Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/35392e3131312e3132382e302f31372d3234203d3e203435303632.roa
File:                     35392e3131312e3132382e302f31372d3234203d3e203435303632.roa (raw, json)
Hash identifier:          eKWJPmIHVgN40FAgWi4o6v42RMjtKNlYOmAsiIo9zBc=
Subject key identifier:   01:CE:80:14:6D:C5:A2:2D:A8:7D:54:D4:D3:BD:6F:F9:2C:27:13:CF
Certificate issuer:       /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial:       48414F4191FB778C68BF3D651AF3500DF4402051
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/35392e3131312e3132382e302f31372d3234203d3e203435303632.roa
Signing time:             Fri 10 Apr 2026 05:49:16 +0000
ROA not before:           Fri 10 Apr 2026 05:44:16 +0000
ROA not after:            Fri 09 Apr 2027 05:49:16 +0000
asID:                     45062
IP address blocks:        59.111.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:41:4f:41:91:fb:77:8c:68:bf:3d:65:1a:f3:50:0d:f4:40:20:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
        Validity
            Not Before: Apr 10 05:44:16 2026 GMT
            Not After : Apr  9 05:49:16 2027 GMT
        Subject: CN=01CE80146DC5A22DA87D54D4D3BD6FF92C2713CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:41:ea:56:48:a6:92:29:cf:ac:13:a1:6a:1e:
                    a9:b1:e8:18:c1:05:13:13:2a:62:93:03:bc:35:84:
                    ec:54:2c:79:ed:cb:73:2a:e7:74:0e:d7:1a:3c:51:
                    36:80:d3:23:c2:87:e0:1c:ca:a0:51:02:bc:1f:38:
                    20:bc:c6:81:ca:da:61:6c:77:e5:d9:65:bd:3f:3d:
                    e9:0f:73:82:92:77:92:88:96:ab:a6:c2:44:f6:61:
                    e2:e9:81:c7:fa:63:a0:43:22:78:d0:b9:aa:31:84:
                    35:ae:45:db:b5:b2:7f:6f:7d:c8:30:9b:be:a5:64:
                    3c:28:a8:00:a8:ea:9b:de:20:e3:15:c2:79:42:39:
                    88:a6:6b:6c:27:a9:97:37:36:45:98:f1:12:a5:1a:
                    85:2a:52:0e:2d:dd:50:f1:1a:c6:4e:ca:14:22:d7:
                    de:d7:47:3d:7b:b4:2b:a5:d3:18:71:43:cd:f4:31:
                    a9:8e:e2:a6:87:4e:70:60:27:4f:66:e7:7f:42:b3:
                    59:94:4e:14:9b:bd:25:12:68:2c:01:8d:dc:8b:51:
                    a8:da:12:81:c2:b6:22:54:d2:b6:8e:24:a5:ef:f8:
                    c7:26:fc:b8:e2:dc:94:16:bb:7b:cf:a3:cd:f2:bc:
                    9c:6f:8c:e0:49:8e:3f:e0:6a:ef:60:88:61:20:34:
                    92:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CE:80:14:6D:C5:A2:2D:A8:7D:54:D4:D3:BD:6F:F9:2C:27:13:CF
            X509v3 Authority Key Identifier:
                keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/35392e3131312e3132382e302f31372d3234203d3e203435303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.111.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1a:30:5d:2b:d9:2c:90:f6:17:49:0d:8d:28:35:30:87:24:d5:
         af:37:9e:9b:44:c0:4e:82:65:65:d4:6e:e7:ce:27:e9:b6:f9:
         62:7c:38:a9:18:94:6a:d5:7a:c8:c7:f3:0b:99:ed:cf:de:32:
         58:ad:aa:3c:83:eb:50:f9:d4:9d:c9:ea:d1:4b:3a:3a:29:11:
         be:7a:80:f3:14:65:d4:46:0e:d2:c2:82:0c:79:ae:2e:4a:d0:
         7b:94:8d:0d:33:92:73:5c:a9:33:d9:e1:5c:2a:00:4d:7e:5a:
         33:bd:37:a5:8a:59:a3:d7:0e:f9:cd:7f:80:13:98:1f:bc:32:
         27:2c:42:7b:82:af:d2:a0:8b:a2:7a:24:c8:05:5c:e8:92:3e:
         d2:fe:b6:2a:41:a2:16:5f:fd:0a:21:1a:0c:19:36:f7:aa:cd:
         1e:b1:b0:4c:2c:a7:f9:59:eb:b3:f8:4a:24:ea:af:91:bb:41:
         5d:62:9f:22:37:c7:a2:9d:93:8f:89:42:5e:1a:69:fa:01:e6:
         bb:be:5c:64:bc:99:c4:bb:22:c0:8a:95:61:11:ce:27:ad:0c:
         0e:8d:71:b2:34:ba:3e:f9:1c:fc:b5:ad:60:c9:fb:aa:a5:28:
         cb:5c:8a:12:b5:5d:4c:13:53:e3:c2:e9:63:d2:ae:69:d4:6f:
         d9:14:b8:50
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUSEFPQZH7d4xovz1lGvNQDfRAIFEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0
MkNFMDBFNjAeFw0yNjA0MTAwNTQ0MTZaFw0yNzA0MDkwNTQ5MTZaMDMxMTAvBgNV
BAMTKDAxQ0U4MDE0NkRDNUEyMkRBODdENTRENEQzQkQ2RkY5MkMyNzEzQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKQepWSKaSKc+sE6FqHqmx6BjB
BRMTKmKTA7w1hOxULHnty3Mq53QO1xo8UTaA0yPCh+AcyqBRArwfOCC8xoHK2mFs
d+XZZb0/PekPc4KSd5KIlqumwkT2YeLpgcf6Y6BDInjQuaoxhDWuRdu1sn9vfcgw
m76lZDwoqACo6pveIOMVwnlCOYima2wnqZc3NkWY8RKlGoUqUg4t3VDxGsZOyhQi
197XRz17tCul0xhxQ830MamO4qaHTnBgJ09m539Cs1mUThSbvSUSaCwBjdyLUaja
EoHCtiJU0raOJKXv+Mcm/Lji3JQWu3vPo83yvJxvjOBJjj/gau9giGEgNJKNAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUAc6AFG3Foi2ofVTU071v+SwnE88wHwYDVR0j
BBgwFoAUN5Rn2fnS2/7+uAlXVQBO3ULOAOYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDgxOTUyNzkxMDIyNzk3MS8wLzM3OTQ2N0Q5RjlEMkRCRkVGRUI4MDk1NzU1MDA0
RURENDJDRTAwRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0MkNFMDBFNi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NDgxOTUyNzkxMDIyNzk3MS8wLzM1MzkyZTMxMzEz
MTJlMzEzMjM4MmUzMDJmMzEzNzJkMzIzNDIwM2QzZTIwMzQzNTMwMzYzMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBztvgDANBgkqhkiG9w0BAQsFAAOCAQEAGjBdK9kskPYXSQ2NKDUwhyTV
rzeem0TAToJlZdRu584n6bb5Ynw4qRiUatV6yMfzC5ntz94yWK2qPIPrUPnUncnq
0Us6OikRvnqA8xRl1EYO0sKCDHmuLkrQe5SNDTOSc1ypM9nhXCoATX5aM703pYpZ
o9cO+c1/gBOYH7wyJyxCe4Kv0qCLonokyAVc6JI+0v62KkGiFl/9CiEaDBk296rN
HrGwTCyn+Vnrs/hKJOqvkbtBXWKfIjfHop2Tj4lCXhpp+gHmu75cZLyZxLsiwIqV
YRHOJ60MDo1xsjS6Pvkc/LWtYMn7qqUoy1yKErVdTBNT48LpY9KuadRv2RS4UA==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:31 2026 by rpki-client