Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3134382e302f32332d3233203d3e203338303139.roa
File:                     3133392e3232302e3134382e302f32332d3233203d3e203338303139.roa (raw, json)
Hash identifier:          559V2ST55D7q7IXajt5kmcKULebt9VpNWdKbZhqOGvg=
Subject key identifier:   FE:C8:51:46:E6:89:31:52:AF:85:3A:47:E0:1E:B9:02:B1:87:18:48
Certificate issuer:       /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial:       5C6230B143FCFEDA6538EDD7FF7586F582A71022
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3134382e302f32332d3233203d3e203338303139.roa
Signing time:             Fri 24 Apr 2026 07:03:34 +0000
ROA not before:           Fri 24 Apr 2026 06:58:34 +0000
ROA not after:            Fri 23 Apr 2027 07:03:34 +0000
asID:                     38019
IP address blocks:        139.220.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:62:30:b1:43:fc:fe:da:65:38:ed:d7:ff:75:86:f5:82:a7:10:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
        Validity
            Not Before: Apr 24 06:58:34 2026 GMT
            Not After : Apr 23 07:03:34 2027 GMT
        Subject: CN=FEC85146E6893152AF853A47E01EB902B1871848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:75:3f:6d:c9:2b:4b:ea:d2:d0:ef:4e:f3:ea:
                    5b:68:f7:ee:c6:3d:89:bd:ba:3e:ce:6f:a3:81:08:
                    d5:0f:2a:17:c1:94:7d:c2:73:c1:5b:31:cc:0e:68:
                    9e:14:a3:b7:97:ab:cf:44:40:27:d1:b6:85:59:7b:
                    df:10:ff:b7:9b:42:95:2d:4f:10:e3:13:44:b4:d7:
                    45:c7:85:60:b2:5d:50:b0:5d:93:81:1e:30:a1:98:
                    2e:97:ae:88:dc:b4:a8:40:b4:37:ae:03:ac:c8:24:
                    f1:6e:0e:de:5e:7a:fe:da:87:38:75:12:2a:c8:47:
                    b0:cb:ea:45:4c:e0:ca:ee:04:6c:20:65:c1:b1:ea:
                    09:9b:0f:0c:19:aa:38:d8:11:42:92:8f:7e:ca:2b:
                    f1:f7:89:8a:5a:d8:a6:6f:fa:35:29:ae:3b:f3:14:
                    54:bf:eb:b2:0f:c8:0f:06:9b:25:2f:47:c0:be:54:
                    49:0f:e5:67:c0:8b:da:fa:c3:ef:5f:c5:6a:b1:13:
                    88:75:64:33:d2:51:da:94:55:d2:d2:99:e4:de:78:
                    32:7b:f7:9d:b5:6b:b1:19:4a:0e:c6:c8:ca:ea:02:
                    63:cf:e0:ac:6b:8d:64:5f:40:f7:52:9e:9f:48:b8:
                    8e:4a:7d:4f:bc:73:10:28:85:25:99:3c:3e:66:aa:
                    22:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C8:51:46:E6:89:31:52:AF:85:3A:47:E0:1E:B9:02:B1:87:18:48
            X509v3 Authority Key Identifier:
                keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3134382e302f32332d3233203d3e203338303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.220.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:44:42:d1:5b:d9:ac:f5:0f:04:9d:76:36:15:46:25:9e:90:
         84:e3:c1:b9:49:14:36:4c:6a:73:5f:bd:23:96:8d:55:1d:1e:
         7e:36:20:3d:d6:c3:1d:32:07:2a:1d:ec:b4:ee:be:2b:cc:01:
         24:38:01:ba:90:e8:c3:aa:9d:4e:9a:9a:79:38:c1:93:6c:dd:
         4b:5e:57:1d:66:ef:e8:97:27:5b:e6:ce:a2:2f:f0:3b:dc:78:
         d7:75:9e:2d:cc:42:aa:4a:1f:ba:f6:ca:a8:4e:13:76:ba:7e:
         3d:aa:30:80:7b:c1:bd:7b:c5:4e:f0:11:30:75:1f:c6:24:5d:
         6e:6e:f6:17:5a:14:08:0a:4e:6b:8b:cc:75:54:88:9f:a5:63:
         36:ab:92:a0:5f:8a:c9:bd:33:9b:bf:b8:c4:a2:c4:4f:57:7e:
         31:cc:6e:bf:48:97:08:7d:db:51:6b:9f:1f:60:fa:e8:31:95:
         1a:86:6e:62:9c:51:19:66:40:e0:b5:14:b7:0e:73:87:43:fe:
         fa:9f:2d:f4:b4:d9:3f:40:cb:71:ae:ac:d7:67:29:f6:d6:d4:
         ab:68:c2:52:e4:1a:24:08:54:78:7e:6c:4a:db:ab:34:da:c6:
         e7:a9:ed:51:5a:78:21:ad:e3:4d:4e:c4:63:b5:1b:13:25:01:
         25:32:e4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:51:01 2026 by rpki-client