Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/35392e38332e3232372e302f32342d3234203d3e20313430373137.roa
File:                     35392e38332e3232372e302f32342d3234203d3e20313430373137.roa (raw, json)
Hash identifier:          PSjXZ5J1A2eRcaWzIXpYLFiDZ4qLM8AmbxwWwmhcxiI=
Subject key identifier:   CE:1B:E1:F5:B8:6F:28:58:0F:20:47:B5:46:2A:11:31:F6:83:29:15
Certificate issuer:       /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial:       4FD4F61AC234A4B40773289D1248C1365C428891
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/35392e38332e3232372e302f32342d3234203d3e20313430373137.roa
Signing time:             Wed 03 Jun 2026 06:22:51 +0000
ROA not before:           Wed 03 Jun 2026 06:17:51 +0000
ROA not after:            Wed 02 Jun 2027 06:22:51 +0000
asID:                     140717
IP address blocks:        59.83.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d4:f6:1a:c2:34:a4:b4:07:73:28:9d:12:48:c1:36:5c:42:88:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
        Validity
            Not Before: Jun  3 06:17:51 2026 GMT
            Not After : Jun  2 06:22:51 2027 GMT
        Subject: CN=CE1BE1F5B86F28580F2047B5462A1131F6832915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d9:f9:97:6a:64:f2:27:f6:7a:ab:a2:93:7f:
                    c9:e2:b5:f0:d9:f7:b6:8b:70:1f:a6:28:3f:66:62:
                    fd:4c:c3:a9:27:c9:b5:92:bf:cc:6c:3d:36:8e:4d:
                    ef:34:fd:33:f1:e0:4f:09:6e:a1:1b:c4:bf:a9:83:
                    4c:2a:cd:eb:88:eb:fc:47:37:6b:c1:62:93:42:3c:
                    11:1a:0d:52:69:97:11:88:8e:e9:2e:35:61:20:b8:
                    37:64:56:92:11:6e:b3:d1:3d:ff:e3:86:b0:1f:f7:
                    e5:7b:7b:ca:6b:4a:80:f7:ac:f2:87:23:23:99:cd:
                    07:15:4e:73:7b:8d:3d:92:8b:3e:53:fd:74:78:4d:
                    06:2d:cb:67:4a:a1:77:4b:1d:30:af:96:44:33:1c:
                    51:62:95:60:4c:1d:f4:ac:79:8f:ba:7d:fb:ff:63:
                    e6:11:20:c5:e0:30:0d:d3:da:f9:30:b8:4c:15:5d:
                    9e:1b:bc:92:3a:e5:ab:dd:78:b1:94:31:88:c3:58:
                    e2:76:09:b3:e8:f9:96:5a:95:74:31:8b:cc:08:80:
                    c6:bd:20:d6:85:c3:b4:86:fd:bd:f9:0d:25:f7:1f:
                    89:53:4c:cb:0a:9e:e3:e1:99:0e:d5:29:9a:49:62:
                    5f:c4:1b:ed:05:ae:5a:74:26:95:d5:38:b1:55:68:
                    d3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1B:E1:F5:B8:6F:28:58:0F:20:47:B5:46:2A:11:31:F6:83:29:15
            X509v3 Authority Key Identifier:
                keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/35392e38332e3232372e302f32342d3234203d3e20313430373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.83.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:42:3f:4f:16:97:ca:8f:6b:1c:b3:04:b0:0a:13:86:e2:5f:
         aa:29:d3:3f:ef:12:15:89:4b:9f:80:7a:64:f6:bb:5d:28:8e:
         72:74:33:e8:fa:53:58:c4:7a:86:61:99:cb:84:df:bd:61:0f:
         1e:3d:80:dc:88:04:11:fc:ba:5b:6a:5e:f4:7b:5e:bd:4a:de:
         26:8c:55:ec:aa:20:28:56:35:1a:7f:ae:cb:1f:ee:d4:91:70:
         2c:47:91:5e:4f:d2:1d:e9:82:a7:44:79:53:44:bf:04:7d:e3:
         61:ea:e5:38:6f:3c:17:41:fd:3b:fd:d9:1b:5c:00:8c:8b:ae:
         33:9b:d3:81:1c:d4:bc:74:bd:4c:61:55:31:6f:6b:61:c1:6f:
         d6:ad:4a:b8:aa:49:dc:3e:1e:e9:8d:3f:37:54:ff:47:fb:fb:
         57:aa:d4:75:a7:dd:bd:ae:6e:d3:fb:1d:64:ec:c5:fe:27:86:
         62:d1:3b:55:56:b4:26:8f:4f:36:f9:87:95:f8:42:18:79:3a:
         7c:fb:3d:29:a7:5d:f4:9a:8a:f7:4f:89:fe:5d:2a:5d:82:f5:
         94:85:da:e2:58:ba:ae:81:9b:7e:90:b8:dd:aa:17:98:ef:ce:
         5d:ed:61:10:12:39:0c:ff:ce:12:be:78:10:f5:31:ac:37:57:
         a2:e9:fe:99
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUT9T2GsI0pLQHcyidEkjBNlxCiJEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYz
NUI3ODFERDAeFw0yNjA2MDMwNjE3NTFaFw0yNzA2MDIwNjIyNTFaMDMxMTAvBgNV
BAMTKENFMUJFMUY1Qjg2RjI4NTgwRjIwNDdCNTQ2MkExMTMxRjY4MzI5MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb2fmXamTyJ/Z6q6KTf8nitfDZ
97aLcB+mKD9mYv1Mw6knybWSv8xsPTaOTe80/TPx4E8JbqEbxL+pg0wqzeuI6/xH
N2vBYpNCPBEaDVJplxGIjukuNWEguDdkVpIRbrPRPf/jhrAf9+V7e8prSoD3rPKH
IyOZzQcVTnN7jT2Siz5T/XR4TQYty2dKoXdLHTCvlkQzHFFilWBMHfSseY+6ffv/
Y+YRIMXgMA3T2vkwuEwVXZ4bvJI65avdeLGUMYjDWOJ2CbPo+ZZalXQxi8wIgMa9
INaFw7SG/b35DSX3H4lTTMsKnuPhmQ7VKZpJYl/EG+0Frlp0JpXVOLFVaNPJAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUzhvh9bhvKFgPIEe1RioRMfaDKRUwHwYDVR0j
BBgwFoAUNyKsyLLlVAISHurgGUye1jW3gd0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NDM1Njg1NjI2NTk2NTU4NS8wLzM3MjJBQ0M4QjJFNTU0MDIxMjFFRUFFMDE5NEM5
RUQ2MzVCNzgxREQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYzNUI3ODFERC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTExNDM1Njg1NjI2NTk2NTU4NS8wLzM1MzkyZTM4MzMy
ZTMyMzIzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMDM3MzEzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEADtT4zANBgkqhkiG9w0BAQsFAAOCAQEAr0I/TxaXyo9rHLMEsAoThuJf
qinTP+8SFYlLn4B6ZPa7XSiOcnQz6PpTWMR6hmGZy4TfvWEPHj2A3IgEEfy6W2pe
9HtevUreJoxV7KogKFY1Gn+uyx/u1JFwLEeRXk/SHemCp0R5U0S/BH3jYerlOG88
F0H9O/3ZG1wAjIuuM5vTgRzUvHS9TGFVMW9rYcFv1q1KuKpJ3D4e6Y0/N1T/R/v7
V6rUdafdva5u0/sdZOzF/ieGYtE7VVa0Jo9PNvmHlfhCGHk6fPs9Kadd9JqK90+J
/l0qXYL1lIXa4li6roGbfpC43aoXmO/OXe1hEBI5DP/OEr54EPUxrDdXoun+mQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:57 2026 by rpki-client