Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e3130342e302f32342d3234203d3e2034383337.roa
File:                     35392e38312e3130342e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier:          sSaZKtLSET9H0iqkNn2txc5dSZqjjuyBfkmm+TCjpVU=
Subject key identifier:   4E:55:47:90:DC:61:30:D4:A2:74:DA:38:16:6E:02:DB:49:D3:D3:7C
Certificate issuer:       /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial:       2FFC09E17BAD131B7F399CA7D56451D5930B2315
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e3130342e302f32342d3234203d3e2034383337.roa
Signing time:             Wed 10 Jun 2026 11:46:52 +0000
ROA not before:           Wed 10 Jun 2026 11:41:52 +0000
ROA not after:            Wed 09 Jun 2027 11:46:52 +0000
asID:                     4837
IP address blocks:        59.81.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 01:16:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:fc:09:e1:7b:ad:13:1b:7f:39:9c:a7:d5:64:51:d5:93:0b:23:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
        Validity
            Not Before: Jun 10 11:41:52 2026 GMT
            Not After : Jun  9 11:46:52 2027 GMT
        Subject: CN=4E554790DC6130D4A274DA38166E02DB49D3D37C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:54:6a:48:fc:19:47:80:4d:aa:77:4c:2a:88:
                    cf:b6:0e:b8:e9:bd:60:c2:66:31:e2:cf:f6:1f:6b:
                    f8:de:d1:e3:5f:72:16:1e:22:ba:2d:2f:ae:07:3c:
                    aa:29:97:78:c8:55:29:89:81:f7:f0:7c:38:45:a8:
                    f0:09:05:33:65:24:1e:0f:bb:a1:21:99:9d:2f:da:
                    40:a4:bf:d9:5c:ae:1b:09:10:cc:13:ce:ae:58:19:
                    07:60:10:2e:77:e1:09:15:0e:01:33:d5:cc:dd:98:
                    18:be:4d:8c:4b:87:88:1a:49:ea:cf:78:61:68:84:
                    15:e6:cf:ad:68:9e:91:e0:ae:9d:9c:d9:f4:9f:50:
                    b5:fb:07:39:6d:23:7d:8a:08:39:ea:c9:4f:40:89:
                    9f:23:f8:68:5f:30:9d:ad:b6:c7:d6:bb:16:a3:df:
                    f6:57:ef:db:1c:34:be:ff:3a:11:0b:71:4c:c8:b5:
                    6f:99:75:b6:60:f6:7f:9c:b6:e2:95:f4:2f:51:d5:
                    e4:0d:ef:11:d4:d0:f7:6d:1e:6e:1b:6f:74:d5:e4:
                    ca:af:7a:63:0f:87:69:e6:68:2d:91:76:94:5e:27:
                    16:06:ec:d3:49:ff:3a:0a:74:5f:bd:99:11:62:66:
                    97:41:a6:dc:89:e5:04:c0:a3:2a:df:af:fd:4d:40:
                    f4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:55:47:90:DC:61:30:D4:A2:74:DA:38:16:6E:02:DB:49:D3:D3:7C
            X509v3 Authority Key Identifier:
                keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e3130342e302f32342d3234203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.81.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:d8:38:31:9f:57:14:9f:d3:4a:90:21:f1:22:37:de:88:55:
         22:44:c2:21:72:52:f0:88:79:d8:74:65:e6:de:f3:6d:99:0f:
         4c:ba:18:11:e4:59:b2:e3:67:ee:84:9b:38:83:57:8a:74:81:
         c6:b5:97:9d:fc:80:39:d8:d2:5c:6a:2f:c7:02:3e:08:a4:4f:
         70:52:99:25:79:10:7f:91:43:b0:e1:61:71:b7:a0:f2:33:78:
         f9:40:df:6d:77:b2:da:0f:97:9d:f2:a9:4e:70:4c:98:8f:5d:
         d6:d0:b0:e3:b1:26:2a:56:b8:64:bd:40:e1:0a:93:4c:e3:3b:
         f9:10:21:c3:b4:7c:c9:00:7b:a4:7b:2d:cb:38:29:2c:8a:1b:
         7b:2c:ec:67:16:d4:27:9d:e5:93:d5:21:bc:3a:1d:58:a2:50:
         38:fb:8d:61:f2:e2:35:0e:a6:1c:5a:45:42:c3:f7:ac:57:3b:
         2f:d4:4e:69:0b:dc:c7:e1:c6:8b:34:94:32:df:6f:ea:bb:30:
         36:2d:f9:92:c8:1f:0d:ba:c7:e4:2f:bf:75:3d:b2:a9:db:0c:
         ee:c7:4f:3c:67:a8:20:40:e8:c5:25:b6:73:f2:b7:74:f5:0b:
         32:b1:bd:db:86:e4:74:db:82:48:66:2b:44:0e:86:08:d7:9a:
         63:32:a9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:34 2026 by rpki-client