Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3138302e302f32332d3233203d3e203338303139.roa
File:                     3133392e3232302e3138302e302f32332d3233203d3e203338303139.roa (raw, json)
Hash identifier:          CjeM+JSRuzBrmuNPUXQCPAtAHy/czzbLDFYEKY9sBOE=
Subject key identifier:   E8:50:DD:17:7C:5C:13:9B:04:CD:98:06:E1:24:89:E3:B6:59:A4:B9
Certificate issuer:       /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial:       7A6CE0CBFA90BAF1DF86F80426E5E9AA3DDF4FF1
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3138302e302f32332d3233203d3e203338303139.roa
Signing time:             Fri 24 Apr 2026 07:01:16 +0000
ROA not before:           Fri 24 Apr 2026 06:56:16 +0000
ROA not after:            Fri 23 Apr 2027 07:01:16 +0000
asID:                     38019
IP address blocks:        139.220.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:6c:e0:cb:fa:90:ba:f1:df:86:f8:04:26:e5:e9:aa:3d:df:4f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
        Validity
            Not Before: Apr 24 06:56:16 2026 GMT
            Not After : Apr 23 07:01:16 2027 GMT
        Subject: CN=E850DD177C5C139B04CD9806E12489E3B659A4B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c8:24:1f:cc:6a:db:2a:4e:96:ae:ef:d0:1e:
                    9d:61:4f:4c:80:12:38:e8:cf:24:09:3a:fd:cf:4d:
                    10:84:1a:84:93:85:f0:51:6c:be:91:6e:0f:43:0f:
                    f7:81:ca:cb:87:2a:7d:0d:fa:ae:3b:00:99:34:95:
                    33:43:4b:a2:dd:95:ca:5c:17:38:e5:1c:83:89:8a:
                    69:a7:ff:47:7c:d5:c8:e6:ee:d5:01:e5:0f:d1:10:
                    5c:99:0c:70:d3:7f:00:e4:f6:0b:ad:75:41:8b:5a:
                    a6:e2:08:c4:9f:1f:09:36:7c:ff:4b:ab:9d:05:3a:
                    16:11:8f:40:eb:0e:4a:ce:ef:94:88:12:9e:c0:b8:
                    6f:8e:e8:6e:7a:2b:5a:dc:ab:a6:38:f9:2d:e9:ca:
                    25:7b:16:53:43:2f:43:5d:1f:f0:8f:40:5e:38:ed:
                    76:57:04:a9:5c:87:7a:4c:22:bc:33:b5:91:50:91:
                    99:5e:ec:48:64:21:ae:23:c4:cc:1b:a1:e3:e7:e0:
                    96:c5:30:eb:5b:fd:cc:6d:49:94:53:91:2a:3b:7a:
                    04:a1:9e:1a:dd:5c:4f:85:7f:c9:16:62:ae:eb:e3:
                    14:28:82:a9:41:10:26:11:fe:6b:2f:77:b5:5e:00:
                    69:be:0e:7d:96:81:88:49:45:31:36:34:b3:48:6b:
                    8c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:50:DD:17:7C:5C:13:9B:04:CD:98:06:E1:24:89:E3:B6:59:A4:B9
            X509v3 Authority Key Identifier:
                keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3138302e302f32332d3233203d3e203338303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.220.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:c1:06:cd:d8:c1:12:63:18:68:c6:e8:5d:13:15:c7:af:20:
         3e:a1:55:9f:7e:e8:8f:cb:7b:1e:13:43:3e:64:3d:29:73:9b:
         f3:34:e9:7c:e0:4a:04:47:7c:fc:e3:45:a6:34:c5:e7:7e:ab:
         3d:9c:ec:3c:e3:9f:b4:68:a9:f8:a8:28:b3:03:7d:1f:1e:67:
         da:2e:94:75:bd:00:f9:f0:48:6d:33:9d:5c:d2:95:6e:ff:a8:
         18:26:78:db:df:83:de:70:63:95:2b:8e:32:4c:ba:39:a0:69:
         37:22:43:a0:1a:ee:54:49:b0:3c:86:49:ab:ee:42:3a:5a:eb:
         10:18:8a:6a:79:39:a7:54:55:18:ad:fa:37:8d:67:26:df:1d:
         b1:4c:50:68:48:c3:e8:f1:b0:df:f7:9c:59:e8:7f:a9:17:8e:
         fb:a1:f6:7b:ea:25:17:26:57:12:1c:0d:9f:69:07:52:f4:b6:
         79:d7:c2:ea:ae:5f:3d:73:6d:9e:8c:da:01:ae:a1:ca:4a:22:
         ad:f4:56:f1:62:87:9d:b2:9f:be:1a:8b:9b:4c:38:80:f0:3e:
         d2:1b:1e:7d:24:d1:b1:02:f0:dd:57:b6:1a:5e:71:70:a2:6b:
         19:25:37:8f:5f:06:29:f4:31:cc:f2:1b:3a:18:21:a8:9d:bf:
         39:e0:ed:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:24:26 2026 by rpki-client