Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e39342e302f32332d3233203d3e2034383337.roa
File:                     35392e38312e39342e302f32332d3233203d3e2034383337.roa (raw, json)
Hash identifier:          GDgkGF9NvlpL9WdJBgGNdCk0UoTXw3QLXJ4nhJH8ZzY=
Subject key identifier:   4C:BF:32:AA:23:CB:22:2F:FA:09:4B:B1:95:68:CA:EC:26:B4:B1:97
Certificate issuer:       /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial:       4A2B9AC010DC977F1A2E67AE4403E858FAABF032
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e39342e302f32332d3233203d3e2034383337.roa
Signing time:             Wed 10 Jun 2026 11:39:46 +0000
ROA not before:           Wed 10 Jun 2026 11:34:46 +0000
ROA not after:            Wed 09 Jun 2027 11:39:46 +0000
asID:                     4837
IP address blocks:        59.81.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 01:16:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:2b:9a:c0:10:dc:97:7f:1a:2e:67:ae:44:03:e8:58:fa:ab:f0:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
        Validity
            Not Before: Jun 10 11:34:46 2026 GMT
            Not After : Jun  9 11:39:46 2027 GMT
        Subject: CN=4CBF32AA23CB222FFA094BB19568CAEC26B4B197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3b:b3:e8:87:e4:7a:df:a0:64:c1:0d:da:dc:
                    7e:84:f4:54:72:85:16:7a:95:78:7b:8a:08:14:3b:
                    a6:52:2b:38:2a:d8:bc:1e:f1:56:1b:fa:53:cb:e5:
                    5f:28:60:c6:ee:0f:7f:45:df:4d:86:a3:5c:50:4b:
                    18:56:ad:d6:b4:d1:4b:66:cb:b3:d7:d8:fd:d2:78:
                    d7:5d:50:18:d6:e3:b1:29:16:00:33:71:cd:b7:e9:
                    b7:9e:8b:2e:30:1f:18:3a:5e:c2:48:89:d8:8f:39:
                    a6:51:27:3a:c8:a1:61:b0:26:c0:6d:ea:39:c2:e8:
                    ed:89:1a:fb:a7:da:23:33:b4:a4:a6:c4:1f:ad:c7:
                    ec:d0:0b:3b:2b:74:b1:c5:6a:53:e5:d0:59:18:7a:
                    76:03:39:93:78:11:54:29:5e:0b:14:54:a7:94:f1:
                    2a:36:6e:63:80:d8:ba:21:6d:fd:df:5e:32:6e:19:
                    8b:3e:a1:cd:d6:e6:b6:2b:c8:84:72:ef:e0:96:1d:
                    db:42:98:29:fe:bf:35:29:9e:23:1e:50:d7:1f:22:
                    a5:f9:86:ab:1b:f7:30:dc:f7:ee:99:e1:ca:2a:3d:
                    a0:bb:90:ab:18:3c:97:9e:62:19:7b:54:bb:9c:d5:
                    57:b0:9b:21:72:31:d8:ea:1f:1e:e8:9d:df:13:c7:
                    4c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BF:32:AA:23:CB:22:2F:FA:09:4B:B1:95:68:CA:EC:26:B4:B1:97
            X509v3 Authority Key Identifier:
                keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e39342e302f32332d3233203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.81.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:01:6e:38:a0:a3:9d:b7:86:58:79:5b:1a:33:67:e8:ca:c3:
         4c:ed:7e:b9:1b:8a:07:d2:53:05:77:e3:16:5e:ad:aa:f1:fc:
         73:64:4f:a9:91:43:b0:ac:c1:d6:e9:c0:b2:5d:b5:ce:3c:75:
         5e:04:6d:7b:2f:fe:d5:d5:7d:f7:ce:96:03:95:47:d0:30:cb:
         fb:7d:1f:82:63:5f:d2:57:02:be:78:55:a8:f9:97:f2:e2:e0:
         b6:cd:3f:0c:73:c7:3c:b8:60:41:e9:08:bf:6e:29:b6:d7:a7:
         4c:cc:52:15:d3:58:a6:b2:98:bb:ac:65:28:52:0b:e9:1d:95:
         77:8a:62:25:24:b7:aa:d6:3e:f0:42:7f:0f:64:17:0d:ae:c3:
         ad:9a:07:ce:89:b9:65:3b:42:38:db:49:98:cb:82:a9:3a:e1:
         3e:5a:9a:45:43:16:26:f6:9f:d1:72:69:0c:55:61:4e:71:09:
         00:86:64:25:fa:7f:7c:f7:b0:91:5b:7c:e3:55:b6:8a:a8:7a:
         ab:ca:88:f8:60:3f:29:65:df:53:46:a6:d4:1a:36:2a:41:78:
         75:1c:49:5e:80:3b:2c:bd:1b:2d:28:e3:c0:47:64:b8:b1:de:
         cf:3a:77:8f:fa:cf:0c:28:66:13:37:2b:d7:27:51:58:65:16:
         c1:37:b7:a2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUSiuawBDcl38aLmeuRAPoWPqr8DIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI1NkM3RTg3MTMyMTEyNTFBOUY2MTlEQkMzOEQ5OTM5
NEFCQUE5RDAeFw0yNjA2MTAxMTM0NDZaFw0yNzA2MDkxMTM5NDZaMDMxMTAvBgNV
BAMTKDRDQkYzMkFBMjNDQjIyMkZGQTA5NEJCMTk1NjhDQUVDMjZCNEIxOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpO7Poh+R636BkwQ3a3H6E9FRy
hRZ6lXh7iggUO6ZSKzgq2Lwe8VYb+lPL5V8oYMbuD39F302Go1xQSxhWrda00Utm
y7PX2P3SeNddUBjW47EpFgAzcc236beeiy4wHxg6XsJIidiPOaZRJzrIoWGwJsBt
6jnC6O2JGvun2iMztKSmxB+tx+zQCzsrdLHFalPl0FkYenYDOZN4EVQpXgsUVKeU
8So2bmOA2Lohbf3fXjJuGYs+oc3W5rYryIRy7+CWHdtCmCn+vzUpniMeUNcfIqX5
hqsb9zDc9+6Z4coqPaC7kKsYPJeeYhl7VLuc1VewmyFyMdjqHx7ond8Tx0y3AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUTL8yqiPLIi/6CUuxlWjK7Ca0sZcwHwYDVR0j
BBgwFoAUklbH6HEyESUan2GdvDjZk5Srqp0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjcwODc0OTUwNDAyMDQ4Mi8wLzkyNTZDN0U4NzEzMjExMjUxQTlGNjE5REJDMzhE
OTkzOTRBQkFBOUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTI1NkM3RTg3MTMyMTEyNTFBOUY2MTlEQkMzOEQ5OTM5NEFCQUE5RC5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2NzA4NzQ5NTA0MDIwNDgyLzAvMzUzOTJlMzgzMTJl
MzkzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM0MzgzMzM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
O1FeMA0GCSqGSIb3DQEBCwUAA4IBAQCbAW44oKOdt4ZYeVsaM2foysNM7X65G4oH
0lMFd+MWXq2q8fxzZE+pkUOwrMHW6cCyXbXOPHVeBG17L/7V1X33zpYDlUfQMMv7
fR+CY1/SVwK+eFWo+Zfy4uC2zT8Mc8c8uGBB6Qi/bim216dMzFIV01imspi7rGUo
UgvpHZV3imIlJLeq1j7wQn8PZBcNrsOtmgfOibllO0I420mYy4KpOuE+WppFQxYm
9p/RcmkMVWFOcQkAhmQl+n9897CRW3zjVbaKqHqryoj4YD8pZd9TRqbUGjYqQXh1
HElegDssvRstKOPAR2S4sd7POneP+s8MKGYTNyvXJ1FYZRbBN7ei
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:24 2026 by rpki-client