Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3133302e302f32332d3233203d3e203338303139.roa
File:                     3133392e3232302e3133302e302f32332d3233203d3e203338303139.roa (raw, json)
Hash identifier:          rpBA2tJiK4n0BwOpaWX75lwHSyQtzLKJQtwy1Qq/JPg=
Subject key identifier:   3F:F7:00:D8:B7:47:E1:3B:F5:11:7A:5A:30:B7:80:C1:35:4E:51:A8
Certificate issuer:       /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial:       632019768E57F141947C0308FD4EBB7F4DB0844F
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3133302e302f32332d3233203d3e203338303139.roa
Signing time:             Fri 24 Apr 2026 07:03:33 +0000
ROA not before:           Fri 24 Apr 2026 06:58:33 +0000
ROA not after:            Fri 23 Apr 2027 07:03:33 +0000
asID:                     38019
IP address blocks:        139.220.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:20:19:76:8e:57:f1:41:94:7c:03:08:fd:4e:bb:7f:4d:b0:84:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
        Validity
            Not Before: Apr 24 06:58:33 2026 GMT
            Not After : Apr 23 07:03:33 2027 GMT
        Subject: CN=3FF700D8B747E13BF5117A5A30B780C1354E51A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b7:8e:c5:01:ab:cf:f4:d3:a8:e2:90:8f:d9:
                    bc:cb:a5:9a:6e:41:3a:1f:2e:2c:ea:4d:56:c4:df:
                    02:69:da:55:43:33:17:da:ca:f8:65:cc:55:28:f0:
                    55:af:ad:20:fa:19:a7:b4:1a:6f:29:f2:bb:f4:ef:
                    3f:66:41:74:fa:b2:1c:d5:72:da:dd:ed:a0:e1:44:
                    e0:d7:4d:52:f2:3e:aa:45:10:75:52:7c:58:ac:f3:
                    34:71:72:bf:e5:72:07:38:07:45:5f:4d:bb:82:0d:
                    7a:d8:6e:06:84:96:2f:bf:a2:b1:7b:0f:2a:30:4f:
                    ca:dd:2f:26:c5:8d:35:f6:96:5f:d7:7b:a4:df:69:
                    cc:ca:61:fc:fe:65:f3:d8:74:41:14:fd:01:33:04:
                    d4:29:c2:7d:70:9c:10:f5:cf:d9:7d:9a:d6:1b:81:
                    64:eb:00:4d:90:f6:fc:14:94:40:3d:4b:dc:d7:67:
                    0a:f5:68:47:fb:72:f0:e7:df:de:46:69:a4:85:3f:
                    5a:f2:56:cb:9a:d2:01:c4:e0:68:9a:78:97:80:3a:
                    5d:0c:76:83:39:c5:4f:0b:d0:bf:4c:4f:e0:0f:0b:
                    32:d6:33:a1:03:ba:5b:7d:62:16:27:fb:dd:af:8c:
                    f1:04:ce:8c:95:f2:de:76:ad:ca:49:12:59:13:10:
                    97:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F7:00:D8:B7:47:E1:3B:F5:11:7A:5A:30:B7:80:C1:35:4E:51:A8
            X509v3 Authority Key Identifier:
                keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3133302e302f32332d3233203d3e203338303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.220.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:58:de:d9:7c:d6:b5:4a:9f:9d:36:31:1c:30:b7:8f:5a:c2:
         07:5d:7b:95:19:6e:0c:71:43:0d:ce:f3:82:8c:39:a2:53:74:
         41:ae:eb:ec:ed:40:f4:a5:80:b2:1e:cc:f6:d8:b2:ff:ca:a2:
         93:24:0e:4e:24:c7:24:f7:97:f1:64:f4:c4:99:cd:53:90:38:
         87:f2:41:07:77:53:cd:b3:6c:d1:4d:82:67:ac:11:65:ba:0d:
         97:1d:45:fe:bf:11:d2:a0:d2:08:26:83:0a:60:26:cb:96:95:
         75:82:0e:13:44:8f:b9:40:81:5b:f0:17:d2:9d:fe:c1:6d:24:
         5e:c9:54:55:12:7c:9b:11:45:58:4a:f9:8b:bb:49:07:92:6f:
         7c:14:70:a2:d5:14:db:1f:6e:55:78:1d:cc:33:d3:95:71:c7:
         44:21:72:cf:92:71:70:ee:36:60:74:7d:b6:15:aa:6d:1f:3a:
         b3:11:e5:ae:b8:4a:22:37:0f:ee:bd:97:c4:59:82:56:b9:64:
         43:1b:e1:f9:bb:c3:14:06:32:3f:3f:cb:5e:78:22:cd:a2:21:
         ec:c2:36:a6:34:7b:8f:ac:c6:63:d2:a4:0a:6b:aa:1f:0a:63:
         d4:ec:0a:28:ab:c8:ed:a8:3d:56:10:42:93:98:22:a9:99:67:
         d1:b9:96:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:25:12 2026 by rpki-client