Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1088651015181303810/0/35392e3130382e39312e302f32342d3234203d3e203138323435.roa
File:                     35392e3130382e39312e302f32342d3234203d3e203138323435.roa (raw, json)
Hash identifier:          t3Rtro7rqy01zijDzj7kZjiqLfqCkrk5i7GAf6LIfoI=
Subject key identifier:   E3:FB:1D:3E:42:1B:A8:D3:4A:C2:52:9C:F2:6E:E4:4E:97:42:C4:57
Certificate issuer:       /CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80
Certificate serial:       6B1C24B0E0624DCD4AFBF0F54AECBD8029B174FF
Authority key identifier: D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/35392e3130382e39312e302f32342d3234203d3e203138323435.roa
Signing time:             Sun 19 Apr 2026 10:06:05 +0000
ROA not before:           Sun 19 Apr 2026 10:01:05 +0000
ROA not after:            Sun 18 Apr 2027 10:06:05 +0000
asID:                     18245
IP address blocks:        59.108.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:10:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1c:24:b0:e0:62:4d:cd:4a:fb:f0:f5:4a:ec:bd:80:29:b1:74:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80
        Validity
            Not Before: Apr 19 10:01:05 2026 GMT
            Not After : Apr 18 10:06:05 2027 GMT
        Subject: CN=E3FB1D3E421BA8D34AC2529CF26EE44E9742C457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:11:b7:91:97:f5:6a:ab:be:c6:58:fc:30:01:
                    4e:bf:27:45:a1:b8:1b:c6:65:3d:85:dc:f0:69:40:
                    98:96:91:56:a5:9f:d5:90:0c:86:8e:27:a9:c7:38:
                    41:88:e8:a9:5f:49:c5:58:36:34:bc:ce:ad:f1:bf:
                    e9:5c:73:83:e0:34:45:10:d9:e8:b4:36:cb:1b:e2:
                    39:2b:e6:40:7c:5f:bd:6c:74:f2:dc:b0:2c:58:0c:
                    9a:c6:b6:4c:f0:83:b5:a4:0c:7a:23:2c:46:71:2f:
                    25:a7:dc:28:ef:ee:d9:70:7c:0f:7b:eb:6b:91:bc:
                    36:da:03:bd:13:85:88:13:53:e2:1e:17:c4:d0:f4:
                    d2:82:e7:1b:df:ea:a9:90:81:e0:da:b5:6e:8b:d5:
                    7c:dc:ab:77:74:ee:65:74:1b:dd:76:58:e6:e2:0e:
                    9c:28:03:53:9d:f1:41:0b:b8:f9:32:4c:a4:5f:f4:
                    21:e5:c4:27:63:59:af:96:fc:e8:fe:36:1f:ed:9a:
                    fc:ae:ae:33:bf:8b:d6:81:4d:66:63:d6:de:c8:e3:
                    07:1b:3f:0d:3b:5e:f6:b0:df:85:3d:3a:04:ac:ea:
                    34:7a:49:0d:77:ee:1d:c6:88:f6:54:ab:5f:96:55:
                    ec:2e:29:2c:98:be:bb:7f:b7:5d:47:4c:f4:b0:6f:
                    7e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FB:1D:3E:42:1B:A8:D3:4A:C2:52:9C:F2:6E:E4:4E:97:42:C4:57
            X509v3 Authority Key Identifier:
                keyid:D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/35392e3130382e39312e302f32342d3234203d3e203138323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.108.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:cc:4a:bb:1d:8f:bf:40:02:b9:1f:13:da:1a:c5:9d:14:c7:
         fa:1f:58:b4:f2:8c:29:84:41:ae:3c:5d:29:74:3d:c0:04:80:
         3e:37:76:d1:b0:19:dd:38:28:e0:34:59:11:53:f9:eb:9c:7d:
         7d:a4:c6:ba:f6:38:28:0c:f2:d2:27:56:b0:61:43:92:0b:12:
         c7:dd:b6:5d:35:b0:de:c9:c5:8a:d0:68:a5:ff:bf:0e:38:05:
         92:f8:8a:53:5f:12:c6:3b:49:fd:4e:a4:cd:ad:ad:0a:a6:24:
         de:4e:de:fa:7e:e2:21:7f:09:13:04:91:0a:f7:4d:c5:28:82:
         bd:d1:62:03:ad:da:11:82:e0:10:e8:b1:a3:81:4e:2e:86:f1:
         fd:c8:c3:ae:37:e2:3d:98:51:64:e1:71:32:f7:af:a7:86:e1:
         68:36:72:f6:c8:7b:a3:53:b4:cb:6c:5b:32:a4:2e:9e:7e:63:
         8d:99:32:14:93:62:47:d3:be:ec:9b:32:a5:96:04:96:96:19:
         30:04:a8:ab:49:b0:2e:59:ba:c8:79:70:fa:15:8f:8a:7d:92:
         78:a6:a8:ab:45:cd:97:13:18:fa:b8:33:1a:73:c2:2a:42:26:
         ed:74:ea:78:53:c0:95:5c:19:1c:ec:f8:fe:3d:d0:25:2c:7a:
         d0:9c:47:83
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUaxwksOBiTc1K+/D1Suy9gCmxdP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVE
MkZDMkY4MDAeFw0yNjA0MTkxMDAxMDVaFw0yNzA0MTgxMDA2MDVaMDMxMTAvBgNV
BAMTKEUzRkIxRDNFNDIxQkE4RDM0QUMyNTI5Q0YyNkVFNDRFOTc0MkM0NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXEbeRl/Vqq77GWPwwAU6/J0Wh
uBvGZT2F3PBpQJiWkValn9WQDIaOJ6nHOEGI6KlfScVYNjS8zq3xv+lcc4PgNEUQ
2ei0Nssb4jkr5kB8X71sdPLcsCxYDJrGtkzwg7WkDHojLEZxLyWn3Cjv7tlwfA97
62uRvDbaA70ThYgTU+IeF8TQ9NKC5xvf6qmQgeDatW6L1Xzcq3d07mV0G912WObi
DpwoA1Od8UELuPkyTKRf9CHlxCdjWa+W/Oj+Nh/tmvyurjO/i9aBTWZj1t7I4wcb
Pw07Xvaw34U9OgSs6jR6SQ137h3GiPZUq1+WVewuKSyYvrt/t11HTPSwb35NAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU4/sdPkIbqNNKwlKc8m7kTpdCxFcwHwYDVR0j
BBgwFoAU1e8qeSFm+U++Mzd+AjkDTtL8L4AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4
ODY1MTAxNTE4MTMwMzgxMC8wL0Q1RUYyQTc5MjE2NkY5NEZCRTMzMzc3RTAyMzkw
MzRFRDJGQzJGODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVEMkZDMkY4MC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDg4NjUxMDE1MTgxMzAzODEwLzAvMzUzOTJlMzEzMDM4
MmUzOTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzODMyMzQzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEADtsWzANBgkqhkiG9w0BAQsFAAOCAQEAZcxKux2Pv0ACuR8T2hrFnRTH+h9Y
tPKMKYRBrjxdKXQ9wASAPjd20bAZ3Tgo4DRZEVP565x9faTGuvY4KAzy0idWsGFD
kgsSx922XTWw3snFitBopf+/DjgFkviKU18SxjtJ/U6kza2tCqYk3k7e+n7iIX8J
EwSRCvdNxSiCvdFiA63aEYLgEOixo4FOLobx/cjDrjfiPZhRZOFxMvevp4bhaDZy
9sh7o1O0y2xbMqQunn5jjZkyFJNiR9O+7JsypZYElpYZMASoq0mwLlm6yHlw+hWP
in2SeKaoq0XNlxMY+rgzGnPCKkIm7XTqeFPAlVwZHOz4/j3QJSx60JxHgw==
-----END CERTIFICATE-----
Generated at Wed May 13 15:27:07 2026 by rpki-client