Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/35392e38332e3139322e302f31392d3139203d3e2034383337.roa
File:                     35392e38332e3139322e302f31392d3139203d3e2034383337.roa (raw, json)
Hash identifier:          e1TkPgQdUwZsdy77LDTJSf7yk4gZ0lz6jCh7irNsXko=
Subject key identifier:   59:CB:8B:93:C2:3E:1D:A5:DA:9C:C6:91:1C:F3:E6:E8:D5:62:1F:43
Certificate issuer:       /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial:       22A58D8F9419682BEAB1282B7160F6A8AAEE39F1
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/35392e38332e3139322e302f31392d3139203d3e2034383337.roa
Signing time:             Thu 04 Jun 2026 07:16:48 +0000
ROA not before:           Thu 04 Jun 2026 07:11:48 +0000
ROA not after:            Thu 03 Jun 2027 07:16:48 +0000
asID:                     4837
IP address blocks:        59.83.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a5:8d:8f:94:19:68:2b:ea:b1:28:2b:71:60:f6:a8:aa:ee:39:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
        Validity
            Not Before: Jun  4 07:11:48 2026 GMT
            Not After : Jun  3 07:16:48 2027 GMT
        Subject: CN=59CB8B93C23E1DA5DA9CC6911CF3E6E8D5621F43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:13:a5:08:e5:2e:21:3c:c7:f3:cd:b7:31:a5:
                    ad:25:06:cf:81:d4:e1:79:71:25:38:8e:23:5b:e1:
                    87:db:84:cb:79:60:0a:6b:fd:5b:97:a2:06:75:0b:
                    6a:d5:d3:5c:a5:bf:2e:be:71:ea:14:29:c2:b2:d6:
                    95:9f:32:8b:53:1c:b1:64:c5:bd:25:2d:f0:a7:34:
                    fa:57:86:66:48:6b:3f:50:05:62:b8:ae:41:d8:07:
                    9a:ca:13:1b:98:19:a9:d2:39:30:89:b6:65:0c:31:
                    24:44:35:6c:ea:de:b7:2d:16:31:9f:65:39:ab:18:
                    39:9e:bb:fb:85:c1:60:1a:f1:36:02:31:db:ed:c5:
                    54:b9:a3:de:92:bd:a8:05:a0:ef:5c:8e:a0:29:55:
                    fd:fd:1e:a9:30:8b:33:50:f4:d5:8f:d4:ee:e2:0a:
                    60:d6:85:24:97:e7:6c:57:77:72:27:40:7a:04:6c:
                    17:f2:57:90:09:41:28:ab:60:c7:03:9a:c6:c2:4f:
                    24:11:a8:6f:e3:b3:a8:c5:bb:56:c4:a9:2d:9b:26:
                    f6:92:14:64:3d:97:42:1c:85:fa:56:e5:e0:8f:61:
                    75:99:a8:f7:95:8f:6a:84:56:c6:8b:51:42:7f:2a:
                    a8:10:49:b9:a9:b5:ad:09:c6:49:3a:2a:31:4c:59:
                    ff:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CB:8B:93:C2:3E:1D:A5:DA:9C:C6:91:1C:F3:E6:E8:D5:62:1F:43
            X509v3 Authority Key Identifier:
                keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/35392e38332e3139322e302f31392d3139203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.83.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         18:ad:32:4d:6d:7c:a0:41:fe:16:10:ca:34:1a:fb:88:51:1d:
         99:60:0d:ea:b8:bd:f3:ee:1c:da:19:1a:91:90:f9:7d:1c:9d:
         47:8d:05:5f:65:d6:88:29:cc:19:e0:a8:62:81:d9:26:1d:fb:
         7d:31:98:d0:2e:69:25:f1:bf:f7:eb:91:14:20:03:08:2b:6f:
         35:76:31:74:b1:19:aa:25:21:7e:b4:ce:6d:30:16:00:27:52:
         73:f9:42:12:41:28:7d:a8:45:bf:47:90:a5:72:cf:72:30:3a:
         46:fa:29:7f:69:9e:2d:79:bb:15:43:97:ff:16:e8:0f:42:fc:
         92:c4:3e:82:54:6f:df:43:96:32:cd:0e:18:8d:61:32:41:f9:
         3c:99:75:a0:1f:58:1c:2f:ee:1f:bc:66:00:e4:f3:d8:cd:1a:
         52:49:e1:9d:60:eb:26:7d:12:4a:bd:fd:99:02:be:17:c7:3d:
         23:b3:bc:da:1f:e3:c4:50:48:83:e3:c6:70:fb:27:6c:3f:fe:
         01:00:b0:be:38:99:b0:af:be:d9:9a:fc:80:08:ad:ca:6d:6a:
         3d:ec:a2:a7:19:d8:96:02:c7:79:56:e9:04:08:ef:9b:2d:ae:
         28:0f:01:e5:4d:08:80:4f:e1:d6:09:46:95:ed:15:0a:7d:5c:
         65:43:36:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:23 2026 by rpki-client