Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3136302e302f32332d3233203d3e203338303139.roa
File:                     3133392e3232302e3136302e302f32332d3233203d3e203338303139.roa (raw, json)
Hash identifier:          soqaVZcfEN9Nk+8YT+pG8vwF5eWf5m/F/NMFEGAqo+M=
Subject key identifier:   6E:9D:E1:71:56:2E:23:A4:DC:8D:87:E2:BB:08:4E:FB:A5:7A:38:3F
Certificate issuer:       /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial:       0BF82885ACF3D9FC39249C0F3F831D03FCE57735
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3136302e302f32332d3233203d3e203338303139.roa
Signing time:             Fri 24 Apr 2026 07:01:17 +0000
ROA not before:           Fri 24 Apr 2026 06:56:17 +0000
ROA not after:            Fri 23 Apr 2027 07:01:17 +0000
asID:                     38019
IP address blocks:        139.220.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f8:28:85:ac:f3:d9:fc:39:24:9c:0f:3f:83:1d:03:fc:e5:77:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
        Validity
            Not Before: Apr 24 06:56:17 2026 GMT
            Not After : Apr 23 07:01:17 2027 GMT
        Subject: CN=6E9DE171562E23A4DC8D87E2BB084EFBA57A383F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4b:06:ac:b2:29:f8:11:cc:c6:c8:fc:a4:75:
                    74:70:55:30:ad:3a:65:7b:47:e3:09:87:14:0e:27:
                    c3:8e:59:dd:ed:75:a5:f5:12:fd:11:95:4e:98:67:
                    5d:78:ab:ec:e3:f3:ce:bf:3c:d0:06:71:44:3e:55:
                    ad:0f:7b:8f:2e:29:3d:ee:c1:cd:4f:6e:4c:06:94:
                    f9:9a:c4:94:7a:d3:00:cb:18:e0:83:bd:90:21:7c:
                    39:ab:7b:60:b5:3b:f8:7b:b0:72:46:3e:ee:7f:27:
                    ea:ea:2a:5a:0f:6d:c3:83:c3:13:43:02:66:24:06:
                    02:4c:56:f2:d2:1c:4a:a1:80:d3:8c:6c:0e:70:e8:
                    a4:84:ec:e2:7a:0b:cb:1b:57:ea:af:1d:4f:a4:77:
                    7d:b0:49:0e:14:18:c2:1e:c3:33:29:13:af:fc:1f:
                    2b:aa:6b:ec:e2:2e:a8:ae:cd:ac:4f:be:13:99:b1:
                    2c:3d:25:11:a8:98:b2:e0:6f:33:8b:81:bb:6e:47:
                    06:4f:6c:94:7e:77:e2:c1:e2:47:70:63:c2:4f:51:
                    ab:31:d0:42:d9:7f:64:3f:19:78:fc:47:e8:1c:20:
                    cf:3d:40:72:00:ea:42:da:36:1d:a5:cd:fb:37:df:
                    bd:7b:f7:36:23:bd:e2:c3:ce:7c:a7:cf:4c:99:55:
                    b6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9D:E1:71:56:2E:23:A4:DC:8D:87:E2:BB:08:4E:FB:A5:7A:38:3F
            X509v3 Authority Key Identifier:
                keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3136302e302f32332d3233203d3e203338303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.220.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:b7:a2:05:ee:a8:f1:2a:c9:57:29:48:ac:8b:39:2f:65:0d:
         f4:89:12:b9:d1:77:d3:c5:db:f8:ce:82:ff:10:de:56:5a:b9:
         c5:95:da:dd:55:59:e8:f8:08:60:96:03:f8:77:53:54:e4:81:
         05:f5:19:4e:cc:05:d9:58:93:2c:75:4c:26:c9:77:c5:37:39:
         34:06:be:50:fa:8d:e4:2c:c7:6d:eb:90:3e:cb:c7:06:37:a5:
         e1:22:bd:4b:b0:f8:db:4a:90:96:5b:e6:36:6b:83:66:f1:5c:
         da:06:44:b5:0e:78:13:4e:3f:42:82:0b:6b:e6:3d:1e:3e:29:
         80:19:18:9e:5d:d7:15:07:00:bc:e3:ec:d2:8b:5c:c2:70:a0:
         1c:86:22:c3:b4:2e:0b:fa:ec:a2:9a:d5:df:01:79:34:aa:3e:
         0c:96:3c:8b:66:e6:be:02:70:10:56:70:d9:87:51:6b:29:af:
         a3:ba:aa:6e:f7:a6:e5:f5:45:ea:e9:26:96:bd:ac:1c:20:2a:
         b4:1b:73:86:7a:b1:80:b9:42:57:3a:59:ef:8c:44:df:b6:59:
         e8:cc:16:c8:94:b1:c9:cf:e3:62:87:ac:d6:b7:d7:ca:a3:ea:
         bc:19:7b:f1:7f:9d:f4:f2:36:71:09:ae:24:12:de:21:ce:87:
         8b:5b:0b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:53:45 2026 by rpki-client