Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3136362e302f32332d3233203d3e203633373237.roa
File:                     3133392e3135392e3136362e302f32332d3233203d3e203633373237.roa (raw, json)
Hash identifier:          eu1utsIxT+2SrhStkWefyj8gQPRfciJ67/Tupz9ht4Y=
Subject key identifier:   67:EA:71:C7:A7:01:FA:B7:2A:48:AC:96:49:3C:4F:56:35:C8:34:52
Certificate issuer:       /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial:       27E935EB1151B2065461F08A9722D326A2E395F3
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3136362e302f32332d3233203d3e203633373237.roa
Signing time:             Tue 16 Jun 2026 15:37:45 +0000
ROA not before:           Tue 16 Jun 2026 15:32:45 +0000
ROA not after:            Tue 15 Jun 2027 15:37:45 +0000
asID:                     63727
IP address blocks:        139.159.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 01:15:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e9:35:eb:11:51:b2:06:54:61:f0:8a:97:22:d3:26:a2:e3:95:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
        Validity
            Not Before: Jun 16 15:32:45 2026 GMT
            Not After : Jun 15 15:37:45 2027 GMT
        Subject: CN=67EA71C7A701FAB72A48AC96493C4F5635C83452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:75:67:ad:21:37:23:2c:a0:79:85:4f:46:aa:
                    d9:c7:44:7e:42:1d:2b:ba:b8:b2:0a:85:03:e3:04:
                    10:1d:84:76:c2:8f:d5:b4:35:82:6e:87:f0:55:a2:
                    b4:96:b7:c1:da:34:0d:8d:80:e0:91:43:5c:54:8b:
                    18:82:9c:0c:30:4d:70:14:13:05:c3:e1:28:79:f4:
                    6d:d4:6c:26:06:fd:ef:c0:84:aa:43:92:f1:7f:38:
                    58:39:96:f4:84:db:66:06:36:c0:1a:7e:0e:a6:a2:
                    ef:64:ee:b0:9d:04:de:1a:42:f6:79:8a:cb:4f:08:
                    f4:ce:12:35:35:9f:58:b7:f2:a3:eb:b7:de:3e:cc:
                    cb:32:4d:55:89:17:c9:30:1f:e7:c1:12:d3:78:6b:
                    58:c4:12:94:ab:59:82:9e:51:d9:89:3e:88:5c:2b:
                    32:84:dd:85:be:d3:18:35:86:21:46:3f:25:ab:a7:
                    a2:44:93:93:42:b9:6c:78:df:2b:ab:d6:95:31:ac:
                    96:26:7e:9d:22:77:a0:97:a8:80:58:6c:a1:42:0b:
                    c1:9e:3e:eb:00:2a:df:4a:20:44:1c:ca:9c:2a:19:
                    7f:14:89:ed:5e:9c:9a:ae:aa:5b:1e:e9:0d:bd:ef:
                    c7:6f:a5:17:15:04:6b:a7:37:22:5f:46:9b:f4:a1:
                    81:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EA:71:C7:A7:01:FA:B7:2A:48:AC:96:49:3C:4F:56:35:C8:34:52
            X509v3 Authority Key Identifier:
                keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3136362e302f32332d3233203d3e203633373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.159.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:c7:84:1e:7b:63:44:46:50:ea:31:62:4f:a4:96:7c:01:5a:
         ec:f7:66:7a:73:b7:fc:a8:ee:c7:18:df:35:ba:46:50:f8:04:
         d2:13:e1:41:1b:bd:4e:f8:94:c8:96:f5:9b:8b:03:b8:90:46:
         03:de:88:a5:71:1b:d5:91:35:0e:84:f1:0e:85:f3:89:76:f9:
         60:e7:bb:9e:10:cc:48:54:21:03:88:40:68:9b:95:17:53:7c:
         fe:6d:55:94:e6:06:06:e5:65:77:f6:2a:af:f2:6c:45:1f:7b:
         ba:eb:20:44:a8:88:c3:ca:94:a8:ef:c9:0a:87:54:c7:64:ec:
         4c:c8:74:b6:8a:55:22:b8:fb:1e:f4:48:b7:d5:bd:b7:89:38:
         02:85:78:cd:5c:d4:db:dc:6c:f5:52:a8:77:c6:24:69:6d:d7:
         67:b1:3b:de:ae:d4:b4:4b:f0:e1:fc:27:5f:99:10:1e:d6:b1:
         e9:2a:2e:d6:b4:6b:fa:6e:46:b2:3e:ea:a2:eb:0d:26:de:b5:
         e7:ec:b4:5c:8b:02:b5:8e:85:5a:07:e1:23:f7:f1:8a:1e:6c:
         24:2c:db:86:1a:8b:39:23:9d:2e:b7:5d:fe:41:8f:5e:8d:02:
         47:f5:7c:d4:e0:11:ba:a7:db:a0:15:ec:95:5a:b7:4b:42:32:
         00:44:82:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:10:07 2026 by rpki-client