Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3138322e302f32332d3233203d3e203338303139.roa
File:                     3133392e3232302e3138322e302f32332d3233203d3e203338303139.roa (raw, json)
Hash identifier:          V4JxFfNu47zqyL7YkUuQUSEzUXPMA4tFE1vm2suShSE=
Subject key identifier:   10:E1:EF:A5:F1:CE:06:AA:DA:55:1E:78:3A:F4:5E:21:2C:00:34:E7
Certificate issuer:       /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial:       5AAFC65C2319EED2B71B0681538B9CA6C553E9D9
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3138322e302f32332d3233203d3e203338303139.roa
Signing time:             Fri 24 Apr 2026 07:03:34 +0000
ROA not before:           Fri 24 Apr 2026 06:58:34 +0000
ROA not after:            Fri 23 Apr 2027 07:03:34 +0000
asID:                     38019
IP address blocks:        139.220.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:af:c6:5c:23:19:ee:d2:b7:1b:06:81:53:8b:9c:a6:c5:53:e9:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
        Validity
            Not Before: Apr 24 06:58:34 2026 GMT
            Not After : Apr 23 07:03:34 2027 GMT
        Subject: CN=10E1EFA5F1CE06AADA551E783AF45E212C0034E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e5:90:e8:fb:2c:51:e6:ae:49:45:3a:db:60:
                    8e:6d:d4:52:aa:ce:b8:7a:44:6d:49:f6:0f:eb:3c:
                    60:0c:02:81:f7:f2:95:32:45:4a:ae:cf:bc:ac:8a:
                    0c:ee:67:c4:f0:56:29:c5:a3:62:fb:ca:90:53:d7:
                    bf:f8:65:95:f6:4f:b5:52:34:54:b9:6f:b3:e2:c4:
                    91:9b:a4:c9:33:76:9f:87:df:b5:e8:01:aa:2a:4c:
                    16:cc:6c:79:19:8e:c0:7d:1e:72:49:57:62:a4:16:
                    c2:3d:89:1b:21:1c:90:ad:3b:15:29:dd:5f:7a:e9:
                    22:39:8c:e1:9e:13:0a:68:cd:fe:76:58:e0:ff:a8:
                    cf:c5:bd:4a:9f:5a:49:d5:4a:8d:c3:7c:a0:24:ed:
                    26:68:f9:7e:31:e6:d0:6a:82:73:50:2e:5c:bc:8f:
                    61:c0:07:18:c9:5b:e2:59:a8:05:22:ff:d3:3c:63:
                    70:68:f0:10:e9:78:29:91:2f:ee:50:f6:4f:1c:4b:
                    47:65:f6:a1:96:c0:88:04:c9:0a:1d:22:f9:c2:01:
                    50:f5:e2:42:f5:50:90:c8:02:5f:47:9b:75:4f:84:
                    31:1a:13:7b:d3:d9:e8:29:62:c7:d1:7a:e1:4b:67:
                    40:bc:5b:a3:d4:16:7c:84:f3:c9:52:c5:66:18:60:
                    15:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E1:EF:A5:F1:CE:06:AA:DA:55:1E:78:3A:F4:5E:21:2C:00:34:E7
            X509v3 Authority Key Identifier:
                keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3138322e302f32332d3233203d3e203338303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.220.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:b8:2d:d4:a1:46:2e:b9:4b:f5:f0:11:27:51:53:d3:4e:ab:
         21:11:69:d0:d1:4a:b1:77:33:29:b1:bb:b6:67:90:65:35:7d:
         06:a1:90:21:70:35:93:51:de:1b:d3:82:d3:e7:d7:ff:78:a7:
         83:b8:5a:d0:f6:ac:8c:29:f4:ca:82:6d:a4:be:e5:c7:7e:51:
         f3:1e:d2:03:fc:cb:17:82:6e:38:ee:3b:5e:98:2d:d0:25:40:
         37:c3:4a:83:73:cf:60:6a:23:a9:50:03:9e:35:df:f8:c9:9a:
         f6:fc:5e:da:36:85:42:2e:b9:34:8f:60:8b:d9:b0:47:f7:54:
         ba:65:07:7c:bc:ba:db:6a:14:ff:0f:2a:ae:c6:9f:28:be:d4:
         79:60:4a:e1:df:33:e9:10:dd:36:5e:9a:96:aa:91:cc:ef:2c:
         dc:dc:fc:ca:7f:47:f7:c4:ef:58:a0:f7:1d:f6:8c:f4:b5:43:
         f6:83:5d:31:18:4b:82:49:68:e5:fa:63:5c:c1:d8:cf:1c:a9:
         d0:03:63:b5:39:f9:d7:ca:79:5b:8d:10:21:11:99:95:5c:67:
         8c:3a:6e:0d:50:32:d8:2e:6b:3c:69:e4:b4:66:67:3b:31:f3:
         66:4d:a1:dd:4e:ee:11:a9:58:b1:49:2a:3e:d3:b3:e0:6f:ff:
         fe:d0:10:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:50:04 2026 by rpki-client