Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e31302e302f32342d3234203d3e203539303738.roa
File:                     3133392e3139382e31302e302f32342d3234203d3e203539303738.roa (raw, json)
Hash identifier:          kZnCU+ogiBE9scnrQPCpqnFHpxtfrgsjWUWoC801nsE=
Subject key identifier:   39:16:D8:5B:72:0E:57:03:CF:49:1B:5D:89:36:E4:19:71:4A:3C:45
Certificate issuer:       /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial:       5A18051B66CB3D58698B6879DFC9BB44CDE542BD
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e31302e302f32342d3234203d3e203539303738.roa
Signing time:             Wed 15 Apr 2026 06:57:59 +0000
ROA not before:           Wed 15 Apr 2026 06:52:59 +0000
ROA not after:            Wed 14 Apr 2027 06:57:59 +0000
asID:                     59078
IP address blocks:        139.198.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:18:05:1b:66:cb:3d:58:69:8b:68:79:df:c9:bb:44:cd:e5:42:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
        Validity
            Not Before: Apr 15 06:52:59 2026 GMT
            Not After : Apr 14 06:57:59 2027 GMT
        Subject: CN=3916D85B720E5703CF491B5D8936E419714A3C45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:59:40:92:56:77:7f:a9:2a:45:c5:ee:65:ff:
                    01:24:e0:17:83:37:35:ff:5b:f4:2b:f1:ec:a0:21:
                    f1:35:a0:de:07:23:b5:5b:cc:1c:d2:2a:78:3e:98:
                    18:59:ad:74:65:18:fe:5d:7f:f4:57:9e:6f:4a:61:
                    50:a9:69:c7:19:a9:8d:cc:63:c3:04:7f:eb:30:19:
                    78:3d:39:ad:4c:0f:be:bc:0e:d7:99:38:f8:d9:28:
                    77:3f:7b:67:92:23:29:90:53:81:88:99:e0:04:8a:
                    83:2b:90:3f:7a:b8:0a:95:46:d0:d4:2c:9c:31:9c:
                    fc:57:fd:3d:c7:b5:fc:f1:58:a3:98:6a:3d:2c:b6:
                    61:69:c4:9e:b7:52:5c:cd:da:78:a7:e8:70:1b:86:
                    b6:0e:d2:5e:31:b5:85:79:7a:7f:cb:e1:db:7a:99:
                    ed:d3:33:5c:be:a8:67:42:93:45:d3:59:ba:c3:5f:
                    01:06:f0:b6:1d:6d:55:c4:bf:4b:db:e0:b8:82:29:
                    43:0f:3a:16:d3:c3:b8:6a:b2:aa:d2:be:21:9f:ec:
                    40:ad:61:4d:f6:1c:b6:d4:2e:d5:cc:16:75:b6:37:
                    be:40:ce:da:06:e4:da:5c:02:61:40:78:2b:07:39:
                    85:33:85:f7:4f:fc:dc:06:b8:b8:90:fb:a6:25:aa:
                    92:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:16:D8:5B:72:0E:57:03:CF:49:1B:5D:89:36:E4:19:71:4A:3C:45
            X509v3 Authority Key Identifier:
                keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e31302e302f32342d3234203d3e203539303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.198.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:c8:0b:04:07:fa:4c:04:15:69:26:fe:b8:0f:7e:18:92:1b:
         ba:25:9c:32:4c:f4:0d:8d:69:7a:df:fa:ea:6a:e6:e1:68:4c:
         65:ed:6b:f4:f2:f1:20:f2:7b:66:16:2b:24:00:3c:a4:a1:f8:
         c3:8e:5f:89:dd:e1:40:c9:b8:36:e6:96:e5:3b:57:e9:00:77:
         29:2c:e1:f7:60:a1:c9:41:55:69:15:37:d9:71:ea:f5:4c:3e:
         9e:6d:9f:a6:e4:ed:a3:68:58:9b:fe:14:00:c7:c3:99:60:c5:
         2a:5b:c9:83:96:95:e8:c5:62:9c:f8:4e:9e:3c:44:20:a8:63:
         be:86:4c:bf:37:21:7a:1f:7b:23:c3:13:85:3d:6e:bc:f4:2d:
         e8:39:16:6d:38:85:d7:b1:e2:9a:1a:31:83:12:94:0f:a5:4b:
         81:7f:92:33:ec:2b:76:6b:7a:05:45:8c:20:f0:4b:64:ce:d7:
         d1:5c:6b:dc:e9:1a:c6:50:2e:6d:a1:23:34:91:bc:3c:ec:1e:
         91:a5:db:9c:f2:8f:00:59:77:cb:39:b1:cd:9a:a0:d5:19:ff:
         52:df:54:f8:c8:a4:29:8e:70:12:16:7b:ba:b1:20:bd:7c:e7:
         3a:53:a2:4c:f5:d8:07:f3:bf:3e:79:18:2f:28:60:35:d7:58:
         60:04:8e:c4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:17:06 2026 by rpki-client