Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/1/3133392e3134382e302e302f31362d3136203d3e203233373731.roa
File:                     3133392e3134382e302e302f31362d3136203d3e203233373731.roa (raw, json)
Hash identifier:          9pwvUfLeRWTosXHUrLsGjnfPfMD5+GLs5n8xIfzPO5g=
Subject key identifier:   DA:51:4B:50:55:98:8F:16:9A:FB:4C:A2:E3:1C:D6:16:A4:D3:60:2B
Certificate issuer:       /CN=1E52A9C4B7583314611765C8F6A599F283954B3C
Certificate serial:       0F16C968884FB695E616080C59B36C4612236980
Authority key identifier: 1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/3133392e3134382e302e302f31362d3136203d3e203233373731.roa
Signing time:             Tue 14 Apr 2026 02:17:59 +0000
ROA not before:           Tue 14 Apr 2026 02:12:59 +0000
ROA not after:            Tue 13 Apr 2027 02:17:59 +0000
asID:                     23771
IP address blocks:        139.148.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:16:c9:68:88:4f:b6:95:e6:16:08:0c:59:b3:6c:46:12:23:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E52A9C4B7583314611765C8F6A599F283954B3C
        Validity
            Not Before: Apr 14 02:12:59 2026 GMT
            Not After : Apr 13 02:17:59 2027 GMT
        Subject: CN=DA514B5055988F169AFB4CA2E31CD616A4D3602B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:13:35:19:36:4e:2e:a4:71:06:e2:fe:48:dc:
                    1c:0f:45:fa:d0:73:ad:6b:d4:36:5a:97:39:1e:ad:
                    ac:7a:0f:45:07:06:c6:9b:7c:c1:80:8b:dc:6f:87:
                    c6:24:2c:e7:9e:3b:61:a8:32:38:db:23:ae:89:d4:
                    7d:da:ec:9a:6c:de:ff:ca:64:96:6e:ee:49:17:be:
                    57:b9:35:7b:6e:be:72:e8:1e:e4:b1:b7:55:ad:b0:
                    db:72:bf:e5:4e:69:a5:f4:9d:a3:12:55:94:ba:40:
                    f7:18:0c:73:e0:e9:a8:f9:1e:9e:f8:f7:62:73:34:
                    f8:b1:14:b3:f4:bb:2a:b0:d0:cc:71:b1:32:c3:f1:
                    25:75:e6:b3:4d:83:b4:97:fe:1e:16:95:e9:04:b7:
                    f3:67:20:06:fb:07:2f:d9:e9:9e:41:3b:0f:01:b2:
                    85:12:2f:3a:02:0f:22:4e:0b:da:5f:73:9f:30:fe:
                    96:cc:d4:2d:a0:da:18:14:4f:1c:a3:a2:8d:69:29:
                    5f:94:e2:2e:5e:4e:0f:c5:d9:25:ce:6e:88:e5:09:
                    ca:08:b5:95:22:8b:45:54:2f:5a:4a:7a:dd:23:7e:
                    a1:68:aa:51:60:71:13:76:48:a3:3d:6a:ea:6c:6e:
                    a1:56:12:dc:aa:27:d8:89:68:e6:ce:78:f5:c0:88:
                    bf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:51:4B:50:55:98:8F:16:9A:FB:4C:A2:E3:1C:D6:16:A4:D3:60:2B
            X509v3 Authority Key Identifier:
                keyid:1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/3133392e3134382e302e302f31362d3136203d3e203233373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.148.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         94:2c:0b:8d:35:1c:d4:19:89:11:1e:57:3b:9d:00:56:72:5f:
         d3:f5:d6:4e:54:23:ef:db:98:1c:62:92:72:b3:64:9b:72:d3:
         ae:6d:31:f4:72:c9:fa:b7:be:18:7c:60:cd:06:ae:ec:1d:36:
         38:45:63:c1:b5:e6:c6:0c:a7:2c:22:a2:56:79:b7:9f:83:bc:
         8b:6d:2c:38:6d:21:ec:33:8a:d0:bf:6b:ef:69:a1:5e:c9:8e:
         cd:ca:35:65:85:83:d6:74:6f:f6:16:58:11:d8:49:8c:a3:25:
         8e:fc:55:35:57:1f:df:44:a2:78:8f:78:3a:5b:3b:b1:90:51:
         61:72:c4:0b:a6:58:6d:72:47:ac:1b:cb:b9:e7:a4:76:ab:42:
         7a:52:4b:38:89:30:c5:29:79:01:f3:9c:79:1b:00:74:5b:f4:
         1c:df:0e:87:1c:36:db:6c:6a:23:01:db:67:ac:15:88:c1:c6:
         ec:bf:e0:6d:01:4c:09:0f:4c:77:64:72:09:e0:33:04:71:4f:
         19:c9:5f:c1:fe:a3:8a:e3:c5:79:71:6e:1e:4b:48:d0:28:a4:
         99:5c:20:44:9e:45:8f:ea:0c:eb:b5:35:4a:f6:f1:ba:23:2b:
         71:1b:cf:cf:da:ea:4e:26:79:82:87:54:e8:08:da:34:ed:5d:
         b2:5f:a7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:25:28 2026 by rpki-client