Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131322e302f32342d3234203d3e20313334333636.roa
File:                     3133392e3139382e3131322e302f32342d3234203d3e20313334333636.roa (raw, json)
Hash identifier:          sr8lK08F576v5AQrl48IohbguFoXExzC5PU0VNNsX2M=
Subject key identifier:   08:78:DA:9F:85:30:E2:4C:BD:7C:94:FB:39:9F:5F:F4:D6:6D:A9:6F
Certificate issuer:       /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial:       131B56C92C2A4A67F061AC7B5877603C16C98463
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131322e302f32342d3234203d3e20313334333636.roa
Signing time:             Wed 15 Apr 2026 06:58:00 +0000
ROA not before:           Wed 15 Apr 2026 06:53:00 +0000
ROA not after:            Wed 14 Apr 2027 06:58:00 +0000
asID:                     134366
IP address blocks:        139.198.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1b:56:c9:2c:2a:4a:67:f0:61:ac:7b:58:77:60:3c:16:c9:84:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
        Validity
            Not Before: Apr 15 06:53:00 2026 GMT
            Not After : Apr 14 06:58:00 2027 GMT
        Subject: CN=0878DA9F8530E24CBD7C94FB399F5FF4D66DA96F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f1:90:69:b5:44:16:09:54:60:6b:e7:d8:4c:
                    dd:b1:68:f7:b2:1a:9f:ca:9a:56:d2:d3:cb:04:46:
                    7d:72:fc:8e:6d:1c:c8:f1:a1:60:6f:b2:54:72:fa:
                    d4:70:8e:19:7b:58:77:8c:6c:3e:4d:d2:26:ab:ef:
                    73:09:29:cf:08:b6:14:07:7f:8d:ed:7a:a8:74:68:
                    18:86:e7:07:77:7c:cc:8b:f0:a2:69:5f:f6:58:ee:
                    50:15:ad:53:9c:a7:ef:a1:df:44:f3:57:25:ef:93:
                    f8:95:e8:60:c7:2c:86:86:1c:c4:1f:0f:c3:5d:3f:
                    10:0d:a1:10:c6:28:5b:7a:0a:4e:26:ba:64:9a:b3:
                    d3:2f:ee:ed:af:c3:95:a3:0a:c7:f1:df:bd:9a:de:
                    9f:4e:5f:f1:4a:92:d1:0a:19:71:47:7a:81:bb:02:
                    4e:a8:e0:af:03:dc:7c:e4:f2:ce:ce:37:25:f1:04:
                    73:36:6a:d9:d6:c5:f8:0b:6b:56:cc:1c:a5:04:bd:
                    ec:1a:be:14:7e:43:18:9f:18:a9:56:91:ad:37:87:
                    e6:42:e9:63:9f:4f:ce:96:b8:ad:ab:0f:ec:51:dd:
                    0e:20:2f:6e:56:23:08:e9:16:b5:3b:5c:2c:65:f5:
                    a3:d2:d4:87:83:d1:91:63:ac:ff:30:34:e9:16:76:
                    f4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:78:DA:9F:85:30:E2:4C:BD:7C:94:FB:39:9F:5F:F4:D6:6D:A9:6F
            X509v3 Authority Key Identifier:
                keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131322e302f32342d3234203d3e20313334333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.198.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:07:fb:e8:2d:0e:e1:70:ce:0d:fa:ed:d7:f7:21:98:8f:3c:
         6f:cd:77:8a:ce:20:db:5e:0a:37:26:ca:4b:be:5f:33:7d:68:
         b3:5c:61:b4:82:f6:d8:2d:63:a0:52:9a:1b:51:30:69:a6:7c:
         42:17:22:3d:d7:74:c2:eb:cb:76:46:f3:24:3b:53:17:29:18:
         60:a1:39:e0:2d:23:2c:dd:89:73:15:3c:4d:66:f3:46:4e:c0:
         c0:4a:b0:04:e7:a2:62:6d:32:d3:ef:33:83:14:ea:e8:31:f8:
         0b:d4:f8:ae:ee:09:90:4f:25:14:28:ad:1f:49:0d:58:1e:d9:
         e7:9a:3c:4d:21:7e:cf:8b:8c:ca:12:35:26:34:a7:6e:cc:38:
         f4:10:8d:52:9a:cc:bc:e0:d0:34:40:8d:fa:cc:c4:9f:66:dc:
         32:64:1a:42:07:b8:be:d7:89:6d:ab:e3:75:c1:51:d5:46:83:
         af:1a:27:9d:9f:97:df:0d:e6:db:27:2d:cd:48:30:6f:a6:73:
         f7:d5:90:98:a2:74:56:24:58:e7:3c:9d:6e:f7:a0:a3:e0:62:
         1d:37:2f:78:24:3e:c3:a8:75:24:7d:35:58:5a:3a:47:02:bc:
         8b:02:96:33:86:cd:ec:c2:e9:cd:94:fa:0b:51:b7:38:a5:a2:
         ae:ea:bd:11
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUExtWySwqSmfwYax7WHdgPBbJhGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz
RUJEMTBDQTAeFw0yNjA0MTUwNjUzMDBaFw0yNzA0MTQwNjU4MDBaMDMxMTAvBgNV
BAMTKDA4NzhEQTlGODUzMEUyNENCRDdDOTRGQjM5OUY1RkY0RDY2REE5NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU8ZBptUQWCVRga+fYTN2xaPey
Gp/KmlbS08sERn1y/I5tHMjxoWBvslRy+tRwjhl7WHeMbD5N0iar73MJKc8IthQH
f43teqh0aBiG5wd3fMyL8KJpX/ZY7lAVrVOcp++h30TzVyXvk/iV6GDHLIaGHMQf
D8NdPxANoRDGKFt6Ck4mumSas9Mv7u2vw5WjCsfx372a3p9OX/FKktEKGXFHeoG7
Ak6o4K8D3Hzk8s7ONyXxBHM2atnWxfgLa1bMHKUEvewavhR+QxifGKlWka03h+ZC
6WOfT86WuK2rD+xR3Q4gL25WIwjpFrU7XCxl9aPS1IeD0ZFjrP8wNOkWdvRpAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUCHjan4Uw4ky9fJT7OZ9f9NZtqW8wHwYDVR0j
BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND
NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTIzNjUxLzEvMzEzMzM5MmUz
MTM5MzgyZTMxMzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDMzMzYz
Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIvGcDANBgkqhkiG9w0BAQsFAAOCAQEACAf76C0O4XDODfrt
1/chmI88b813is4g214KNybKS75fM31os1xhtIL22C1joFKaG1EwaaZ8QhciPdd0
wuvLdkbzJDtTFykYYKE54C0jLN2JcxU8TWbzRk7AwEqwBOeiYm0y0+8zgxTq6DH4
C9T4ru4JkE8lFCitH0kNWB7Z55o8TSF+z4uMyhI1JjSnbsw49BCNUprMvODQNECN
+szEn2bcMmQaQge4vteJbavjdcFR1UaDrxonnZ+X3w3m2yctzUgwb6Zz99WQmKJ0
ViRY5zydbvego+BiHTcveCQ+w6h1JH01WFo6RwK8iwKWM4bN7MLpzZT6C1G3OKWi
ruq9EQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:30:22 2026 by rpki-client