Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3231322e302f32332d3233203d3e203338303139.roa
File:                     3133392e3232302e3231322e302f32332d3233203d3e203338303139.roa (raw, json)
Hash identifier:          UuNgWET/I1Kut4Rf0wtF/J/GAZqKRqdJMsPzPX7Dz/8=
Subject key identifier:   D7:94:5D:58:81:2E:F3:C8:B7:92:D9:F3:2D:E2:4F:D8:CF:30:4C:17
Certificate issuer:       /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial:       75907C981034ED821CBF06878D8AE25714F458CB
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3231322e302f32332d3233203d3e203338303139.roa
Signing time:             Fri 24 Apr 2026 07:05:36 +0000
ROA not before:           Fri 24 Apr 2026 07:00:36 +0000
ROA not after:            Fri 23 Apr 2027 07:05:36 +0000
asID:                     38019
IP address blocks:        139.220.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:90:7c:98:10:34:ed:82:1c:bf:06:87:8d:8a:e2:57:14:f4:58:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
        Validity
            Not Before: Apr 24 07:00:36 2026 GMT
            Not After : Apr 23 07:05:36 2027 GMT
        Subject: CN=D7945D58812EF3C8B792D9F32DE24FD8CF304C17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:78:f7:5f:4c:e4:fe:1d:ed:fa:88:22:6f:de:
                    a5:96:17:34:41:5c:fd:f7:a9:b5:d8:ea:fb:1c:9e:
                    81:e8:a8:93:e6:8d:c7:98:8a:e1:d4:b1:34:5f:fa:
                    03:00:b9:9c:dd:9a:29:f3:c7:8b:99:ee:1d:f2:19:
                    af:cc:f2:61:0d:30:f3:5b:8c:42:b3:12:65:d8:7b:
                    0a:f1:66:c5:4a:77:d9:b5:e4:71:4e:0b:20:78:79:
                    1f:df:12:cb:b4:00:88:62:e6:20:7b:79:49:b4:d1:
                    4f:b3:86:fd:1b:01:8a:62:8a:1e:eb:0d:93:2b:83:
                    63:aa:d7:ac:99:65:be:0b:4c:1c:7d:d2:5b:4f:b4:
                    14:d9:84:6f:28:ad:cc:2b:2f:63:0f:8b:ba:d8:c1:
                    ad:63:70:4a:34:58:ff:2d:2b:81:2c:f9:ca:e2:5b:
                    06:62:6a:99:a8:85:dc:c3:7c:fd:25:f6:df:7f:70:
                    ad:04:a7:22:93:34:2e:39:3f:19:85:b4:8c:07:77:
                    68:b8:bf:0f:37:b1:ec:6b:c3:ec:9b:e2:6b:7c:dc:
                    82:97:cb:fa:40:6c:bb:07:ad:ac:fc:d7:22:19:8f:
                    3f:c5:ce:c1:00:3b:d5:1d:3e:32:0d:66:04:a0:a7:
                    a8:5e:04:93:ea:fa:04:cd:7b:52:80:38:16:0e:39:
                    92:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:94:5D:58:81:2E:F3:C8:B7:92:D9:F3:2D:E2:4F:D8:CF:30:4C:17
            X509v3 Authority Key Identifier:
                keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3231322e302f32332d3233203d3e203338303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.220.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:d8:7e:9c:2b:dc:77:c3:ae:f6:61:eb:f2:46:0f:e5:39:69:
         bf:e1:21:42:39:a8:c7:46:7f:85:1d:7e:3a:30:72:31:61:ad:
         1f:54:33:62:e0:88:a0:0c:ab:dd:04:ce:25:ab:da:f8:7a:35:
         60:81:06:32:8c:98:1c:d5:aa:20:34:88:a9:13:b5:c0:b1:30:
         fc:0a:f7:65:dc:3e:7e:2e:83:c6:44:dd:50:7f:98:4d:07:df:
         77:a1:e3:6a:6e:66:79:c0:c1:a5:35:e5:82:77:c2:1d:94:9f:
         e3:e3:e9:6d:63:db:a3:0d:1c:36:7f:92:98:8a:fa:e3:f4:ee:
         cd:b3:e1:a4:af:77:ef:3a:0c:40:35:65:bc:d0:24:53:a6:59:
         c9:8a:2c:3c:8e:f9:61:96:30:39:c8:df:ec:69:ae:13:f2:29:
         ec:30:dd:40:2d:41:7d:48:69:68:84:de:77:3a:bb:18:0b:9f:
         5e:25:53:22:21:38:49:f4:09:5b:4f:02:72:71:1a:be:e2:39:
         aa:39:99:aa:91:1b:d6:45:29:fc:47:47:78:cc:05:7f:9f:5d:
         7f:ca:16:53:be:20:70:76:b4:ab:72:93:b4:e5:d9:9a:f6:53:
         a5:35:9c:f0:ea:2a:fb:3c:75:e6:41:14:79:23:67:b8:3f:6e:
         58:d5:b5:21
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUdZB8mBA07YIcvwaHjYriVxT0WMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3
MzdGQjNFQzAeFw0yNjA0MjQwNzAwMzZaFw0yNzA0MjMwNzA1MzZaMDMxMTAvBgNV
BAMTKEQ3OTQ1RDU4ODEyRUYzQzhCNzkyRDlGMzJERTI0RkQ4Q0YzMDRDMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxePdfTOT+He36iCJv3qWWFzRB
XP33qbXY6vscnoHoqJPmjceYiuHUsTRf+gMAuZzdminzx4uZ7h3yGa/M8mENMPNb
jEKzEmXYewrxZsVKd9m15HFOCyB4eR/fEsu0AIhi5iB7eUm00U+zhv0bAYpiih7r
DZMrg2Oq16yZZb4LTBx90ltPtBTZhG8orcwrL2MPi7rYwa1jcEo0WP8tK4Es+cri
WwZiapmohdzDfP0l9t9/cK0EpyKTNC45PxmFtIwHd2i4vw83sexrw+yb4mt83IKX
y/pAbLsHraz81yIZjz/FzsEAO9UdPjINZgSgp6heBJPq+gTNe1KAOBYOOZK3AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU15RdWIEu88i3ktnzLeJP2M8wTBcwHwYDVR0j
BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1
NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy
MzIzMDJlMzIzMTMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzODMwMzEzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAYvc1DANBgkqhkiG9w0BAQsFAAOCAQEAaNh+nCvcd8Ou9mHr8kYP
5Tlpv+EhQjmox0Z/hR1+OjByMWGtH1QzYuCIoAyr3QTOJava+Ho1YIEGMoyYHNWq
IDSIqRO1wLEw/Ar3Zdw+fi6DxkTdUH+YTQffd6Hjam5mecDBpTXlgnfCHZSf4+Pp
bWPbow0cNn+SmIr64/TuzbPhpK937zoMQDVlvNAkU6ZZyYosPI75YZYwOcjf7Gmu
E/Ip7DDdQC1BfUhpaITedzq7GAufXiVTIiE4SfQJW08CcnEavuI5qjmZqpEb1kUp
/EdHeMwFf59df8oWU74gcHa0q3KTtOXZmvZTpTWc8Ooq+zx15kEUeSNnuD9uWNW1
IQ==
-----END CERTIFICATE-----
Generated at Wed May 13 13:24:53 2026 by rpki-client