Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e38322e302f32332d3233203d3e2034383337.roa
File:                     35392e38312e38322e302f32332d3233203d3e2034383337.roa (raw, json)
Hash identifier:          oe7uXPt0NboWdZfwDzl8iMx8RhSdyj8dBD7KgsXB0SA=
Subject key identifier:   09:82:D0:A1:2B:16:F7:0F:B1:36:1B:C5:D0:6C:E7:8C:B9:F8:D5:74
Certificate issuer:       /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial:       463D674574E03BE24C6F911EC20B753AE5BB65F2
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e38322e302f32332d3233203d3e2034383337.roa
Signing time:             Wed 10 Jun 2026 11:41:35 +0000
ROA not before:           Wed 10 Jun 2026 11:36:35 +0000
ROA not after:            Wed 09 Jun 2027 11:41:35 +0000
asID:                     4837
IP address blocks:        59.81.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 01:16:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:3d:67:45:74:e0:3b:e2:4c:6f:91:1e:c2:0b:75:3a:e5:bb:65:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
        Validity
            Not Before: Jun 10 11:36:35 2026 GMT
            Not After : Jun  9 11:41:35 2027 GMT
        Subject: CN=0982D0A12B16F70FB1361BC5D06CE78CB9F8D574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3e:9a:95:30:59:e5:c9:9d:86:98:5f:cf:18:
                    f6:be:a5:d0:d9:ae:01:6c:38:15:51:17:84:f2:69:
                    00:81:d8:0b:a0:64:2c:70:69:a9:32:c0:c3:4d:24:
                    04:23:74:a4:0e:f0:65:49:de:f8:f8:ea:db:f7:8e:
                    b7:a0:9f:c3:0f:d3:99:39:38:7d:5b:e1:b6:e5:61:
                    fe:31:cc:76:0f:79:99:2f:9d:fc:76:88:54:07:90:
                    93:96:26:42:6b:47:23:96:b6:04:0e:73:b3:e3:e0:
                    22:87:ab:d2:36:2a:54:a6:ed:13:06:02:1b:91:20:
                    ed:c9:8f:0d:c9:28:d0:7d:60:e2:6f:78:1d:2a:a8:
                    c6:72:f4:cd:96:c4:a8:a2:41:ae:38:90:04:02:58:
                    20:c7:b4:70:6f:56:46:e7:ab:db:63:2b:b0:51:bc:
                    5a:96:a2:bb:06:70:03:08:37:13:ae:1a:dd:64:41:
                    3d:63:09:90:6e:f4:fa:a4:7d:96:7e:d2:8f:23:0a:
                    70:61:bb:b9:e9:4e:bb:bf:4d:63:ea:66:2a:20:6f:
                    e5:bb:49:c0:78:c9:78:d4:ff:d9:03:a8:99:68:6f:
                    b2:fa:83:03:72:0f:95:d4:73:f8:5d:2f:ec:39:67:
                    0c:37:de:00:67:0b:ca:64:11:71:eb:ea:f9:60:d8:
                    8a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:82:D0:A1:2B:16:F7:0F:B1:36:1B:C5:D0:6C:E7:8C:B9:F8:D5:74
            X509v3 Authority Key Identifier:
                keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e38322e302f32332d3233203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.81.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:87:30:ec:c6:1a:ab:52:05:95:3f:b5:62:31:31:12:94:3a:
         f3:5a:c9:41:a4:4e:67:a6:94:54:0b:76:52:09:93:73:37:13:
         93:2f:36:99:39:b4:f2:a4:04:63:05:34:00:f9:3a:04:af:1a:
         2c:a8:aa:6d:c1:7b:e4:26:be:00:aa:7e:d4:b5:a8:08:fb:72:
         ec:b1:42:89:e3:b0:e2:ff:b7:e2:fc:a8:c2:9e:63:a9:bb:51:
         ce:5d:aa:83:6d:94:c1:22:cc:55:e8:76:e0:96:44:ed:93:59:
         b5:01:df:72:20:15:f9:a5:fd:29:56:49:c1:2c:56:59:e8:43:
         a8:cd:b2:ae:6c:75:86:24:5a:e9:ae:c7:f1:ba:1b:e9:eb:30:
         45:27:a6:67:81:c4:fe:ab:7f:70:ab:de:07:89:26:d7:c2:c3:
         da:05:a7:91:50:15:bb:d1:1e:6a:85:08:86:16:ae:06:a9:a5:
         d7:72:15:9a:2d:08:50:cb:6e:0b:74:ab:0f:7e:71:23:90:29:
         19:09:d9:0f:fa:dd:3d:0a:23:e6:86:c1:fd:c5:f0:b1:79:02:
         48:f0:6b:39:af:79:90:8c:94:83:3e:67:08:d3:f0:83:8c:24:
         95:0e:97:2e:78:7f:77:8e:cb:7b:c4:a6:b4:15:16:21:e3:4c:
         16:8b:04:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:31 2026 by rpki-client