Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS58779.roa
File:                     AS58779.roa (raw, json)
Hash identifier:          tZN8NFWk5ucqhAkuvlhTXr0GXvi0RFPK/EGNmycn4sU=
Subject key identifier:   54:C8:42:4F:A7:73:58:9C:A6:32:BB:97:32:CC:25:A4:B9:DD:E5:F2
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       06A0AB6EB7558809597838562030B384E0DF53E9
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS58779.roa
Signing time:             Tue 09 Jun 2026 09:22:12 +0000
ROA not before:           Tue 09 Jun 2026 09:17:12 +0000
ROA not after:            Tue 08 Jun 2027 09:22:12 +0000
asID:                     58779
IP address blocks:        114.112.229.0/24 maxlen: 24
                          114.112.245.0/24 maxlen: 24
                          114.112.248.0/23 maxlen: 23
                          114.112.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 04:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a0:ab:6e:b7:55:88:09:59:78:38:56:20:30:b3:84:e0:df:53:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: Jun  9 09:17:12 2026 GMT
            Not After : Jun  8 09:22:12 2027 GMT
        Subject: CN=54C8424FA773589CA632BB9732CC25A4B9DDE5F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d1:1e:e0:49:5c:3d:d5:36:5c:5d:73:8c:b7:
                    c5:a7:40:1c:62:3e:dc:29:00:e0:bf:bb:12:c0:8c:
                    61:3c:65:9a:a6:b5:90:14:22:db:3d:4f:d5:35:a6:
                    08:71:69:cd:ac:7e:37:12:e6:a2:79:9a:5f:6d:33:
                    71:e4:b4:50:49:3c:61:68:af:08:f8:ba:f3:0d:96:
                    49:4b:72:ad:6b:f9:03:02:e0:95:1a:fb:64:5b:6f:
                    3d:b5:5f:bd:2e:d6:37:11:71:6b:4c:ec:38:f4:a4:
                    63:86:c8:78:81:4f:52:be:d2:c2:ea:65:97:3e:c2:
                    3b:65:83:ce:34:ab:63:92:59:10:81:41:b3:ca:05:
                    81:dd:45:40:57:45:20:51:7b:1d:cf:0f:47:53:8a:
                    7a:3b:78:75:6e:97:bc:86:ae:cf:87:4f:a1:07:b8:
                    4a:c9:e1:4d:4d:0e:da:33:33:ce:d0:25:f5:e0:ee:
                    6b:b2:a5:e0:30:f6:f3:52:a3:8a:5c:95:a4:75:28:
                    66:d0:e5:d7:62:1c:46:70:0b:a6:7c:65:3d:ab:06:
                    2a:e7:96:52:29:55:20:ce:33:4f:c5:26:16:a0:ca:
                    92:73:2d:55:db:b4:43:17:24:8f:c7:25:43:e1:6d:
                    e2:05:a8:ab:eb:e4:5c:70:99:40:8e:51:2a:6d:f8:
                    63:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C8:42:4F:A7:73:58:9C:A6:32:BB:97:32:CC:25:A4:B9:DD:E5:F2
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS58779.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.112.229.0/24
                  114.112.245.0/24
                  114.112.248.0/23
                  114.112.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:af:4c:ad:c5:be:3e:ba:4b:2e:7e:32:59:29:61:e0:6a:bc:
         11:19:03:84:7f:d1:db:4d:73:b7:7c:61:cd:e9:9f:be:3d:24:
         d7:6d:c2:71:7a:74:1a:76:8e:38:c9:93:a1:1c:23:22:ae:aa:
         c3:0d:c5:bc:7b:74:0b:4d:c8:7f:be:6d:d6:fd:95:f2:69:db:
         f5:70:37:eb:91:ed:73:da:34:06:95:94:e7:a5:d2:0a:dd:09:
         93:68:47:92:e1:c7:4b:8f:27:d2:27:64:ac:bb:b9:52:f6:22:
         e0:1e:1f:29:29:dc:66:4e:e5:01:30:c0:34:70:53:5d:24:e8:
         f2:3c:d2:55:a8:8d:40:c8:89:30:94:f8:ec:61:d8:b0:93:80:
         e1:2d:b8:73:57:4a:00:39:53:99:2b:45:9c:3d:21:cf:e7:30:
         c9:8c:b5:d2:7c:4f:90:0a:b5:c5:24:25:73:01:2e:5b:4c:72:
         2e:ef:f8:59:12:af:92:34:75:b4:34:fc:8d:ff:23:55:0d:80:
         ec:e6:4a:f0:3b:6e:18:43:88:af:e6:e6:36:dc:a2:1a:b8:80:
         b3:4b:6e:ee:92:47:0c:e6:6c:1f:65:37:6a:c4:33:54:22:6f:
         cd:b7:47:c8:d7:09:e7:22:de:b5:30:71:26:53:01:db:d9:bc:
         87:fa:b0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:42:23 2026 by rpki-client