Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/AS58466.roa
File:                     AS58466.roa (raw, json)
Hash identifier:          r7bGmLBfvhXYayeMtM0xTPcAHPRkmPDxrEy0xZn8OrU=
Subject key identifier:   97:B4:50:93:52:4F:11:2D:95:DE:BA:EE:9D:5E:D5:BD:85:50:A2:4F
Certificate issuer:       /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial:       0A78E43508B175F31BCF6848959CED3D9C8F5458
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/AS58466.roa
Signing time:             Wed 20 May 2026 07:07:51 +0000
ROA not before:           Wed 20 May 2026 07:02:51 +0000
ROA not after:            Wed 19 May 2027 07:07:51 +0000
asID:                     58466
IP address blocks:        117.51.168.0/22 maxlen: 22
                          117.51.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 May 2026 14:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:78:e4:35:08:b1:75:f3:1b:cf:68:48:95:9c:ed:3d:9c:8f:54:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
        Validity
            Not Before: May 20 07:02:51 2026 GMT
            Not After : May 19 07:07:51 2027 GMT
        Subject: CN=97B45093524F112D95DEBAEE9D5ED5BD8550A24F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:87:c4:b8:f7:9c:64:f7:26:26:83:fc:62:70:
                    8e:4f:96:75:f4:45:7e:86:b1:b0:81:01:84:09:3c:
                    57:fe:61:de:06:2b:da:4e:64:a1:ee:71:ad:01:7c:
                    86:6a:92:86:2e:25:9f:16:89:e8:b9:0b:fa:92:5c:
                    84:fc:9e:36:1f:08:0d:c8:0f:7c:9b:f9:ef:e7:a2:
                    9f:e0:46:d6:a6:7e:0d:6c:24:36:99:e4:77:d6:82:
                    26:2b:55:e2:a7:e5:1c:ab:5f:c8:f5:f6:ad:2c:38:
                    48:22:1c:f7:a3:72:7a:a9:9d:cb:26:c9:15:90:2e:
                    4f:94:dc:55:b2:c7:80:12:02:ed:23:e2:b9:d3:f6:
                    67:21:d7:a6:f2:76:75:32:84:9a:a3:20:6f:f0:9d:
                    4b:83:1a:29:91:d7:83:1a:ec:f2:d0:39:98:b2:9d:
                    be:fa:5e:1b:4c:b8:66:de:25:36:9e:44:c5:11:64:
                    73:0d:de:a3:82:bf:33:b3:b4:7b:44:83:89:66:01:
                    f8:09:83:ed:b3:48:4c:8b:e1:80:56:8e:a2:24:37:
                    33:d0:4e:5f:02:9a:ee:8a:3c:d2:72:b2:9c:23:70:
                    d3:a5:22:71:06:ef:a0:c7:6b:eb:ed:39:78:e1:46:
                    ff:ec:69:ff:0d:60:a5:28:54:07:ec:32:f2:13:e3:
                    74:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B4:50:93:52:4F:11:2D:95:DE:BA:EE:9D:5E:D5:BD:85:50:A2:4F
            X509v3 Authority Key Identifier:
                keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/AS58466.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.51.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8c:c8:e8:97:4d:fa:00:f7:89:7d:8d:9d:75:2c:a9:06:84:45:
         92:7f:6a:67:4a:96:98:2d:3f:1d:34:17:d0:1e:58:8d:e8:95:
         48:ec:d1:b7:81:c3:33:f4:fa:6b:91:43:3f:ae:5a:ab:9a:ae:
         03:38:07:4c:55:32:85:72:11:2a:00:fd:31:31:dc:3c:19:1b:
         64:ac:12:f4:b2:9d:bd:74:58:c0:e2:27:0e:a0:e5:e8:a9:80:
         9f:5f:d3:e4:c4:37:97:79:63:fc:42:4c:a0:0b:2c:2e:02:66:
         fe:a0:31:0d:de:d8:1f:0c:34:10:e4:ef:77:73:1a:39:9d:53:
         3e:cd:0f:92:ea:61:e1:76:78:8d:d1:4a:e0:76:dd:83:36:a8:
         e4:d8:94:be:2a:0a:0d:98:d0:b9:29:09:ab:b8:55:0e:3e:58:
         bf:6f:61:f4:e2:db:47:c0:05:b0:e0:ae:6b:4e:42:99:fd:0c:
         45:c4:7d:e7:92:e6:ae:a0:96:78:f2:7b:11:9d:3d:1a:f2:78:
         44:8a:03:b2:6b:2c:bf:4b:4b:a7:83:a2:b3:3c:f9:b8:6a:ea:
         79:50:ae:75:97:1f:bb:52:c4:9f:67:e7:94:9d:6f:89:20:89:
         31:b3:93:73:64:81:28:2f:71:e6:15:ac:92:15:fe:4e:18:4f:
         29:38:b5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:07:16 2026 by rpki-client