Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e302e302f32302d3230203d3e203539303738.roa
File:                     3133392e3139382e302e302f32302d3230203d3e203539303738.roa (raw, json)
Hash identifier:          5xqnl08bhfBeyYcfRy8VDoYkfk36UHj6ribkjkGaKNw=
Subject key identifier:   F5:0C:E3:B9:26:C9:6F:B2:A4:B2:3E:2E:CC:12:E7:64:91:D7:5A:9F
Certificate issuer:       /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial:       57A1270DC565A64C1F1625B437991CB09BCF2623
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e302e302f32302d3230203d3e203539303738.roa
Signing time:             Wed 15 Apr 2026 07:27:30 +0000
ROA not before:           Wed 15 Apr 2026 07:22:30 +0000
ROA not after:            Wed 14 Apr 2027 07:27:30 +0000
asID:                     59078
IP address blocks:        139.198.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a1:27:0d:c5:65:a6:4c:1f:16:25:b4:37:99:1c:b0:9b:cf:26:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
        Validity
            Not Before: Apr 15 07:22:30 2026 GMT
            Not After : Apr 14 07:27:30 2027 GMT
        Subject: CN=F50CE3B926C96FB2A4B23E2ECC12E76491D75A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c5:79:d7:a8:4f:66:11:58:fb:9b:cc:cc:d8:
                    f6:89:56:4e:9c:a0:80:53:9e:d0:d9:f6:d1:80:c7:
                    9b:73:f4:aa:07:78:ac:e3:16:dd:b7:d2:78:ce:d7:
                    70:1d:ee:f3:1a:b4:ce:a4:bf:81:22:41:86:d8:2e:
                    84:2c:ed:a2:01:b7:31:ff:23:f5:ce:07:24:e9:70:
                    e5:b2:4b:90:df:56:6f:80:2d:d0:d5:df:3d:ad:ed:
                    22:b8:93:5a:68:2d:85:41:39:b0:be:0c:78:d6:bb:
                    7d:35:c7:a3:99:28:f9:49:6b:22:cd:f3:22:c0:d0:
                    51:be:0e:65:ac:24:a4:59:8e:05:58:91:9a:b7:b4:
                    9f:dc:2d:4c:9a:ed:8c:0d:d2:b5:e1:68:5a:60:68:
                    7c:3f:17:6f:11:b7:a0:6e:a1:46:cc:a2:86:80:07:
                    80:8b:d5:cf:02:8e:4d:6f:bb:ea:2c:92:ac:90:7f:
                    a3:3d:9d:8a:e0:30:0b:83:8f:aa:ef:9f:7f:c5:6c:
                    65:31:70:07:12:9c:fe:ee:10:cd:a9:6a:4f:52:86:
                    2a:25:b7:f4:63:76:51:92:d8:70:2a:ea:9b:5e:17:
                    45:ce:7e:32:a2:52:56:b9:ff:40:35:a5:59:82:2b:
                    71:89:12:b8:92:bc:03:42:85:c4:f4:a9:81:a9:9b:
                    45:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:0C:E3:B9:26:C9:6F:B2:A4:B2:3E:2E:CC:12:E7:64:91:D7:5A:9F
            X509v3 Authority Key Identifier:
                keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e302e302f32302d3230203d3e203539303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.198.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4a:3f:42:61:b2:45:fc:33:2b:10:35:5a:4f:69:49:99:9c:9a:
         33:ef:81:04:63:0a:16:fd:20:11:b9:6f:37:dc:a8:ef:c8:9e:
         5c:bc:3a:63:3d:d4:ec:6a:0e:ba:b8:94:50:fa:d6:b7:a6:0c:
         38:8d:66:3c:4f:75:85:d3:da:8c:ec:12:3c:50:e1:bb:5d:5e:
         85:fe:f7:bf:7d:cb:d4:2e:ea:fd:26:3f:37:72:29:5f:41:12:
         d1:15:42:6b:f9:39:c8:b8:76:f1:6d:4f:0b:6f:27:9f:39:89:
         14:54:a1:b5:ed:46:be:58:09:c6:52:e2:28:dd:87:1b:f0:d6:
         af:b1:cf:7f:41:34:a3:2a:e6:10:e2:bc:99:2f:ff:0d:d1:c2:
         63:a6:a8:37:0b:76:57:7f:01:75:24:c9:c4:0f:27:d0:c9:25:
         07:eb:4c:16:08:3a:62:a4:60:30:b1:f7:ee:bc:ac:b4:5d:92:
         23:28:3b:50:47:4d:1c:ac:c2:87:bd:86:73:54:15:d1:d5:e6:
         19:a4:d6:60:0d:ad:34:27:df:29:90:56:a6:ba:54:bb:65:9d:
         12:b0:ae:4d:b5:cd:ca:b3:6e:53:a7:6a:79:01:47:9c:e4:ff:
         05:5b:d1:b3:c9:ef:38:64:b7:24:26:77:9a:dd:82:e4:eb:96:
         72:a7:0c:00
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUV6EnDcVlpkwfFiW0N5kcsJvPJiMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz
RUJEMTBDQTAeFw0yNjA0MTUwNzIyMzBaFw0yNzA0MTQwNzI3MzBaMDMxMTAvBgNV
BAMTKEY1MENFM0I5MjZDOTZGQjJBNEIyM0UyRUNDMTJFNzY0OTFENzVBOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCixXnXqE9mEVj7m8zM2PaJVk6c
oIBTntDZ9tGAx5tz9KoHeKzjFt230njO13Ad7vMatM6kv4EiQYbYLoQs7aIBtzH/
I/XOByTpcOWyS5DfVm+ALdDV3z2t7SK4k1poLYVBObC+DHjWu301x6OZKPlJayLN
8yLA0FG+DmWsJKRZjgVYkZq3tJ/cLUya7YwN0rXhaFpgaHw/F28Rt6BuoUbMooaA
B4CL1c8Cjk1vu+oskqyQf6M9nYrgMAuDj6rvn3/FbGUxcAcSnP7uEM2pak9Shiol
t/RjdlGS2HAq6pteF0XOfjKiUla5/0A1pVmCK3GJEriSvANChcT0qYGpm0VdAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU9QzjuSbJb7Kksj4uzBLnZJHXWp8wHwYDVR0j
BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND
NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTIzNjUxLzEvMzEzMzM5MmUzMTM5
MzgyZTMwMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzUzOTMwMzczOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBIvGADANBgkqhkiG9w0BAQsFAAOCAQEASj9CYbJF/DMrEDVaT2lJmZyaM++B
BGMKFv0gEblvN9yo78ieXLw6Yz3U7GoOuriUUPrWt6YMOI1mPE91hdPajOwSPFDh
u11ehf73v33L1C7q/SY/N3IpX0ES0RVCa/k5yLh28W1PC28nnzmJFFShte1GvlgJ
xlLiKN2HG/DWr7HPf0E0oyrmEOK8mS//DdHCY6aoNwt2V38BdSTJxA8n0MklB+tM
Fgg6YqRgMLH37rystF2SIyg7UEdNHKzCh72Gc1QV0dXmGaTWYA2tNCffKZBWprpU
u2WdErCuTbXNyrNuU6dqeQFHnOT/BVvRs8nvOGS3JCZ3mt2C5OuWcqcMAA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:23:20 2026 by rpki-client