Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/35392e3131312e36342e302f32302d3234203d3e203435303632.roa
File:                     35392e3131312e36342e302f32302d3234203d3e203435303632.roa (raw, json)
Hash identifier:          7UJRITGvshot1KLcY8zQ/tyPn+QlPGRuKwkm9YQ1xmk=
Subject key identifier:   F3:F1:1C:50:60:F5:C6:97:C2:A1:88:A2:68:3B:DC:E1:91:35:2F:65
Certificate issuer:       /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial:       0249A7452BB626209964423FCF66111F3AFE6632
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/35392e3131312e36342e302f32302d3234203d3e203435303632.roa
Signing time:             Fri 10 Apr 2026 05:49:15 +0000
ROA not before:           Fri 10 Apr 2026 05:44:15 +0000
ROA not after:            Fri 09 Apr 2027 05:49:15 +0000
asID:                     45062
IP address blocks:        59.111.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:49:a7:45:2b:b6:26:20:99:64:42:3f:cf:66:11:1f:3a:fe:66:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
        Validity
            Not Before: Apr 10 05:44:15 2026 GMT
            Not After : Apr  9 05:49:15 2027 GMT
        Subject: CN=F3F11C5060F5C697C2A188A2683BDCE191352F65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d2:7e:c6:d9:23:04:a4:40:1b:02:30:1f:f6:
                    d6:c6:ce:6e:43:7c:5d:8c:eb:1c:23:0c:fe:ac:5c:
                    73:23:0d:37:56:98:58:91:52:9e:ad:76:b1:62:f8:
                    15:f6:56:22:5d:71:a9:b2:e2:48:5d:fb:ee:d6:c0:
                    8c:6f:17:8e:4f:a5:3b:ba:e2:b5:bc:00:e6:d2:32:
                    09:4a:4d:85:05:8d:9d:57:b4:33:af:86:f0:a8:6e:
                    57:8d:ba:a7:2d:00:49:44:a8:fc:02:5a:da:bb:d2:
                    37:6a:9c:2d:c6:4a:a9:80:d5:54:a7:5a:bd:d4:3d:
                    c0:9f:e0:9a:00:1e:1e:98:bd:e4:88:3e:7d:c9:11:
                    96:c6:42:f0:80:30:72:0d:f3:0f:7b:b9:4c:8e:e5:
                    09:f9:9b:a2:ae:54:dd:62:01:56:09:7b:29:c0:a6:
                    22:a8:ed:18:07:b4:06:e2:60:09:0e:35:13:ae:3e:
                    fc:89:08:05:8e:74:0d:c9:88:09:7a:da:cf:7b:e0:
                    b7:06:04:54:8a:1f:3e:d3:c4:5c:78:ac:8d:9c:b6:
                    0a:04:a1:7f:08:ac:cd:69:4c:31:8d:f6:11:b4:c2:
                    54:58:47:ae:bf:45:e7:47:06:02:15:fb:0f:9e:7d:
                    52:54:a4:df:f6:90:35:9a:f4:41:54:bc:ab:7b:3d:
                    df:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F1:1C:50:60:F5:C6:97:C2:A1:88:A2:68:3B:DC:E1:91:35:2F:65
            X509v3 Authority Key Identifier:
                keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/35392e3131312e36342e302f32302d3234203d3e203435303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.111.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         42:37:ee:43:bb:be:6c:61:5e:d7:e9:82:6b:e3:e8:a3:4a:41:
         d6:46:65:36:18:bc:5c:eb:40:b1:5f:53:f9:0c:24:bd:f0:77:
         99:98:7b:ea:b2:13:b1:b0:ff:fe:1a:4d:2e:58:86:8a:a9:ea:
         7b:56:3f:f9:bc:f7:98:e7:de:ca:09:e1:9d:b8:0c:2e:3c:ba:
         fb:6a:c8:ea:20:e9:39:e7:de:a3:42:17:4e:89:ab:77:1b:55:
         00:e8:16:84:d2:a7:6d:3e:4a:f2:13:cc:10:83:3d:3f:ee:b8:
         82:b7:f6:bf:a8:dc:2f:ea:37:c2:86:cc:b8:33:48:b1:0b:35:
         3c:c4:9c:1f:c9:85:90:ba:63:eb:49:a0:b0:10:6a:fb:68:56:
         60:1d:6f:9a:0a:b6:d7:d7:2a:61:2a:bc:87:ae:11:e8:e3:2b:
         2e:39:dd:24:25:b2:a8:3b:b9:91:92:19:4d:f6:35:98:3d:14:
         6d:1a:9d:0a:df:7a:84:ec:a1:9f:d6:43:e8:19:47:53:f9:eb:
         94:c8:a1:03:da:18:1d:f7:52:1d:cc:6c:3e:c0:77:94:0c:71:
         ba:7b:e3:b7:b9:d1:0b:59:97:29:2d:bb:2b:b7:3e:ba:a7:38:
         9b:6d:b2:62:3e:fa:a1:de:8e:ed:b6:b5:92:04:ad:20:c3:01:
         e6:08:fb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:22 2026 by rpki-client