Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3136322e302f32332d3233203d3e203338303139.roa
File:                     3133392e3232302e3136322e302f32332d3233203d3e203338303139.roa (raw, json)
Hash identifier:          as3meMOjGk/eh/TiP81KrdxU5M+I7laXfnBKZR6+brk=
Subject key identifier:   B6:E6:C1:FB:99:50:79:CC:99:27:ED:62:FA:A2:81:51:BE:13:42:65
Certificate issuer:       /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial:       7B8FD13575ABBA8FB26AD7FB88F72F347AB83DDF
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3136322e302f32332d3233203d3e203338303139.roa
Signing time:             Fri 24 Apr 2026 07:03:34 +0000
ROA not before:           Fri 24 Apr 2026 06:58:34 +0000
ROA not after:            Fri 23 Apr 2027 07:03:34 +0000
asID:                     38019
IP address blocks:        139.220.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:8f:d1:35:75:ab:ba:8f:b2:6a:d7:fb:88:f7:2f:34:7a:b8:3d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
        Validity
            Not Before: Apr 24 06:58:34 2026 GMT
            Not After : Apr 23 07:03:34 2027 GMT
        Subject: CN=B6E6C1FB995079CC9927ED62FAA28151BE134265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a8:3a:4f:fd:58:9e:0a:12:16:46:63:35:19:
                    aa:41:c3:11:7d:57:c1:7a:a0:e3:26:c3:2c:6d:5e:
                    12:a6:09:6a:ca:e9:d5:7a:6a:cc:c3:4d:86:8e:86:
                    05:fb:ac:86:e0:08:6c:a9:cd:9d:8d:cf:f2:bf:f5:
                    98:fe:3d:ff:31:38:a0:d8:7b:43:e7:a2:ed:22:b2:
                    10:5c:ea:a2:70:29:37:a0:06:0f:98:7d:af:be:ed:
                    32:38:86:21:c4:80:e1:3e:d8:9c:2c:99:ea:85:22:
                    77:b0:a2:ce:a2:af:fe:cb:2d:f7:7b:1e:e3:ff:21:
                    62:55:1a:c5:d2:2c:c2:9e:ce:d5:ec:50:76:c2:d6:
                    fd:ea:3e:02:46:e9:b9:56:b9:70:20:25:16:04:90:
                    9b:6f:45:47:b1:35:9f:45:b8:9c:e4:b7:60:df:64:
                    98:8b:a0:32:6e:81:03:b5:f6:3d:69:7d:6e:32:16:
                    2e:43:fb:51:5e:cd:fb:6e:d2:26:41:20:f4:11:57:
                    dc:84:9b:fc:62:de:f4:58:6f:9f:a8:9e:ef:e5:16:
                    9d:1d:a3:18:de:cd:17:78:73:03:ab:10:e7:72:63:
                    ea:95:4b:a0:95:e7:60:b9:f0:7c:7b:4a:9a:eb:0d:
                    aa:02:2c:b4:7d:a7:0a:45:1b:fb:35:fa:61:7f:97:
                    a4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E6:C1:FB:99:50:79:CC:99:27:ED:62:FA:A2:81:51:BE:13:42:65
            X509v3 Authority Key Identifier:
                keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3136322e302f32332d3233203d3e203338303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.220.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:90:44:1b:61:34:fe:2f:20:57:a4:5a:b1:52:aa:e7:26:6e:
         6b:c0:4e:d2:ba:cd:a1:d8:d4:e7:a9:3a:84:5b:98:bf:c5:4a:
         a4:b5:a3:f3:45:71:11:b3:0d:6d:a0:80:10:66:55:e3:6c:ce:
         0d:37:43:f9:97:1b:8e:7e:d9:31:00:b6:bc:41:a6:d1:be:93:
         3d:13:ae:ba:41:41:dc:c3:9d:aa:58:0e:20:17:52:d1:20:0b:
         f5:18:3f:9f:17:10:f0:b1:6b:72:33:d0:20:11:54:c2:43:6f:
         91:25:68:82:0a:7a:78:98:bc:da:d3:ec:8c:0e:2f:f7:7f:24:
         ef:7d:30:36:ef:f8:c9:be:c7:c8:d1:b1:b2:81:c7:7e:10:0d:
         34:08:9d:1e:1e:1a:75:0b:82:1a:84:f7:2d:3d:a3:b1:78:12:
         88:b0:ca:c0:17:80:39:ea:42:37:e5:0b:3b:9f:32:4d:3a:c1:
         d1:c1:c9:ea:aa:a9:98:04:78:a1:d9:74:16:42:f7:45:ef:df:
         e4:99:11:b0:fe:bd:80:b3:2f:ef:c3:ea:cb:8a:66:fc:7a:d3:
         a0:7a:b2:42:1c:47:c4:d7:59:41:13:41:d7:f0:95:cd:5b:be:
         84:6b:e3:47:34:2f:f3:bc:3a:74:40:ad:19:94:ed:5c:91:74:
         3f:0a:48:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:17:06 2026 by rpki-client