Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3135342e302f32332d3233203d3e203338303139.roa
File:                     3133392e3232302e3135342e302f32332d3233203d3e203338303139.roa (raw, json)
Hash identifier:          b3VGU+RkrNfspi+f1qrrAj8wlRnXFviWHO7EKAjWos4=
Subject key identifier:   1E:08:E8:1A:F7:19:40:66:EC:79:79:EA:43:E0:87:1D:97:27:1E:5E
Certificate issuer:       /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial:       58ECD771C1303902AAC20B1CE8AA374F30E82AF4
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3135342e302f32332d3233203d3e203338303139.roa
Signing time:             Fri 24 Apr 2026 07:03:34 +0000
ROA not before:           Fri 24 Apr 2026 06:58:34 +0000
ROA not after:            Fri 23 Apr 2027 07:03:34 +0000
asID:                     38019
IP address blocks:        139.220.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ec:d7:71:c1:30:39:02:aa:c2:0b:1c:e8:aa:37:4f:30:e8:2a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
        Validity
            Not Before: Apr 24 06:58:34 2026 GMT
            Not After : Apr 23 07:03:34 2027 GMT
        Subject: CN=1E08E81AF7194066EC7979EA43E0871D97271E5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:52:62:11:e1:64:fa:00:64:ed:04:dd:47:57:
                    87:b1:3f:b6:b6:a1:c8:b2:b7:52:6e:71:d8:37:5d:
                    fd:5c:62:78:b6:9e:57:41:3b:f6:e9:0c:58:24:d5:
                    c9:8f:25:03:b9:37:6f:67:f8:54:97:c5:50:ef:82:
                    6d:4e:4e:80:19:2f:7b:70:ae:d6:94:3a:14:13:f0:
                    8b:7a:a1:22:aa:6b:71:13:1e:d3:18:cb:ef:15:6c:
                    ce:06:52:16:9c:be:9e:01:84:01:00:d0:e6:52:fd:
                    16:16:88:d7:b4:b5:5f:6a:b0:72:24:4c:c2:2f:ed:
                    39:8b:c0:1d:0d:d6:cd:9f:c3:63:83:f1:30:47:07:
                    5e:05:09:a1:89:66:d1:ba:cb:8f:08:23:50:86:9d:
                    2b:52:7f:f2:24:e6:96:a2:61:d7:86:b5:e1:3a:eb:
                    29:52:50:98:1f:4c:d4:2f:4f:b1:97:a6:9c:b6:3a:
                    6f:be:d9:e5:7f:d1:fb:35:70:1f:36:1c:e3:9b:ea:
                    6a:8f:b7:c2:9a:f5:a0:3f:a7:bd:fa:eb:6d:5d:38:
                    33:5b:c9:3d:0b:1d:ca:52:a2:20:67:0a:2e:05:bb:
                    a1:f9:1f:c5:8c:64:44:68:c4:7e:df:a3:62:e8:b7:
                    ff:2f:b4:31:f0:99:78:cf:de:72:c7:9e:c8:df:0b:
                    41:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:08:E8:1A:F7:19:40:66:EC:79:79:EA:43:E0:87:1D:97:27:1E:5E
            X509v3 Authority Key Identifier:
                keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3135342e302f32332d3233203d3e203338303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.220.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:51:ea:61:f8:af:1e:a4:cf:ab:d2:fb:21:17:91:01:f5:c6:
         da:a5:23:a6:09:86:8a:e6:61:34:fb:ef:89:45:41:74:35:4d:
         4a:14:88:d5:9a:8a:f1:c6:51:4c:55:f6:ff:cd:7f:b1:17:c1:
         0a:92:17:02:b9:80:7a:0e:95:d5:72:60:48:14:57:ed:ec:28:
         74:00:eb:dc:3a:19:d7:85:09:27:c0:ee:af:bc:8f:64:99:fa:
         cf:e1:b6:ae:96:b0:ad:85:af:98:35:c1:30:36:49:d2:d2:c3:
         bc:5e:51:52:78:22:83:6d:fd:4a:8c:32:96:34:f4:78:20:d0:
         1c:eb:9e:51:44:d3:e3:04:0d:d2:f3:12:1d:53:ce:2f:2a:63:
         d2:0a:b2:75:90:ae:59:08:93:37:aa:fa:20:d2:52:1f:5e:c7:
         ed:f4:f6:ea:08:84:24:0b:e2:40:ee:41:b6:ed:f2:7f:14:81:
         07:42:cb:60:47:dd:0a:9b:24:ee:72:f7:36:32:9c:61:dd:76:
         31:10:44:04:f7:ab:4c:9c:b9:2a:6a:9b:39:2d:96:6a:f8:a1:
         b3:6d:da:2d:7b:ee:59:a8:3e:02:bb:3d:80:94:e1:76:b7:98:
         eb:74:59:dd:74:c9:21:34:f5:0f:ed:18:c4:21:89:a2:e6:c1:
         30:60:c3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:49:52 2026 by rpki-client