Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/35392e38332e3232302e302f32342d3234203d3e20313430373137.roa
File:                     35392e38332e3232302e302f32342d3234203d3e20313430373137.roa (raw, json)
Hash identifier:          ea57OC1vE9yVyYUplRnKiH7efGFzxSaxw7uxfxPc6iI=
Subject key identifier:   FB:68:1C:A3:87:03:38:F7:42:8D:1E:DB:67:8B:0C:E8:DF:B9:06:33
Certificate issuer:       /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial:       78F5A827EEBFF65E402F8058B533606DBA73340B
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/35392e38332e3232302e302f32342d3234203d3e20313430373137.roa
Signing time:             Wed 03 Jun 2026 06:21:55 +0000
ROA not before:           Wed 03 Jun 2026 06:16:55 +0000
ROA not after:            Wed 02 Jun 2027 06:21:55 +0000
asID:                     140717
IP address blocks:        59.83.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f5:a8:27:ee:bf:f6:5e:40:2f:80:58:b5:33:60:6d:ba:73:34:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
        Validity
            Not Before: Jun  3 06:16:55 2026 GMT
            Not After : Jun  2 06:21:55 2027 GMT
        Subject: CN=FB681CA3870338F7428D1EDB678B0CE8DFB90633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6e:27:d3:93:6a:d2:d4:e1:e8:8c:df:80:df:
                    c1:f4:ed:1f:4f:fe:9a:37:94:ea:60:6a:4f:43:62:
                    7f:7e:5a:48:54:08:f4:bf:5c:ec:a4:da:e1:81:05:
                    74:b2:6c:d9:75:8b:51:e0:13:4e:68:e7:b2:e8:fe:
                    e0:23:0a:82:74:03:9e:28:e9:69:5a:27:bb:e8:1d:
                    e4:af:d8:c1:3f:ad:de:24:15:6b:0d:99:fb:b5:af:
                    f8:3b:0a:66:8a:16:a6:6f:d9:49:8a:c4:96:ee:9f:
                    c1:95:7e:53:7c:90:81:5f:45:dd:e8:11:07:20:d3:
                    4b:ee:69:38:9b:53:5b:c7:69:d2:25:dd:66:de:0c:
                    5c:19:c1:ae:50:13:56:2f:c9:d8:8b:4c:4f:c8:30:
                    42:b4:02:53:1d:f8:99:33:93:92:1a:45:5c:e9:0c:
                    9b:d5:21:94:49:af:6a:7b:b1:63:6b:e7:a2:64:43:
                    48:0d:f7:42:3e:9a:46:43:fa:4b:07:f6:84:14:8e:
                    01:80:d2:8f:68:4a:de:5c:cd:e4:e2:80:63:76:f7:
                    5c:77:05:bf:24:ab:96:4d:ca:17:72:1c:7f:00:7a:
                    bd:f7:91:1b:56:47:03:b1:02:59:0d:20:94:23:b7:
                    20:39:fc:f3:9a:02:c2:fa:17:dd:ef:9d:8d:58:db:
                    bd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:68:1C:A3:87:03:38:F7:42:8D:1E:DB:67:8B:0C:E8:DF:B9:06:33
            X509v3 Authority Key Identifier:
                keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/35392e38332e3232302e302f32342d3234203d3e20313430373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.83.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:77:5f:65:23:24:a4:62:6e:41:c2:5b:56:20:43:9d:87:8e:
         22:85:f2:a9:f9:e5:90:a4:71:35:61:cf:4f:c4:f9:4a:78:b6:
         cf:3c:91:1c:ab:49:8d:a2:4a:68:dc:d4:3e:39:09:9a:09:c9:
         da:89:3c:17:f4:4f:c1:5b:28:35:a7:f3:93:1c:a2:d0:cb:02:
         a0:ef:b2:d1:ef:90:92:1f:ba:92:13:b7:eb:c9:30:1d:33:b2:
         f4:cf:e3:c5:8e:ee:22:a9:a7:66:e2:f8:b7:90:64:95:6c:80:
         68:3b:71:ff:4a:fd:3c:a1:e0:5e:a5:2d:5f:48:f1:da:95:e1:
         bd:0c:17:1e:be:4d:d3:a0:86:ef:10:bc:20:ba:e2:20:f7:63:
         ae:37:68:7f:95:56:d1:46:1f:08:08:99:c4:a3:0d:06:dc:2b:
         51:29:44:bc:8a:71:25:b2:1a:03:38:d0:e9:4c:59:f0:a4:0f:
         8a:92:c4:e0:c2:81:31:95:46:c7:5c:75:ea:ab:46:40:8f:66:
         29:5b:98:e6:6c:73:1d:b0:15:cb:0a:7c:d5:65:c4:72:ad:ea:
         ae:8e:16:1c:cb:28:d0:7d:94:aa:1a:8a:94:ee:cf:f9:54:ee:
         5c:ae:54:a9:ad:89:f4:b1:fe:5d:41:3b:ce:31:05:76:d9:0d:
         cc:c9:06:76
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:59 2026 by rpki-client