Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e382e302f32332d3233203d3e2034383337.roa
File:                     35392e38312e382e302f32332d3233203d3e2034383337.roa (raw, json)
Hash identifier:          rF6Fvo2UPpiU5zm4+OzxIb++Wyn4ZGMeHjPB8qPV/hA=
Subject key identifier:   01:E8:3A:F6:00:66:A2:B8:06:76:2E:C4:46:E8:9F:5E:9C:F3:5B:4B
Certificate issuer:       /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial:       5C4AAD3CD67A816E7D80E65B6E819B8A754FA290
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e382e302f32332d3233203d3e2034383337.roa
Signing time:             Wed 10 Jun 2026 11:42:25 +0000
ROA not before:           Wed 10 Jun 2026 11:37:25 +0000
ROA not after:            Wed 09 Jun 2027 11:42:25 +0000
asID:                     4837
IP address blocks:        59.81.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 01:16:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:4a:ad:3c:d6:7a:81:6e:7d:80:e6:5b:6e:81:9b:8a:75:4f:a2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
        Validity
            Not Before: Jun 10 11:37:25 2026 GMT
            Not After : Jun  9 11:42:25 2027 GMT
        Subject: CN=01E83AF60066A2B806762EC446E89F5E9CF35B4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bf:e1:0e:b1:98:59:b1:51:0b:2b:f4:e2:5a:
                    c1:01:76:27:5c:15:d4:2a:42:37:d1:2f:fa:99:94:
                    24:f0:44:a4:3c:5b:07:0c:6e:e3:87:de:75:9e:ac:
                    1d:2c:55:ef:27:2e:6f:bb:31:6b:fb:f0:86:7c:50:
                    ac:2b:36:9a:e1:c4:d1:c4:8e:81:3e:71:01:7c:74:
                    19:50:b4:bd:bf:92:f8:79:0b:91:0a:a5:67:da:77:
                    77:15:12:5b:3a:ad:85:98:52:b0:3e:40:37:48:63:
                    22:a2:33:6e:09:39:16:bb:86:e8:48:76:2c:96:2b:
                    14:d2:9a:70:12:8f:9e:96:e4:72:f9:db:be:82:15:
                    f4:f2:c5:e0:70:91:7d:81:09:f6:18:45:d4:98:41:
                    48:a5:cf:d3:b1:69:a2:af:e2:70:6d:7a:08:51:a7:
                    0d:bc:41:05:47:87:45:be:14:d1:a3:68:db:46:b6:
                    f7:e8:d1:62:18:e7:fb:a6:00:00:f2:c6:a8:fb:1c:
                    f4:83:8d:2f:c5:75:56:d6:db:0c:41:ff:a6:e6:80:
                    e6:77:d1:c6:88:ef:2f:9b:47:58:ca:85:02:3c:6a:
                    a6:47:1f:26:32:14:88:aa:4a:f4:cc:b9:7d:96:7c:
                    fd:d9:71:43:a1:c1:95:1e:55:05:3a:5f:f8:ec:d6:
                    dc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E8:3A:F6:00:66:A2:B8:06:76:2E:C4:46:E8:9F:5E:9C:F3:5B:4B
            X509v3 Authority Key Identifier:
                keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e382e302f32332d3233203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.81.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:5f:2c:ce:62:5c:81:e0:d4:89:9b:e8:b3:57:98:08:75:0f:
         38:21:3e:15:e7:75:d7:29:67:da:93:a6:36:82:34:5d:d0:c5:
         7d:31:4e:4d:0c:99:1e:79:20:c7:71:26:54:f3:e7:1c:89:92:
         c5:70:d0:2e:8b:74:f1:cd:25:4c:a8:80:75:20:42:1a:de:c4:
         6d:a6:c1:6a:9d:81:11:9c:02:f9:1b:4e:27:27:e5:c1:7c:f8:
         52:fb:cc:dc:14:03:bc:88:16:c0:4d:bd:78:15:2c:82:62:86:
         7d:c6:13:69:bf:f7:48:f0:3f:0e:e7:a5:91:88:ce:de:9c:3f:
         29:5d:93:e3:71:5b:79:47:f7:f4:0e:a2:f2:8f:30:2a:a8:23:
         7f:36:ac:c6:26:43:f9:13:0c:0a:54:d0:df:5c:0b:ce:9c:7d:
         03:07:c7:d2:1c:a9:78:75:0f:23:4e:5d:2e:4e:ae:33:3e:66:
         46:8e:e1:ba:b6:01:40:ec:64:05:24:51:26:20:85:70:f6:a6:
         ba:89:48:ed:97:1a:3f:64:70:2b:51:62:d2:07:08:31:58:2f:
         fe:e1:dd:75:07:d0:f7:f7:12:3b:be:c2:a7:dd:db:df:cb:bc:
         4f:55:e7:20:66:20:e3:9b:07:8c:58:16:ce:bb:f8:f5:0a:b4:
         4a:38:b6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:25 2026 by rpki-client