Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38302e302e302f31372d3137203d3e20313334353432.roa
File:                     35392e38302e302e302f31372d3137203d3e20313334353432.roa (raw, json)
Hash identifier:          e7fBAwgo9w4niIyRBbMpqkmluS/g1ZRzv4vGOvU26Lw=
Subject key identifier:   CD:7D:EF:9F:33:06:F6:8C:35:60:6A:23:06:A5:3F:07:B3:BA:79:E4
Certificate issuer:       /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial:       28D390488CC60A176A56A7A638E6893461D75F94
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38302e302e302f31372d3137203d3e20313334353432.roa
Signing time:             Fri 15 May 2026 09:30:25 +0000
ROA not before:           Fri 15 May 2026 09:25:25 +0000
ROA not after:            Fri 14 May 2027 09:30:25 +0000
asID:                     134542
IP address blocks:        59.80.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d3:90:48:8c:c6:0a:17:6a:56:a7:a6:38:e6:89:34:61:d7:5f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
        Validity
            Not Before: May 15 09:25:25 2026 GMT
            Not After : May 14 09:30:25 2027 GMT
        Subject: CN=CD7DEF9F3306F68C35606A2306A53F07B3BA79E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4c:2e:39:97:00:95:a8:65:61:00:40:85:c1:
                    a3:ac:24:72:05:12:91:34:53:05:12:76:7b:ec:df:
                    fc:d2:f7:b8:38:66:1e:14:f6:8c:e3:83:41:69:e0:
                    2d:50:58:1a:4f:2f:1d:23:cb:fa:4e:ed:1c:e2:ba:
                    89:5e:3e:57:f6:e0:bf:12:1a:eb:5b:cd:96:66:71:
                    36:fa:7b:69:1d:57:c3:eb:59:5d:d0:81:88:7b:bf:
                    62:ee:3b:6d:7b:d1:af:20:32:ca:32:31:db:ca:bd:
                    ef:a8:fd:b6:7b:09:f4:3e:f3:f0:2e:6a:4d:36:cd:
                    57:bc:0a:63:8c:d5:c8:c0:ea:9c:ac:30:5f:f4:bd:
                    85:e3:07:56:ac:80:3f:be:e7:23:ca:be:4c:ba:0f:
                    b0:2c:e7:9d:a2:60:f5:97:58:63:a2:58:d6:6e:c1:
                    90:f7:a2:0d:4a:38:81:c0:f5:b5:6e:40:cb:17:10:
                    bf:d2:c2:31:3b:a8:1e:f7:cc:82:4d:0c:90:dd:4a:
                    40:3b:28:f1:c9:b6:06:05:4d:ea:91:1b:e4:26:71:
                    89:88:88:a8:9d:83:7a:ee:e5:b6:af:4f:87:2b:99:
                    b2:35:18:d5:1f:aa:b2:3f:a5:70:e5:31:7a:95:80:
                    ea:3a:c2:fb:fb:6d:c0:e7:79:7b:b8:95:50:bd:8d:
                    db:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7D:EF:9F:33:06:F6:8C:35:60:6A:23:06:A5:3F:07:B3:BA:79:E4
            X509v3 Authority Key Identifier:
                keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38302e302e302f31372d3137203d3e20313334353432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.80.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4b:77:47:b6:3d:89:23:5f:1f:2a:b8:96:fb:3a:a5:fc:6b:13:
         61:0c:01:cb:8d:a8:9e:ad:59:89:87:4a:60:77:ca:69:7f:de:
         c6:1b:6f:e2:bc:7f:87:46:94:f3:9b:f1:0d:56:3b:df:79:4a:
         68:be:cf:8a:bc:87:86:01:84:44:71:ac:8e:b7:79:2a:2c:64:
         9d:e6:93:96:f3:64:ac:ba:41:1b:f5:61:c1:72:d7:6a:f7:ba:
         f4:f6:d2:ee:ce:b7:75:8f:0d:4c:54:6c:a4:c0:10:8a:f6:c1:
         0f:a8:dc:c7:00:3a:0e:f8:a4:f3:2d:0b:87:6a:40:1a:8f:92:
         0f:73:4a:ff:1b:6b:98:53:14:8b:da:c9:5a:c9:5c:d4:f2:66:
         46:24:62:4a:bf:99:96:2c:08:03:72:78:11:59:55:c0:4b:87:
         4e:25:df:df:85:97:b2:09:79:a2:38:96:ab:59:b4:08:76:d2:
         2a:c2:29:dc:53:1f:bd:f8:99:1b:13:07:c0:ad:58:8a:90:96:
         b1:4a:af:b4:36:25:df:c5:b8:69:b0:a7:0c:04:c2:da:f9:1e:
         f2:da:4c:62:04:ca:0f:8c:15:66:57:61:28:1b:0e:85:df:7d:
         de:ab:33:b0:56:86:22:3c:ba:d9:80:c5:a3:1e:8b:2d:66:15:
         6e:b1:fe:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:20 2026 by rpki-client