Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS58466.roa
File:                     AS58466.roa (raw, json)
Hash identifier:          dYgaskG/ajSMyjYl8h58mtZD6nA9uHJMtAREK6ikuSU=
Subject key identifier:   AD:FD:4C:0A:08:8C:E4:85:C3:5A:B3:CA:6E:83:0D:86:45:D0:63:69
Certificate issuer:       /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial:       660D13943DA5091323CA9F2F2129DFE65881CBB1
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS58466.roa
Signing time:             Wed 01 Jul 2026 13:08:38 +0000
ROA not before:           Wed 01 Jul 2026 13:03:38 +0000
ROA not after:            Wed 30 Jun 2027 13:08:38 +0000
asID:                     58466
IP address blocks:        118.145.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:0d:13:94:3d:a5:09:13:23:ca:9f:2f:21:29:df:e6:58:81:cb:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
        Validity
            Not Before: Jul  1 13:03:38 2026 GMT
            Not After : Jun 30 13:08:38 2027 GMT
        Subject: CN=ADFD4C0A088CE485C35AB3CA6E830D8645D06369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:35:8f:42:56:c7:62:76:13:02:a7:18:02:48:
                    aa:4d:1e:d6:b7:19:0e:e4:d5:38:99:7a:7e:35:f3:
                    6b:54:19:25:f7:7e:2d:7c:59:55:90:d6:f9:ac:28:
                    11:b7:2b:2c:6b:ec:07:5b:22:75:36:9b:7c:da:e7:
                    65:d9:93:9d:4d:12:64:fd:2a:2b:c6:cd:68:76:3c:
                    39:03:cc:0b:b6:43:28:ad:88:b8:a3:0f:9d:8f:2f:
                    8e:77:78:bf:ab:41:aa:87:98:80:b0:29:ba:58:d8:
                    a2:f8:0c:1e:94:b7:cd:92:50:0c:41:a4:a6:45:6e:
                    08:cc:f1:38:11:22:36:76:ff:81:bd:bd:a5:48:f0:
                    28:1f:46:e7:d6:6c:7f:af:45:1e:0c:80:51:e2:df:
                    d0:30:5d:34:09:b6:4b:b8:07:04:c9:c0:3c:ca:43:
                    d8:ac:74:a9:e2:79:63:af:94:a3:c9:af:67:43:d2:
                    21:f5:6b:38:cb:ed:c9:48:ae:3f:17:a6:7d:1b:e3:
                    3d:9a:9f:20:54:5f:fd:b6:2d:c0:d5:e1:ae:c9:d5:
                    c8:8f:98:ea:82:75:19:38:b4:cd:82:a3:16:17:80:
                    9b:22:45:4f:95:b3:5b:51:8d:e0:6e:46:56:93:0e:
                    11:d8:36:ed:52:f9:73:9b:50:32:dd:aa:1c:8e:e9:
                    e3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FD:4C:0A:08:8C:E4:85:C3:5A:B3:CA:6E:83:0D:86:45:D0:63:69
            X509v3 Authority Key Identifier:
                keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS58466.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.145.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         05:a6:1e:99:2a:4e:2c:2b:29:c6:95:47:97:0c:9c:04:4e:d7:
         d2:14:e7:48:a4:61:4e:0a:e2:5c:42:cb:40:70:a8:5a:df:a6:
         32:e4:87:44:55:d0:79:7b:f4:42:64:7d:f8:1a:e3:e1:a2:87:
         b6:54:a6:9a:c1:e2:fe:13:5a:e2:2b:2b:ef:6d:10:f2:c1:c6:
         64:3b:88:37:96:11:82:18:17:98:4c:27:fc:d6:0d:c3:79:62:
         38:8c:71:42:f7:9c:7e:eb:74:1c:53:34:5e:8d:4e:c0:8e:73:
         e8:1e:c6:eb:9d:2b:1b:f3:1b:b3:4c:30:f9:65:da:e7:06:27:
         41:fc:3c:01:8a:ad:74:d7:1a:43:50:7a:ee:f9:58:3d:b0:41:
         14:6c:44:2b:38:5a:85:af:20:bd:b6:00:03:9c:39:bc:be:31:
         e8:22:bb:f2:bb:1f:bf:21:4a:ca:8b:f8:e3:aa:7d:6f:29:c8:
         24:b5:ff:d1:d1:56:48:84:83:b0:c9:2c:b3:fc:71:8d:85:d4:
         41:6b:ea:a0:2a:2a:d0:98:f9:a2:c1:80:ee:bb:66:4e:8e:c8:
         bb:45:a2:c0:e8:0d:28:27:b2:89:48:8a:f3:82:39:46:02:9c:
         42:7a:d4:0d:53:ce:6e:9f:28:2c:0a:0c:93:22:2b:a2:8c:87:
         f4:d0:ff:dd
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUZg0TlD2lCRMjyp8vISnf5liBy7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE
MUVFRjM4RjAeFw0yNjA3MDExMzAzMzhaFw0yNzA2MzAxMzA4MzhaMDMxMTAvBgNV
BAMTKEFERkQ0QzBBMDg4Q0U0ODVDMzVBQjNDQTZFODMwRDg2NDVEMDYzNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTNY9CVsdidhMCpxgCSKpNHta3
GQ7k1TiZen4182tUGSX3fi18WVWQ1vmsKBG3Kyxr7AdbInU2m3za52XZk51NEmT9
KivGzWh2PDkDzAu2QyitiLijD52PL453eL+rQaqHmICwKbpY2KL4DB6Ut82SUAxB
pKZFbgjM8TgRIjZ2/4G9vaVI8CgfRufWbH+vRR4MgFHi39AwXTQJtku4BwTJwDzK
Q9isdKnieWOvlKPJr2dD0iH1azjL7clIrj8Xpn0b4z2anyBUX/22LcDV4a7J1ciP
mOqCdRk4tM2CoxYXgJsiRU+Vs1tRjeBuRlaTDhHYNu1S+XObUDLdqhyO6eOzAgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQUrf1MCgiM5IXDWrPKboMNhkXQY2kwHwYDVR0j
BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB
NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw
XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU2OTE2NTAvMC9BUzU4NDY2LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQFdpEgMA0GCSqGSIb3DQEBCwUAA4IBAQAFph6ZKk4sKynGlUeXDJwETtfS
FOdIpGFOCuJcQstAcKha36Yy5IdEVdB5e/RCZH34GuPhooe2VKaaweL+E1riKyvv
bRDywcZkO4g3lhGCGBeYTCf81g3DeWI4jHFC95x+63QcUzRejU7AjnPoHsbrnSsb
8xuzTDD5ZdrnBidB/DwBiq101xpDUHru+Vg9sEEUbEQrOFqFryC9tgADnDm8vjHo
Irvyux+/IUrKi/jjqn1vKcgktf/R0VZIhIOwySyz/HGNhdRBa+qgKirQmPmiwYDu
u2ZOjsi7RaLA6A0oJ7KJSIrzgjlGApxCetQNU85unygsCgyTIiuijIf00P/d
-----END CERTIFICATE-----
Generated at Tue Jul 14 23:01:59 2026 by rpki-client