Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3234302e302f32322d3233203d3e203338303139.roa
File:                     3133392e3232302e3234302e302f32322d3233203d3e203338303139.roa (raw, json)
Hash identifier:          PsKMXsL3qW4zCFlCJE3zpizEHGjBCWZSu/u/1Z0CA9U=
Subject key identifier:   B7:4A:73:34:66:00:07:7C:8C:EF:45:BB:30:8F:35:A8:97:5D:1F:A5
Certificate issuer:       /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial:       778DAF5B5BB5FEBB30104ECD280B55A838CE574B
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3234302e302f32322d3233203d3e203338303139.roa
Signing time:             Fri 24 Apr 2026 05:45:54 +0000
ROA not before:           Fri 24 Apr 2026 05:40:54 +0000
ROA not after:            Fri 23 Apr 2027 05:45:54 +0000
asID:                     38019
IP address blocks:        139.220.240.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:8d:af:5b:5b:b5:fe:bb:30:10:4e:cd:28:0b:55:a8:38:ce:57:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
        Validity
            Not Before: Apr 24 05:40:54 2026 GMT
            Not After : Apr 23 05:45:54 2027 GMT
        Subject: CN=B74A73346600077C8CEF45BB308F35A8975D1FA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d9:7d:0c:d6:cf:e3:28:2c:bd:35:2a:13:68:
                    08:2a:71:46:fc:13:31:a4:f2:30:da:59:0e:a6:2a:
                    96:7b:c1:87:f5:34:b4:b1:cc:48:73:35:cc:e9:5f:
                    de:ba:bd:86:6a:33:62:11:a3:d8:5b:5e:4b:75:57:
                    e2:ca:35:e8:df:c6:92:0e:81:66:20:04:7b:75:77:
                    db:83:65:15:3b:07:ab:17:30:59:9d:e2:d3:74:fc:
                    77:e4:0b:ef:ae:b4:bf:a6:77:72:ca:64:c8:92:a4:
                    d9:0f:1a:04:d3:43:c9:40:4d:b9:a0:29:4b:26:7e:
                    76:e5:b2:30:5a:88:8f:fd:0f:ea:51:3c:d5:22:0a:
                    2d:2b:ed:38:b8:31:b2:a8:88:03:35:56:cc:0c:3e:
                    fe:b2:83:1a:ba:af:52:48:5a:a7:8b:b1:65:fc:87:
                    09:fe:a9:be:c6:1e:41:14:2e:a1:49:a2:b4:0f:3c:
                    09:35:25:fd:78:a9:4a:f9:31:2e:04:d2:0b:03:ea:
                    54:c4:12:84:97:75:62:82:80:87:99:3d:99:91:20:
                    41:cf:0b:ce:84:34:9d:88:c2:86:3b:f7:34:40:59:
                    75:71:3b:4c:8b:a9:61:ec:86:0a:23:71:a6:02:53:
                    a9:1f:32:77:6e:fd:4b:85:70:a7:d4:39:e9:14:81:
                    46:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4A:73:34:66:00:07:7C:8C:EF:45:BB:30:8F:35:A8:97:5D:1F:A5
            X509v3 Authority Key Identifier:
                keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3234302e302f32322d3233203d3e203338303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.220.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:7e:b8:e9:5c:74:77:84:8b:cc:1e:8c:2d:d2:0d:0c:5f:c0:
         bd:1a:74:a6:22:11:9f:3d:28:b1:d3:4b:88:ee:51:07:f3:b5:
         d6:04:32:7c:26:0f:39:34:04:01:77:da:fb:32:d2:00:28:a7:
         13:d3:94:4d:a3:de:1c:b7:23:ca:97:9e:da:80:c1:42:fc:c4:
         00:1b:4d:5a:66:ee:9f:0e:08:f9:ac:89:bd:23:0b:2d:d4:44:
         88:61:d3:0d:4a:58:8b:3b:3d:4f:58:33:b0:5a:90:2a:6d:8c:
         92:ae:2c:57:69:e3:6b:a3:76:18:16:f7:95:b7:5f:f2:59:4a:
         17:8b:53:62:49:53:b5:75:d1:46:63:28:b3:e1:c7:c5:4a:b2:
         05:85:6d:1c:29:54:ed:bf:e4:9b:ab:3d:4e:8c:f1:5a:14:64:
         5c:cc:01:eb:8d:8c:a6:42:3c:97:63:22:77:44:e5:b5:a1:a0:
         aa:69:d6:90:6f:d3:14:13:98:e9:a9:c4:d5:7d:cf:56:7f:51:
         01:ea:49:ba:69:f0:7f:eb:6f:dc:0e:08:5a:01:01:ca:20:b0:
         f0:ce:96:46:9a:8b:cb:23:b2:d4:0d:3e:10:3f:e0:ed:88:1e:
         94:10:80:92:83:9e:70:c1:3f:80:49:cd:b1:3b:c9:e4:e8:55:
         41:67:f0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:45:14 2026 by rpki-client