Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e312e302f32342d3234203d3e203539303738.roa
File:                     3133392e3139382e312e302f32342d3234203d3e203539303738.roa (raw, json)
Hash identifier:          H0wcCFadsHcFvzZD73P1kJST4g277CQbPfAbxXUOank=
Subject key identifier:   27:F1:45:BC:C4:95:61:FC:27:42:B4:C3:CC:50:F1:15:48:48:36:9A
Certificate issuer:       /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial:       7A047ACEEFF6A1E968F2EB219387BDCE53B89E1D
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e312e302f32342d3234203d3e203539303738.roa
Signing time:             Wed 15 Apr 2026 07:21:27 +0000
ROA not before:           Wed 15 Apr 2026 07:16:27 +0000
ROA not after:            Wed 14 Apr 2027 07:21:27 +0000
asID:                     59078
IP address blocks:        139.198.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:04:7a:ce:ef:f6:a1:e9:68:f2:eb:21:93:87:bd:ce:53:b8:9e:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
        Validity
            Not Before: Apr 15 07:16:27 2026 GMT
            Not After : Apr 14 07:21:27 2027 GMT
        Subject: CN=27F145BCC49561FC2742B4C3CC50F1154848369A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:51:ea:88:b3:b5:87:dc:f8:c2:77:8d:94:d8:
                    88:9a:46:42:41:1d:23:7c:cd:c6:0f:1b:0e:ca:5c:
                    64:eb:4e:6f:06:c2:17:4c:6b:08:99:99:da:9d:d1:
                    20:01:4a:3c:24:af:43:e9:b1:d9:1c:dd:55:a8:53:
                    52:56:e0:5e:51:91:08:8b:6e:c3:cc:f1:f0:09:09:
                    ea:0f:60:79:fa:a2:d1:e3:81:07:5a:48:2d:e3:7b:
                    78:2d:4c:24:76:fc:13:33:0f:de:f3:45:30:61:5b:
                    cd:44:23:08:5d:30:59:08:96:04:0a:0f:50:eb:2c:
                    53:e1:67:df:2d:33:1b:f7:bc:fd:ba:87:2d:a0:3d:
                    eb:5a:cb:68:85:e3:9a:2d:24:5b:25:d4:09:b6:e5:
                    c2:87:3f:fe:41:65:0f:4a:c5:83:47:9b:2a:b2:a9:
                    0c:8a:2d:c7:3a:d1:1e:8e:cf:4a:89:42:1b:db:18:
                    6d:dc:78:c5:e0:22:5d:00:a0:6d:14:41:cf:9d:97:
                    87:99:70:b9:c0:b8:b7:e9:10:94:f5:50:4d:5a:b5:
                    7f:18:20:70:e7:d3:80:a9:e8:cb:70:2c:21:ef:da:
                    35:df:ab:a5:19:1d:d7:dc:54:82:20:65:76:ce:fb:
                    18:e3:4f:a3:8e:ef:d4:e6:52:50:0e:55:f6:46:49:
                    1b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F1:45:BC:C4:95:61:FC:27:42:B4:C3:CC:50:F1:15:48:48:36:9A
            X509v3 Authority Key Identifier:
                keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e312e302f32342d3234203d3e203539303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.198.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:e6:da:c3:63:91:af:ff:57:29:cd:11:f3:28:ba:88:09:d6:
         07:a7:f7:ec:a0:d3:e1:47:df:bb:79:b3:5f:0f:48:ca:67:8c:
         0d:5d:a0:20:cb:18:89:0f:4c:95:4f:b7:f2:2a:16:e1:af:9c:
         d4:6a:fc:48:25:e3:d8:8c:fd:f5:59:75:dc:ff:60:84:03:03:
         da:f5:64:56:b3:d5:24:34:e8:2f:c3:bb:af:24:ff:c8:cd:43:
         93:f1:88:5f:4d:3d:1f:74:ec:0b:52:0c:63:38:e4:4f:fc:bc:
         b1:e9:11:e5:ee:cf:74:9f:81:55:7f:1c:8b:f4:e0:80:16:9e:
         cc:d2:6e:f8:2f:a1:5f:cc:91:91:bc:ec:32:49:2f:cd:85:b9:
         9d:de:c1:28:35:f3:db:2a:0a:d4:ed:16:59:af:b4:c1:34:dc:
         e4:9c:f1:3b:49:8c:bc:68:1d:2c:76:cc:24:80:77:ce:98:73:
         8a:49:f5:47:02:72:ae:f2:9b:94:32:2c:61:07:07:ea:50:e1:
         23:fd:9e:6c:16:81:12:cb:81:61:ab:3b:65:25:9a:12:71:c1:
         9d:5d:31:ad:15:da:e4:f0:74:83:f6:2d:95:78:45:b2:8c:3a:
         29:de:07:32:e2:7c:ad:e5:4b:5c:fa:e6:64:bb:4d:d0:49:77:
         55:2e:11:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:43:23 2026 by rpki-client