Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3137362e302f32332d3233203d3e203338303139.roa
File:                     3133392e3232302e3137362e302f32332d3233203d3e203338303139.roa (raw, json)
Hash identifier:          inlVy7XCxYc11Y5KOA39S9xrb27qA9beyRNw24grw8k=
Subject key identifier:   52:EB:FF:34:F6:DF:D4:CE:CC:F7:91:12:96:38:96:2F:13:18:D6:3F
Certificate issuer:       /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial:       75EAF585AC544C383188C022D76930392387C453
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3137362e302f32332d3233203d3e203338303139.roa
Signing time:             Fri 24 Apr 2026 07:01:17 +0000
ROA not before:           Fri 24 Apr 2026 06:56:17 +0000
ROA not after:            Fri 23 Apr 2027 07:01:17 +0000
asID:                     38019
IP address blocks:        139.220.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ea:f5:85:ac:54:4c:38:31:88:c0:22:d7:69:30:39:23:87:c4:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
        Validity
            Not Before: Apr 24 06:56:17 2026 GMT
            Not After : Apr 23 07:01:17 2027 GMT
        Subject: CN=52EBFF34F6DFD4CECCF791129638962F1318D63F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:79:b6:39:11:c0:6f:ea:de:a1:9e:b8:96:c2:
                    b0:91:af:52:f3:08:59:28:0f:f5:a8:ed:d2:46:28:
                    9e:36:81:30:0d:84:59:5c:90:7c:60:69:85:bb:9b:
                    97:49:5f:e9:75:b1:00:98:6b:10:6a:69:73:d0:a6:
                    7f:83:b0:77:dc:fb:e8:bf:a0:ab:79:64:b9:09:7a:
                    b9:d8:ce:f4:ad:a2:f9:db:96:aa:d5:96:75:89:8f:
                    16:d9:37:8f:df:56:c6:9d:2e:cd:54:f3:2e:a9:c4:
                    ab:b4:39:93:20:7f:21:94:c0:dc:16:37:a8:25:10:
                    89:4a:2a:e3:6d:8b:02:9c:62:5d:73:56:10:d1:3c:
                    cf:b5:80:69:14:78:09:d1:b1:10:1f:5a:6a:03:01:
                    8c:c4:9e:f3:4d:91:1d:b0:61:0e:6a:6e:da:e9:d1:
                    86:74:7a:5d:69:15:d6:f3:b8:11:af:48:c0:de:b9:
                    d8:90:0d:63:a6:3b:77:2c:5a:d2:1a:da:f7:7b:30:
                    0b:17:e6:66:d5:c6:ad:6e:2b:51:8e:f7:f2:e9:41:
                    5f:07:52:1b:ef:c0:e5:c2:d4:e0:0e:6d:8c:a6:82:
                    74:d9:a9:c0:2d:9f:87:b6:d6:08:2f:cc:a5:da:ee:
                    b5:85:0d:a7:9b:19:34:71:fb:4d:be:8a:90:77:f8:
                    b5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EB:FF:34:F6:DF:D4:CE:CC:F7:91:12:96:38:96:2F:13:18:D6:3F
            X509v3 Authority Key Identifier:
                keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3137362e302f32332d3233203d3e203338303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.220.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:8e:b4:5b:c9:19:8f:a6:52:18:cf:7b:21:03:0e:6c:ca:70:
         81:17:ba:0f:cd:09:80:94:c4:fa:a1:1f:91:e6:c5:e8:e5:a1:
         87:6c:31:43:24:93:17:e8:0c:74:cf:e9:44:bc:1a:24:77:b9:
         30:6a:76:c3:49:04:98:ea:3f:ee:9b:c5:61:53:54:1d:bf:b7:
         62:e3:79:13:78:92:50:66:b8:35:3d:fc:d7:05:f0:71:f9:23:
         46:76:94:f3:68:a0:20:68:25:d7:0d:07:37:0a:bd:a7:0a:43:
         b4:55:1c:12:03:52:51:a8:37:a1:e0:d3:2c:32:40:c2:78:02:
         d4:39:9c:8a:13:7f:e9:4b:fb:ff:32:9f:95:88:95:37:c3:dd:
         87:06:fd:5a:f8:a6:f3:b6:cc:88:85:c6:f7:60:c2:13:69:94:
         58:11:ba:85:a4:09:ef:a7:d8:59:49:f3:ba:3f:23:64:b4:97:
         22:95:92:06:e8:e9:e7:57:5d:9c:7f:31:cc:75:04:a0:80:34:
         4e:b4:da:33:d4:80:90:74:e7:38:f9:2c:00:b2:12:3a:2a:2e:
         1a:40:dd:d5:c5:57:5e:68:d5:8d:c8:1f:01:0a:7f:9b:04:3d:
         e7:41:ce:94:c7:41:f5:d1:3a:77:e9:00:ff:fa:f0:68:6a:f3:
         0b:23:da:7d
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUder1haxUTDgxiMAi12kwOSOHxFMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3
MzdGQjNFQzAeFw0yNjA0MjQwNjU2MTdaFw0yNzA0MjMwNzAxMTdaMDMxMTAvBgNV
BAMTKDUyRUJGRjM0RjZERkQ0Q0VDQ0Y3OTExMjk2Mzg5NjJGMTMxOEQ2M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ebY5EcBv6t6hnriWwrCRr1Lz
CFkoD/Wo7dJGKJ42gTANhFlckHxgaYW7m5dJX+l1sQCYaxBqaXPQpn+DsHfc++i/
oKt5ZLkJernYzvStovnblqrVlnWJjxbZN4/fVsadLs1U8y6pxKu0OZMgfyGUwNwW
N6glEIlKKuNtiwKcYl1zVhDRPM+1gGkUeAnRsRAfWmoDAYzEnvNNkR2wYQ5qbtrp
0YZ0el1pFdbzuBGvSMDeudiQDWOmO3csWtIa2vd7MAsX5mbVxq1uK1GO9/LpQV8H
UhvvwOXC1OAObYymgnTZqcAtn4e21ggvzKXa7rWFDaebGTRx+02+ipB3+LXfAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUUuv/NPbf1M7M95ESljiWLxMY1j8wHwYDVR0j
BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1
NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy
MzIzMDJlMzEzNzM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzODMwMzEzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAYvcsDANBgkqhkiG9w0BAQsFAAOCAQEAkI60W8kZj6ZSGM97IQMO
bMpwgRe6D80JgJTE+qEfkebF6OWhh2wxQySTF+gMdM/pRLwaJHe5MGp2w0kEmOo/
7pvFYVNUHb+3YuN5E3iSUGa4NT381wXwcfkjRnaU82igIGgl1w0HNwq9pwpDtFUc
EgNSUag3oeDTLDJAwngC1DmcihN/6Uv7/zKflYiVN8Pdhwb9Wvim87bMiIXG92DC
E2mUWBG6haQJ76fYWUnzuj8jZLSXIpWSBujp51ddnH8xzHUEoIA0TrTaM9SAkHTn
OPksALISOiouGkDd1cVXXmjVjcgfAQp/mwQ950HOlMdB9dE6d+kA//rwaGrzCyPa
fQ==
-----END CERTIFICATE-----
Generated at Wed May 13 14:24:25 2026 by rpki-client