Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e302e302f32342d3234203d3e203539303738.roa
File:                     3133392e3139382e302e302f32342d3234203d3e203539303738.roa (raw, json)
Hash identifier:          72FLwimIIFYfkGoKewngDOlF+BeuOiFN/znvSvt+fvc=
Subject key identifier:   BF:A8:2B:45:0A:77:2D:77:78:ED:E5:54:31:7C:82:EA:44:8A:99:00
Certificate issuer:       /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial:       1AAAEC2BA24BE2B9762BE2CD229C468FB77D2CA1
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e302e302f32342d3234203d3e203539303738.roa
Signing time:             Wed 15 Apr 2026 07:21:28 +0000
ROA not before:           Wed 15 Apr 2026 07:16:28 +0000
ROA not after:            Wed 14 Apr 2027 07:21:28 +0000
asID:                     59078
IP address blocks:        139.198.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:aa:ec:2b:a2:4b:e2:b9:76:2b:e2:cd:22:9c:46:8f:b7:7d:2c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
        Validity
            Not Before: Apr 15 07:16:28 2026 GMT
            Not After : Apr 14 07:21:28 2027 GMT
        Subject: CN=BFA82B450A772D7778EDE554317C82EA448A9900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:00:42:b3:e1:bf:54:41:ef:4b:80:d1:e1:a7:
                    79:2c:89:06:5e:2a:2d:1b:00:44:d6:a9:aa:6f:d2:
                    f7:f6:db:8c:b0:00:8a:13:ff:f5:f3:2b:85:80:63:
                    09:31:53:5a:4f:6e:98:00:9b:a9:29:ef:a6:0c:92:
                    f0:01:4e:75:7a:90:62:7c:e8:1d:88:1f:ed:04:fa:
                    e9:eb:31:99:21:df:cd:d6:26:95:1d:22:14:a8:47:
                    22:dc:37:6c:f7:e1:aa:27:45:6e:01:24:9a:30:21:
                    31:7d:4f:28:3c:03:e8:85:9c:b4:36:95:3a:61:69:
                    29:3d:ca:b3:eb:cb:ac:c4:cf:10:33:65:1e:2f:2d:
                    6d:87:55:cb:7b:66:c8:b0:e2:cd:7b:a5:aa:c2:b7:
                    d0:c0:13:94:f9:e1:9a:3e:86:3d:d1:cf:f1:62:a4:
                    69:ce:1c:aa:49:9e:b6:3d:3e:8f:4d:8c:a8:f8:15:
                    f6:f2:fb:2e:f5:d0:50:34:24:50:e4:e1:d6:d3:23:
                    61:ad:17:5d:d4:27:f2:43:e2:9a:b0:d7:77:e6:a4:
                    17:64:99:22:cd:54:68:04:a1:44:f2:d0:31:83:51:
                    1d:00:49:0e:96:21:95:32:6e:95:48:28:56:3d:4a:
                    55:4b:87:2a:55:2e:b4:53:ad:11:be:80:58:20:c1:
                    00:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A8:2B:45:0A:77:2D:77:78:ED:E5:54:31:7C:82:EA:44:8A:99:00
            X509v3 Authority Key Identifier:
                keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e302e302f32342d3234203d3e203539303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.198.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:59:91:9f:70:24:96:ec:c9:37:6a:5c:c9:c8:dc:49:f0:67:
         39:63:ee:d4:33:c8:78:ef:b2:11:38:29:cd:c8:83:f8:e0:b1:
         ac:d2:d2:bb:d4:f4:8e:2a:b7:f7:62:e1:75:cc:a8:e9:c6:06:
         d6:9e:5e:a9:ec:0e:fb:e0:47:07:02:71:0e:d5:72:4e:f0:85:
         29:a6:12:3d:36:08:c8:bf:af:24:ac:27:65:06:f4:ba:da:c9:
         1f:ac:5d:cc:60:2d:02:a4:ef:8c:58:06:b5:0f:59:88:a5:8b:
         d9:9e:ee:de:21:cb:f9:c6:2e:8e:03:ed:e2:ca:7f:36:d2:1d:
         00:42:1b:3b:9e:62:a8:91:80:5d:19:c3:7b:20:5c:ff:e5:50:
         d9:17:62:35:af:9e:06:1b:63:f1:de:e7:cf:f4:ea:57:f5:0a:
         85:8e:69:18:f9:67:0e:f4:0e:95:2a:67:b7:24:27:ce:09:28:
         a3:95:51:ab:3d:42:89:fe:d2:b7:39:b3:ac:48:c4:c9:7e:ae:
         37:6a:ae:f0:a5:fc:03:c0:dc:65:01:ef:1e:ae:73:44:6f:c5:
         6a:f7:ad:36:fb:b0:02:0f:18:07:4b:e8:57:98:7f:f8:54:98:
         dd:70:c0:7d:03:08:9b:3c:25:0b:5b:d4:5a:20:7d:9d:1b:90:
         98:e7:4e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:42:03 2026 by rpki-client