen: 20
                          2407:c080:1800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 17:48:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8a:cc:de:1d:d8:39:1b:f5:7f:53:69:a4:b4:10:3c:00:e1:47:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE
        Validity
            Not Before: Jun 11 15:57:05 2026 GMT
            Not After : Jun 10 16:02:05 2027 GMT
        Subject: CN=21D9DBCE5803B8112C9F8221F2E48A1383EB8563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2c:7a:8a:2c:b7:8b:0d:97:f5:1c:75:c2:c3:
                    0d:2c:29:76:1a:e5:63:3e:ad:f9:64:9b:69:2f:aa:
                    c3:73:72:f6:cd:b0:b8:71:a3:60:55:32:47:c0:ef:
                    69:ad:17:d4:f9:41:21:9a:3c:c2:25:db:79:1e:bc:
                    f2:6f:97:85:5e:24:17:74:33:b5:3e:eb:0d:5e:b2:
                    d1:ce:24:50:b9:2e:8c:e2:88:9c:dd:46:8b:c7:d3:
                    b3:f0:7c:d7:7a:0e:eb:37:4c:30:96:72:33:88:a9:
                    7b:83:08:6c:d2:2e:61:c4:6c:b3:e5:8d:67:b7:6c:
                    cb:ba:27:14:d3:6b:67:ef:02:75:40:c4:bd:19:3b:
                    3f:97:2e:d3:97:48:39:0f:43:95:ac:31:58:fc:71:
                    f9:22:db:fb:fd:75:13:b9:bc:95:19:49:8b:ec:2a:
                    18:6f:52:a2:4a:20:d3:98:cb:67:f2:ba:f0:fb:ad:
                    ca:fa:db:b6:79:38:cc:a6:26:07:0d:26:37:98:0e:
                    21:bc:e0:14:96:9a:de:39:f9:1f:78:12:8a:7f:a7:
                    eb:13:d2:62:8b:02:27:42:3a:13:d6:a5:76:1a:21:
                    66:94:54:88:3c:8b:1b:02:1e:56:b6:00:d3:16:09:
                    3a:6e:f2:be:48:1f:ae:a2:08:a4:0d:a8:0e:50:e3:
                    99:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D9:DB:CE:58:03:B8:11:2C:9F:82:21:F2:E4:8A:13:83:EB:85:63
            X509v3 Authority Key Identifier:
                keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/AS58519.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.220.0/23
                  116.63.128.0/18
                  122.9.128.0-122.9.175.255
                IPv6:
                  2407:c080:1800::/37

    Signature Algorithm: sha256WithRSAEncryption
         12:d7:b6:9f:3a:cb:7a:c0:98:79:88:02:29:cb:66:65:f5:24:
         d9:c1:09:e5:96:fb:ce:18:9d:24:58:6d:7f:ae:d0:e9:91:16:
         4a:6a:d9:61:c5:a2:db:7d:ef:01:55:1a:4b:6b:d9:4b:14:b2:
         57:c4:6e:28:30:82:38:b9:3d:be:d1:a6:98:28:eb:2b:11:ba:
         73:df:ee:c0:80:bf:d3:18:94:3c:5a:8e:77:9e:e1:8f:9d:82:
         99:7a:83:c9:90:ff:c5:18:53:4f:ee:08:e7:ce:f4:52:58:43:
         31:75:01:07:4f:96:5c:d1:86:3c:ee:e0:45:f5:dc:e0:2d:f7:
         5a:5e:18:82:72:d1:11:a0:a3:fb:7e:7b:b5:e7:49:25:51:66:
         6f:ba:79:0f:03:4d:14:8e:c3:3d:e0:d8:9c:6a:7a:bb:06:cd:
         72:c3:64:de:69:3f:cd:e4:36:49:4d:34:c7:f7:45:15:18:39:
         48:65:db:b3:69:74:fa:f2:29:91:4f:a6:d0:32:32:3b:b8:f1:
         43:30:59:f9:87:27:67:bf:93:e4:e9:53:b9:6e:06:c9:2a:d2:
         f2:e4:05:d3:52:0c:f1:04:e7:c6:3e:bd:27:48:20:80:dc:ec:
         2c:d4:03:60:8a:db:b4:ad:35:74:bc:35:18:c5:70:7a:aa:7c:
         5f:f6:51:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:40:50 2026 by rpki-client