Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f32332d3233203d3e203338303139.roa
File:                     3133392e3232302e3139322e302f32332d3233203d3e203338303139.roa (raw, json)
Hash identifier:          qZibMjlwg6CuxmeDIxCCU5R7syRMZWajB/xDzpV1RKY=
Subject key identifier:   A8:4F:2E:FA:B3:58:0C:12:F2:AC:82:D2:14:D3:88:CA:AB:E8:88:BA
Certificate issuer:       /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial:       6F4582356515A3CCC4847E3857D0C837A76C6C45
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f32332d3233203d3e203338303139.roa
Signing time:             Fri 24 Apr 2026 05:45:54 +0000
ROA not before:           Fri 24 Apr 2026 05:40:54 +0000
ROA not after:            Fri 23 Apr 2027 05:45:54 +0000
asID:                     38019
IP address blocks:        139.220.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:45:82:35:65:15:a3:cc:c4:84:7e:38:57:d0:c8:37:a7:6c:6c:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
        Validity
            Not Before: Apr 24 05:40:54 2026 GMT
            Not After : Apr 23 05:45:54 2027 GMT
        Subject: CN=A84F2EFAB3580C12F2AC82D214D388CAABE888BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:29:3c:f9:ef:ad:5a:b8:65:73:89:43:07:be:
                    42:b5:40:75:56:02:ff:65:da:49:42:02:58:a3:db:
                    ba:06:b5:f0:96:63:4d:eb:1e:19:4e:ef:a5:60:9c:
                    0a:14:58:8d:92:e7:04:4d:8a:79:67:f1:a3:cd:f8:
                    b3:6a:42:e0:84:fe:a2:d7:e5:92:eb:b6:93:d0:a6:
                    80:28:bf:7c:53:43:cb:74:8e:47:7c:42:91:ea:8c:
                    7e:8a:9f:b9:42:a4:58:f9:a3:07:f6:b1:cb:9c:f2:
                    ae:29:95:27:03:ab:a5:ad:12:94:89:fd:8b:b0:03:
                    4f:7e:7c:a3:fc:74:6d:c1:12:0f:13:48:52:6e:39:
                    18:25:f5:4f:67:4b:cc:a3:2b:e6:c8:02:ac:b7:df:
                    72:5e:1b:5a:6a:d2:8b:a1:a3:b9:ee:d7:61:d9:ea:
                    1a:09:ea:04:8b:21:1d:61:22:ac:89:60:22:93:d4:
                    bc:f8:c2:74:53:cf:41:f9:c2:15:c3:19:99:e5:80:
                    a4:1f:9f:35:0a:d3:21:ad:b3:37:96:2f:b4:0b:f8:
                    10:bc:d6:a8:08:6b:a8:a7:a0:7c:18:4b:60:9b:f9:
                    cc:fc:e2:65:ba:6f:10:fa:dc:59:77:29:4c:af:dc:
                    b9:ee:65:e8:ad:2a:cd:e0:13:5a:ee:8c:ce:e6:53:
                    c6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4F:2E:FA:B3:58:0C:12:F2:AC:82:D2:14:D3:88:CA:AB:E8:88:BA
            X509v3 Authority Key Identifier:
                keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f32332d3233203d3e203338303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.220.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:42:f8:8a:f5:d6:a3:7c:9f:64:be:31:ce:56:d6:4b:93:3e:
         65:a2:5f:43:96:c5:c9:1e:d8:66:23:45:56:77:8d:8b:33:64:
         28:9d:b6:5b:7c:7f:04:3f:00:8b:a0:d6:0a:40:83:1b:ff:90:
         d9:cb:9b:d5:99:39:1f:55:3e:ab:e2:5e:1d:29:f3:d3:55:cf:
         c1:61:23:6b:52:45:ef:40:02:8a:f7:39:57:72:42:f6:c4:a7:
         c5:8a:3b:09:c3:45:7d:ec:e9:88:f4:b2:ec:91:14:f8:5c:2f:
         9b:e4:98:d3:8c:de:e3:46:e6:ff:b5:0a:35:02:97:03:36:5d:
         6e:95:7b:bf:67:49:e3:2f:af:79:14:2c:55:ba:60:54:8a:75:
         cf:ad:0d:57:07:a1:ca:29:cf:e1:9a:ed:52:32:34:d7:b5:2e:
         d1:80:fe:8b:52:fb:f8:24:b8:5a:73:1a:c6:af:d5:22:c9:46:
         3d:41:87:44:f4:74:d6:46:ec:aa:c6:41:49:5a:05:ea:84:4f:
         91:09:9f:51:37:11:79:70:7e:dd:1c:d3:7e:87:3d:42:ac:3f:
         d4:4f:8b:77:be:47:c2:c1:cc:4b:2a:a9:83:1a:87:ab:4d:76:
         b6:16:6c:97:2a:93:86:b6:c4:09:9c:60:48:65:d2:af:72:86:
         eb:de:31:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:32:31 2026 by rpki-client