Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232312e302e302f31362d3234203d3e2030.roa
File:                     3133392e3232312e302e302f31362d3234203d3e2030.roa (raw, json)
Hash identifier:          A3/3svz8ZVlEUrpbhDtDBNLSQOnMdWuy39azscZxYW0=
Subject key identifier:   72:47:5D:8A:61:12:A4:CA:87:4E:05:3E:5E:4E:B0:52:6C:96:F6:0B
Certificate issuer:       /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial:       6A995BB37AC95998585C43299ABB8085EF390E78
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232312e302e302f31362d3234203d3e2030.roa
Signing time:             Thu 16 Apr 2026 07:16:32 +0000
ROA not before:           Thu 16 Apr 2026 07:11:32 +0000
ROA not after:            Thu 15 Apr 2027 07:16:32 +0000
asID:                     0
IP address blocks:        139.221.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 10:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:99:5b:b3:7a:c9:59:98:58:5c:43:29:9a:bb:80:85:ef:39:0e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
        Validity
            Not Before: Apr 16 07:11:32 2026 GMT
            Not After : Apr 15 07:16:32 2027 GMT
        Subject: CN=72475D8A6112A4CA874E053E5E4EB0526C96F60B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:01:15:2f:d7:5e:3a:83:28:5a:2f:07:6e:f8:
                    73:59:70:1a:e0:63:be:d1:a5:ba:43:35:43:c6:cb:
                    0b:87:f1:2b:01:16:11:c5:7f:12:dc:00:64:d6:67:
                    60:6b:4a:75:4c:51:21:a5:41:92:68:fe:8a:5a:3b:
                    6a:b7:30:62:2d:d1:05:69:fc:e5:ec:29:71:bd:91:
                    3b:cf:4c:93:2d:06:56:2f:d4:22:a1:9c:c6:b8:95:
                    29:00:1b:4c:49:cc:66:4d:42:01:b7:a2:1d:16:76:
                    b3:03:45:01:a5:8f:e2:34:20:e5:95:c7:79:d0:8a:
                    41:c9:9f:4f:d2:94:6b:20:8e:41:14:f4:2a:5d:16:
                    52:57:42:b7:21:f3:62:79:ba:1e:18:e6:34:b1:af:
                    eb:30:5f:76:2d:7a:f8:a0:97:3d:19:b1:16:a1:c4:
                    61:2c:8d:6c:c3:8b:31:87:9a:95:23:bf:08:d1:46:
                    76:7a:2a:bc:d4:bd:11:09:41:5b:aa:01:d4:b8:34:
                    91:8b:77:b0:ea:cc:2b:83:7d:81:41:75:37:20:0b:
                    ce:cb:68:24:44:c3:2f:14:7b:3c:e2:21:f3:fe:f0:
                    7f:6c:63:e4:f3:3b:e5:7c:51:bc:28:ac:29:5d:3b:
                    d8:38:53:91:fe:79:72:29:21:e1:a2:dc:da:64:41:
                    c4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:47:5D:8A:61:12:A4:CA:87:4E:05:3E:5E:4E:B0:52:6C:96:F6:0B
            X509v3 Authority Key Identifier:
                keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232312e302e302f31362d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.221.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         84:09:90:97:d3:c6:8b:2a:4a:74:64:7d:12:71:fc:f9:fd:15:
         3d:7c:03:8e:7e:15:9f:3d:45:43:62:28:f1:a7:78:fc:af:4b:
         8c:39:75:a4:f4:a7:d1:b8:2a:9f:70:00:8f:91:60:14:1d:d5:
         d0:dd:b5:a0:56:88:ac:bc:8e:23:7b:3e:9c:0e:e9:27:92:76:
         cb:04:da:f2:c4:52:0f:a7:02:f0:72:06:8c:22:d3:46:9f:88:
         e4:09:45:58:cf:7c:54:54:19:a6:0f:62:53:68:de:dd:55:61:
         6d:54:e0:7c:b3:ab:e3:48:e7:ce:4e:7d:a5:09:97:e9:0a:10:
         69:a3:0d:ed:2c:6c:d7:65:aa:76:4c:24:c8:ef:59:e1:87:d1:
         74:d8:52:4c:84:90:72:a4:7d:17:d5:9f:8a:78:50:f4:fc:c5:
         70:38:3c:e6:3f:02:e3:f9:eb:fc:48:a0:da:ce:64:b0:15:e7:
         46:61:e3:15:04:75:4e:62:5d:5d:ce:ae:25:59:a7:9d:8b:10:
         a0:9f:28:20:a5:4a:a0:c4:0d:c8:73:77:ea:ca:d7:21:12:e0:
         12:5e:99:5f:09:04:1f:69:d6:36:fd:49:24:97:7d:c1:6b:45:
         f6:61:dd:4c:e5:6f:1f:cc:a5:5f:89:e5:48:ea:5e:3c:36:f6:
         fb:5b:37:68
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIUaplbs3rJWZhYXEMpmruAhe85DngwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3
MzdGQjNFQzAeFw0yNjA0MTYwNzExMzJaFw0yNzA0MTUwNzE2MzJaMDMxMTAvBgNV
BAMTKDcyNDc1RDhBNjExMkE0Q0E4NzRFMDUzRTVFNEVCMDUyNkM5NkY2MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoARUv1146gyhaLwdu+HNZcBrg
Y77RpbpDNUPGywuH8SsBFhHFfxLcAGTWZ2BrSnVMUSGlQZJo/opaO2q3MGIt0QVp
/OXsKXG9kTvPTJMtBlYv1CKhnMa4lSkAG0xJzGZNQgG3oh0WdrMDRQGlj+I0IOWV
x3nQikHJn0/SlGsgjkEU9CpdFlJXQrch82J5uh4Y5jSxr+swX3Yteviglz0ZsRah
xGEsjWzDizGHmpUjvwjRRnZ6KrzUvREJQVuqAdS4NJGLd7DqzCuDfYFBdTcgC87L
aCREwy8UezziIfP+8H9sY+TzO+V8UbworCldO9g4U5H+eXIpIeGi3NpkQcRpAgMB
AAGjggIIMIICBDAdBgNVHQ4EFgQUckddimESpMqHTgU+Xk6wUmyW9gswHwYDVR0j
BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1
NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw
gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MjcxNjE5LzEvMzEzMzM5MmUzMjMy
MzEyZTMwMmUzMDJmMzEzNjJkMzIzNDIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCL3TAN
BgkqhkiG9w0BAQsFAAOCAQEAhAmQl9PGiypKdGR9EnH8+f0VPXwDjn4Vnz1FQ2Io
8ad4/K9LjDl1pPSn0bgqn3AAj5FgFB3V0N21oFaIrLyOI3s+nA7pJ5J2ywTa8sRS
D6cC8HIGjCLTRp+I5AlFWM98VFQZpg9iU2je3VVhbVTgfLOr40jnzk59pQmX6QoQ
aaMN7Sxs12WqdkwkyO9Z4YfRdNhSTISQcqR9F9WfinhQ9PzFcDg85j8C4/nr/Eig
2s5ksBXnRmHjFQR1TmJdXc6uJVmnnYsQoJ8oIKVKoMQNyHN36srXIRLgEl6ZXwkE
H2nWNv1JJJd9wWtF9mHdTOVvH8ylX4nlSOpePDb2+1s3aA==
-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:42 2026 by rpki-client