Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e34302e302f32332d3233203d3e2034383337.roa
File:                     35392e38312e34302e302f32332d3233203d3e2034383337.roa (raw, json)
Hash identifier:          UsTYDZ/JwYGcOSdEuVuqERpqeCMe4e2Nyop5XSqV36c=
Subject key identifier:   A9:FA:85:AA:F0:E1:03:CE:46:D1:C0:DE:85:C6:58:3D:4D:E5:1C:21
Certificate issuer:       /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial:       557237C76409BE5088FC2086FCB40DA742ACE6E0
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e34302e302f32332d3233203d3e2034383337.roa
Signing time:             Wed 10 Jun 2026 11:44:49 +0000
ROA not before:           Wed 10 Jun 2026 11:39:49 +0000
ROA not after:            Wed 09 Jun 2027 11:44:49 +0000
asID:                     4837
IP address blocks:        59.81.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 01:16:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:72:37:c7:64:09:be:50:88:fc:20:86:fc:b4:0d:a7:42:ac:e6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
        Validity
            Not Before: Jun 10 11:39:49 2026 GMT
            Not After : Jun  9 11:44:49 2027 GMT
        Subject: CN=A9FA85AAF0E103CE46D1C0DE85C6583D4DE51C21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ab:cd:50:cf:13:9c:96:97:3e:0d:c2:77:64:
                    f7:60:33:4e:b4:f5:e6:bd:70:0c:ae:3e:54:f1:8a:
                    48:4f:27:e6:45:b6:72:3d:72:a3:6b:e5:6a:a2:e6:
                    99:ff:8d:48:f9:6a:d7:be:c3:da:3f:af:dc:e0:c4:
                    8c:d1:84:b4:e8:07:a2:5b:c2:3e:b6:46:63:a1:ff:
                    dc:5a:b6:dd:c4:f8:e7:7a:a9:75:ea:9b:65:0d:0d:
                    c7:69:e2:40:cc:02:10:2f:2b:b0:fa:6c:52:5c:9a:
                    62:48:ff:fa:90:ad:31:1d:aa:01:6c:0e:de:eb:c6:
                    34:a0:fa:38:09:c3:9f:10:91:74:eb:9d:93:d5:5d:
                    4b:92:a5:07:76:6d:c5:d2:78:bb:37:6b:e8:47:ed:
                    94:dc:95:6e:ca:51:7a:69:07:b4:fe:d0:f2:ed:dd:
                    87:f8:2f:04:c7:e6:70:3c:9e:18:bd:72:ad:2e:df:
                    69:10:ac:d9:29:03:01:16:af:c7:c5:8a:08:07:8c:
                    f0:83:8e:fd:fd:8d:98:71:86:12:b4:b3:d0:ad:d1:
                    27:f0:22:0b:bd:7b:df:7a:9b:35:e9:82:50:d7:c8:
                    93:46:58:7e:75:19:f4:51:69:1c:4e:31:7f:7e:09:
                    fd:43:3d:9e:58:9a:76:d5:bf:aa:45:4b:dc:48:c9:
                    23:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FA:85:AA:F0:E1:03:CE:46:D1:C0:DE:85:C6:58:3D:4D:E5:1C:21
            X509v3 Authority Key Identifier:
                keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e34302e302f32332d3233203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.81.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:b9:7a:ae:b0:48:88:c2:57:95:77:68:10:f1:a4:0a:9d:23:
         2d:bb:71:ac:75:c5:b5:3a:fa:a6:0a:fe:bd:20:00:ff:36:55:
         cf:8d:16:c3:ba:85:d8:44:4f:42:18:fe:f3:30:7a:cc:be:1a:
         ac:d8:05:7e:41:3e:86:89:68:77:1a:5f:4e:b9:b4:5c:1b:cb:
         ef:ea:d0:ab:01:ae:70:0b:f5:dc:ea:79:8a:f5:b0:c0:57:80:
         29:57:2e:78:37:7d:37:f7:de:27:de:49:37:93:74:56:82:07:
         b1:5b:68:47:01:1e:57:39:e4:97:b5:e3:5d:6e:99:52:32:7b:
         8b:55:05:af:73:de:1d:1e:b4:d3:07:16:d5:ba:6c:e5:16:37:
         21:e0:66:da:b8:b2:91:bc:3a:44:1c:ad:51:ec:3d:97:77:ce:
         e2:73:73:4e:2b:e7:04:7e:ba:9c:6e:2f:ad:03:ce:c0:89:2c:
         c0:49:e7:90:b3:ad:93:a3:36:12:f2:89:17:99:61:81:00:ce:
         b9:ad:e2:61:ff:64:89:af:ba:9d:65:00:a4:f1:fc:95:f8:26:
         8e:19:39:b2:85:f0:78:58:39:b1:d1:5f:44:16:35:d8:13:70:
         68:e1:92:c0:38:ff:2a:b4:af:25:19:ef:d6:86:95:d6:b7:bb:
         32:ed:16:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:25 2026 by rpki-client