Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3130382e302f32342d3234203d3e203539303738.roa
File:                     3133392e3139382e3130382e302f32342d3234203d3e203539303738.roa (raw, json)
Hash identifier:          /R/tRCthe6jehOZOptuJH9OGZ9nZ06Zqm7EdFIUh2ec=
Subject key identifier:   E1:53:18:BB:67:E4:7F:4E:53:08:A1:01:5E:EE:53:A6:19:7A:06:92
Certificate issuer:       /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial:       0E10B251F7E8A8974698307E016A9CD360B6198D
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3130382e302f32342d3234203d3e203539303738.roa
Signing time:             Wed 15 Apr 2026 07:27:30 +0000
ROA not before:           Wed 15 Apr 2026 07:22:30 +0000
ROA not after:            Wed 14 Apr 2027 07:27:30 +0000
asID:                     59078
IP address blocks:        139.198.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:10:b2:51:f7:e8:a8:97:46:98:30:7e:01:6a:9c:d3:60:b6:19:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
        Validity
            Not Before: Apr 15 07:22:30 2026 GMT
            Not After : Apr 14 07:27:30 2027 GMT
        Subject: CN=E15318BB67E47F4E5308A1015EEE53A6197A0692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8e:b9:64:e7:84:6a:7e:06:f1:32:6d:9f:93:
                    46:55:79:3f:c5:a0:bb:29:5a:4a:d0:29:b0:df:6b:
                    9e:67:81:45:0c:af:05:fd:8e:6d:e7:ac:31:f5:a3:
                    aa:a8:41:7a:3d:f8:de:78:a7:5e:89:6d:ac:3a:6e:
                    f8:88:18:ca:1f:97:f1:b2:56:5c:3e:68:be:15:cb:
                    d5:0c:2f:7d:9f:e8:6b:36:8e:63:78:9d:20:9a:2c:
                    dd:ad:80:68:18:f5:b4:92:9e:9d:fb:18:2d:67:f4:
                    e6:85:62:3e:ab:10:c6:44:eb:66:57:0a:0f:9f:c0:
                    7c:95:a8:2c:69:95:50:13:ad:18:e8:35:8d:9e:ad:
                    d2:42:08:6e:a4:d7:03:92:1b:10:b7:1e:39:e4:85:
                    04:80:9c:2b:9a:cc:60:68:cb:ed:8e:84:17:4b:5d:
                    b2:5f:fd:76:06:d2:99:de:89:1c:65:fa:c6:7c:82:
                    b6:da:ba:bc:0f:4f:85:2b:81:92:6e:87:b5:9b:cc:
                    a5:f8:26:0e:2d:b0:ff:cc:cb:ed:68:ed:dd:f5:38:
                    11:38:6c:2c:7c:6e:9d:c6:dc:89:ce:c4:87:c4:78:
                    c4:b1:e1:c3:bd:4f:32:df:52:09:6d:b7:a9:4b:6a:
                    47:9f:01:09:df:4a:3f:52:66:f4:56:f0:a6:1a:35:
                    b9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:53:18:BB:67:E4:7F:4E:53:08:A1:01:5E:EE:53:A6:19:7A:06:92
            X509v3 Authority Key Identifier:
                keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3130382e302f32342d3234203d3e203539303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.198.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:7d:ee:0c:e5:37:7f:4d:70:8a:f6:57:ec:9c:cf:ba:ff:b8:
         c4:f6:74:49:b3:fe:95:c4:e0:86:42:9a:d4:76:99:a4:1b:61:
         e1:9a:8b:15:de:f2:c4:f7:f3:d1:ee:92:92:ca:ad:17:39:1c:
         4f:54:3a:c1:21:a2:1d:14:f4:71:b2:38:22:cc:41:70:43:70:
         fc:33:09:57:1d:ed:d8:c0:70:c2:30:b0:29:61:54:76:9b:e3:
         77:49:3b:54:12:d3:ef:12:cc:03:57:ad:dd:45:68:0f:1b:8f:
         a2:62:50:ff:80:2a:f9:71:f3:54:92:a1:49:e6:de:95:e7:a6:
         fd:fc:17:d4:f9:15:9e:11:0a:1d:df:2d:91:24:94:58:ff:33:
         b5:56:40:58:04:06:09:3d:f2:4a:82:65:dd:b9:69:d6:02:35:
         a4:a4:7c:b8:09:4f:59:ac:59:c1:87:63:fc:13:5d:ac:9e:65:
         60:aa:ad:46:64:74:e6:77:52:62:1d:86:d1:c1:0d:21:66:bf:
         6b:7e:7f:6d:87:97:31:f0:b2:d0:32:e4:1b:15:b3:01:cd:7e:
         95:23:38:75:90:51:6e:fa:f6:76:8d:59:65:b6:9c:a0:04:48:
         d5:d8:eb:b3:15:d3:ca:ae:55:ea:b4:9c:64:ea:7b:11:57:ca:
         03:03:67:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:17:24 2026 by rpki-client