Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e3132382e302f31372d3234203d3e2032393134.roa
File:                     35392e3130372e3132382e302f31372d3234203d3e2032393134.roa (raw, json)
Hash identifier:          j7dT/jfsXRzmRcsWpGT7k90+hlikzmtypH55i1rccn4=
Subject key identifier:   72:57:6D:70:54:E7:8E:90:AD:6B:EF:29:A2:FB:40:68:83:C5:6A:12
Certificate issuer:       /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial:       0A50CC87A0234ACAD9A270A26593AB20B9B0D9B0
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e3132382e302f31372d3234203d3e2032393134.roa
Signing time:             Fri 11 Sep 2026 12:25:24 +0000
ROA not before:           Fri 11 Sep 2026 12:20:24 +0000
ROA not after:            Fri 10 Sep 2027 12:25:24 +0000
asID:                     2914
IP address blocks:        59.107.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 12:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:50:cc:87:a0:23:4a:ca:d9:a2:70:a2:65:93:ab:20:b9:b0:d9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
        Validity
            Not Before: Sep 11 12:20:24 2026 GMT
            Not After : Sep 10 12:25:24 2027 GMT
        Subject: CN=72576D7054E78E90AD6BEF29A2FB406883C56A12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2a:15:fc:5a:f2:39:5e:8d:34:f1:99:68:61:
                    2a:7b:cd:56:53:1e:8c:a6:2a:e3:51:9f:d3:e5:d5:
                    2c:ea:ee:60:25:91:f7:52:1a:ab:e2:e0:80:cc:b1:
                    4d:9d:f0:93:69:f0:ae:02:1b:d8:3a:a2:c3:cb:2b:
                    03:38:7a:89:52:f0:f9:15:58:67:dc:28:8d:bd:cc:
                    b4:22:fa:da:f8:8a:b4:92:2f:3a:55:c1:36:4a:1c:
                    38:c9:99:4a:0c:e2:a0:d5:64:c7:68:26:71:08:f4:
                    ae:9b:7f:0a:55:6c:da:63:82:81:08:3c:46:fc:ce:
                    0b:0b:8d:60:b6:7b:37:7f:75:b5:41:db:5d:e7:ed:
                    42:bc:32:34:2a:c1:a5:8b:1c:dc:67:28:1f:dc:95:
                    ea:e1:c9:e7:c7:68:ab:a2:93:2a:95:de:ee:25:23:
                    6c:d2:48:ad:26:b2:54:77:d9:94:75:bd:cd:61:7c:
                    63:8f:97:10:8c:c8:38:fc:dd:3c:a7:ba:0c:87:ae:
                    1a:d6:24:92:91:a3:d0:e6:7f:e1:69:ea:5c:a1:84:
                    51:60:70:43:60:ff:ca:95:24:0b:fd:c4:30:6b:20:
                    b7:01:59:f2:56:b7:10:01:c2:5a:e8:1d:f3:64:9d:
                    22:61:a0:79:36:a6:53:80:f0:c4:47:30:b5:44:ea:
                    5c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:57:6D:70:54:E7:8E:90:AD:6B:EF:29:A2:FB:40:68:83:C5:6A:12
            X509v3 Authority Key Identifier:
                keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e3132382e302f31372d3234203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.107.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         14:8c:73:a5:b0:fd:b9:a0:88:a8:29:9a:1f:8f:7c:a3:c4:a5:
         e4:fc:5b:be:bf:ed:35:40:13:92:91:79:58:46:09:c4:7e:51:
         b4:f7:f6:77:67:e5:07:9d:94:32:41:75:5c:ec:02:a4:f8:1e:
         4c:48:42:25:5a:0a:52:d4:82:c8:c7:56:93:70:86:29:2d:1d:
         47:ab:01:35:9e:b2:db:92:fc:ce:17:63:97:4b:95:73:fa:05:
         91:be:53:d9:81:46:ae:43:f3:80:c3:6b:d5:da:27:10:9e:21:
         72:42:b0:42:38:24:f0:09:b2:61:5b:21:9d:eb:c3:54:ca:64:
         ea:60:fc:9b:e2:bd:9c:e1:58:3e:28:3b:cc:fa:84:35:6a:5a:
         03:44:58:bb:72:49:f2:b9:02:5d:22:cd:12:4f:0f:3f:18:1f:
         b4:f7:df:72:c1:f1:8c:b5:10:1d:f1:e7:6d:87:d6:4b:ad:3c:
         14:ae:3d:5f:b6:f8:62:71:ab:1f:06:56:b5:aa:f7:7d:e5:1f:
         5e:29:dc:56:5c:2e:98:39:c4:bf:0f:c2:d1:b8:35:81:9d:3f:
         df:f7:4e:af:36:96:79:86:b7:a2:6f:14:65:05:ce:84:81:73:
         b9:3e:42:f3:72:bd:cc:b8:9e:e1:34:da:10:00:84:8c:09:cc:
         43:39:fc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:01:30 2026 by rpki-client