Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e382e302f32342d3234203d3e2034383337.roa
File:                     35392e38312e382e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier:          GHY+0AFesSpRhUUZxWE9mtQgdQOaKR/NEp5gCzDTWgQ=
Subject key identifier:   F4:F1:D3:53:F2:3F:D4:A4:FD:7A:B4:ED:EC:A0:39:1F:3F:CA:9D:A5
Certificate issuer:       /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial:       3A586D27823CEB63C578D1BC6FE2E1DD16714F58
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e382e302f32342d3234203d3e2034383337.roa
Signing time:             Wed 10 Jun 2026 11:42:25 +0000
ROA not before:           Wed 10 Jun 2026 11:37:25 +0000
ROA not after:            Wed 09 Jun 2027 11:42:25 +0000
asID:                     4837
IP address blocks:        59.81.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 01:16:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:58:6d:27:82:3c:eb:63:c5:78:d1:bc:6f:e2:e1:dd:16:71:4f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
        Validity
            Not Before: Jun 10 11:37:25 2026 GMT
            Not After : Jun  9 11:42:25 2027 GMT
        Subject: CN=F4F1D353F23FD4A4FD7AB4EDECA0391F3FCA9DA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:46:dc:1d:1e:e0:77:97:43:9c:e2:ab:36:84:
                    9a:da:4d:b3:19:a8:2a:90:ad:e3:69:37:12:dc:c2:
                    1c:01:d0:29:67:59:ee:fc:5c:5f:55:f4:de:eb:68:
                    9e:81:48:85:2a:4e:63:a3:ea:08:41:e2:d9:ba:b2:
                    59:fc:2e:20:1c:44:c8:56:9a:d5:86:cf:9f:fc:a0:
                    3c:e6:de:34:4c:08:d3:c7:c8:3c:e0:34:ba:8e:51:
                    13:cb:b3:74:e0:b8:32:0e:6c:e9:37:3c:46:cf:94:
                    a3:ff:52:94:2f:b9:bc:86:32:95:19:e4:2f:f8:6c:
                    67:23:1b:ed:03:f4:7e:95:39:37:62:e7:f7:93:98:
                    6b:d7:ee:16:14:fe:1e:95:6d:06:70:78:e8:c9:0d:
                    d2:ad:ac:ef:78:b9:5a:26:c1:a1:cf:9b:d6:cf:b8:
                    a8:53:2e:d6:e8:81:98:34:92:96:ac:cf:2d:e0:ee:
                    0e:28:bb:ed:46:dd:53:9c:b3:ad:1e:5a:b9:a8:3e:
                    58:e4:55:ca:77:26:64:07:66:67:c5:ad:78:b0:97:
                    db:46:ae:f2:2d:a9:1f:48:2e:6d:12:ef:45:0f:55:
                    e9:d5:5c:0d:cb:dc:67:3d:9d:83:a9:01:e2:5a:5e:
                    09:af:99:ea:eb:94:95:b3:2e:31:d8:eb:1b:17:2d:
                    a9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F1:D3:53:F2:3F:D4:A4:FD:7A:B4:ED:EC:A0:39:1F:3F:CA:9D:A5
            X509v3 Authority Key Identifier:
                keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e382e302f32342d3234203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.81.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:43:1f:02:55:98:a0:db:25:b4:14:3b:b3:9c:e2:a6:d8:e1:
         39:b3:ec:e0:59:fb:54:c2:5d:e8:33:4b:5a:6c:83:f6:50:7f:
         52:d4:1b:d7:f5:5a:49:99:d5:d4:d5:db:99:3c:88:b4:4e:e6:
         41:ac:00:a2:de:b6:0c:81:5b:76:5c:0b:bb:0b:29:bf:74:1a:
         61:dd:03:42:bb:6e:74:21:1c:be:39:08:1b:f9:eb:ad:b8:f0:
         a7:52:50:b5:c6:38:0f:80:98:f0:7e:a0:07:93:26:86:1a:31:
         56:6d:bc:14:7f:9e:09:8c:80:a0:69:dc:e6:0f:c4:d3:3e:6d:
         1a:85:f9:c9:1c:ea:a7:f4:54:a4:b8:a3:ed:e1:5a:3e:06:78:
         38:84:4c:e2:43:75:26:a1:ff:c8:c6:ca:9c:b5:e1:61:e6:04:
         0e:b1:49:da:2f:53:55:a2:62:70:ed:c0:8a:56:dd:55:16:1b:
         88:35:ee:18:73:05:7c:ff:ce:f2:0f:0e:36:86:a3:61:f1:2d:
         1c:44:96:e2:9f:99:71:48:8c:fa:eb:19:da:39:43:29:08:66:
         75:76:81:5b:06:63:e1:24:64:45:34:83:1d:1f:5b:59:4f:c4:
         a5:8e:54:7a:07:ea:ca:25:27:91:58:86:ab:c1:b0:a8:7d:2c:
         52:c9:26:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:29 2026 by rpki-client