Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/35392e38332e3231392e302f32342d3234203d3e20313430373136.roa
File:                     35392e38332e3231392e302f32342d3234203d3e20313430373136.roa (raw, json)
Hash identifier:          tWf4ywXFBgp/DhXMfNxC6PAZioy/J/xdkMd/IM6wSjs=
Subject key identifier:   01:C1:3D:B3:88:2D:97:2D:25:3A:4B:76:17:D1:BF:AC:7E:9E:0A:AD
Certificate issuer:       /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial:       22FAEE140DEA66BB26E28B67C6838CDAD4CCE45B
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/35392e38332e3231392e302f32342d3234203d3e20313430373136.roa
Signing time:             Wed 03 Jun 2026 06:21:55 +0000
ROA not before:           Wed 03 Jun 2026 06:16:55 +0000
ROA not after:            Wed 02 Jun 2027 06:21:55 +0000
asID:                     140716
IP address blocks:        59.83.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:fa:ee:14:0d:ea:66:bb:26:e2:8b:67:c6:83:8c:da:d4:cc:e4:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
        Validity
            Not Before: Jun  3 06:16:55 2026 GMT
            Not After : Jun  2 06:21:55 2027 GMT
        Subject: CN=01C13DB3882D972D253A4B7617D1BFAC7E9E0AAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:73:14:a2:72:2a:fa:fd:8d:66:31:34:61:6a:
                    a5:01:35:f6:d5:f2:75:7f:01:12:ce:0c:87:b9:c4:
                    a1:c5:9e:57:38:c1:1b:10:dc:16:4c:41:1f:d5:4b:
                    80:02:6c:63:34:64:a8:d8:4b:b3:85:d6:17:97:af:
                    86:79:14:98:b1:ea:94:f9:f8:fc:9f:c9:eb:62:99:
                    2d:c8:c2:c9:d9:e0:7a:21:b2:58:01:e9:5c:85:d4:
                    6e:06:3f:d4:cf:cd:b2:f8:39:d0:0a:0c:60:ae:f2:
                    79:9e:af:82:68:b0:18:38:46:c5:ea:4a:38:f2:13:
                    75:70:bc:40:74:fa:a7:8e:bf:a8:c6:de:53:b1:e8:
                    71:44:f9:7d:f3:9e:c3:70:a1:be:93:cb:38:fa:ca:
                    a9:91:fb:46:a7:4d:b0:0e:3e:97:be:c9:81:9f:2c:
                    ad:89:a9:2a:78:29:af:a6:7b:cf:b7:b2:71:3e:a0:
                    56:bf:fc:ed:7e:53:fb:7c:75:0f:7c:b9:e2:4e:f5:
                    dd:10:7a:b5:f7:ad:7e:4a:fd:d9:6b:c8:28:6b:91:
                    e9:38:7c:39:e3:01:ff:52:ef:3f:93:55:48:e1:2d:
                    3d:d3:b9:8f:f4:03:2f:a2:7c:20:e4:77:84:73:33:
                    98:88:d4:03:74:91:1d:eb:03:de:28:b5:de:f1:b4:
                    53:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C1:3D:B3:88:2D:97:2D:25:3A:4B:76:17:D1:BF:AC:7E:9E:0A:AD
            X509v3 Authority Key Identifier:
                keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/35392e38332e3231392e302f32342d3234203d3e20313430373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.83.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:df:ae:25:c2:3e:04:8a:6d:5a:83:de:c3:b0:e8:71:a1:c9:
         15:92:93:8f:79:35:9e:9f:78:69:69:ba:96:16:e0:b5:41:2a:
         15:36:10:72:6b:c3:71:8c:85:65:c5:2b:91:6f:af:b2:8c:0b:
         57:c0:ea:bc:9a:dd:b7:c8:ee:32:d5:9a:c3:ab:2e:12:19:19:
         07:a4:e1:d6:1b:93:a3:f1:6f:73:f2:54:4d:04:e1:2b:84:f4:
         a2:8c:ad:b4:dd:f9:f3:20:93:eb:c3:cb:39:2f:b7:e2:7b:e3:
         e0:1c:f5:6c:58:f1:9a:2b:93:6d:54:eb:37:0b:09:66:62:53:
         fc:78:c6:6e:2f:1a:1d:0b:8d:24:a1:ad:68:00:49:ac:d2:bf:
         17:8d:3c:d7:05:cb:6c:0c:42:03:66:cc:f8:ad:16:83:ec:e5:
         17:80:3a:c1:0e:ce:6b:24:19:12:54:37:e0:8f:19:f4:47:4b:
         60:0e:80:3a:d6:b6:df:c1:91:eb:38:62:47:fa:6d:3f:dd:12:
         70:11:5f:52:96:cb:8c:a9:7f:10:1d:e8:db:da:6e:83:26:0d:
         e2:47:19:43:97:30:95:8c:db:8e:8c:8d:d0:64:ac:cf:6c:5b:
         79:ae:29:4d:44:41:4a:19:4b:3b:d1:19:24:5e:26:f5:ef:b6:
         58:84:fc:25
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:59 2026 by rpki-client