Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131322e302f32342d3234203d3e203539303738.roa
File:                     3133392e3139382e3131322e302f32342d3234203d3e203539303738.roa (raw, json)
Hash identifier:          +E7j4unOM+rNQR8mTfSHCauUT0gsMAl+V37O5y1jTGg=
Subject key identifier:   EF:15:1B:82:B3:22:EA:48:D3:A2:89:2C:69:3B:AC:09:82:43:3F:54
Certificate issuer:       /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial:       4A6D472564828927D6105F098B4E7F26C6E0D84F
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131322e302f32342d3234203d3e203539303738.roa
Signing time:             Wed 15 Apr 2026 07:43:15 +0000
ROA not before:           Wed 15 Apr 2026 07:38:15 +0000
ROA not after:            Wed 14 Apr 2027 07:43:15 +0000
asID:                     59078
IP address blocks:        139.198.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:6d:47:25:64:82:89:27:d6:10:5f:09:8b:4e:7f:26:c6:e0:d8:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
        Validity
            Not Before: Apr 15 07:38:15 2026 GMT
            Not After : Apr 14 07:43:15 2027 GMT
        Subject: CN=EF151B82B322EA48D3A2892C693BAC0982433F54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:27:64:ae:29:e0:77:d9:12:b7:72:03:28:26:
                    52:0a:03:c5:ab:82:7d:af:ee:60:cf:fa:eb:be:ed:
                    01:13:ed:47:c1:7c:c5:5c:28:9b:54:70:e1:40:87:
                    8b:11:b0:19:6e:9b:b0:c8:4e:89:18:b6:3e:0d:b8:
                    b2:fc:78:bc:89:0f:79:a8:c0:ba:a6:c9:04:a3:36:
                    cc:14:f0:47:d6:6d:c4:78:27:b5:6b:7f:31:2c:07:
                    8d:e0:f5:77:85:2d:15:a7:4d:78:f9:fe:81:d1:48:
                    82:e0:ba:bc:2a:3d:02:55:40:56:64:cc:3a:32:16:
                    43:d8:ea:f5:79:ef:47:e7:1b:89:e9:b4:03:91:3a:
                    69:16:77:79:0b:a5:eb:27:cb:ba:90:18:63:78:46:
                    7b:4a:ca:a7:92:4b:ba:3c:29:ae:b1:94:43:44:d7:
                    2b:e3:32:e9:99:fb:24:34:e1:7c:91:f3:2a:ba:55:
                    6a:48:0f:8b:ea:e3:0d:20:ee:26:3e:22:90:52:42:
                    5c:7c:5f:16:da:c1:22:ab:62:d6:22:50:3d:dd:f4:
                    98:14:8a:36:7f:66:65:94:ad:97:85:d1:e6:32:f8:
                    e7:fe:34:1f:f9:34:4a:b9:9d:cc:d0:60:5f:23:8b:
                    ec:4f:55:36:18:15:c9:7a:e5:7d:8d:c7:a2:7a:33:
                    fd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:15:1B:82:B3:22:EA:48:D3:A2:89:2C:69:3B:AC:09:82:43:3F:54
            X509v3 Authority Key Identifier:
                keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131322e302f32342d3234203d3e203539303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.198.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:5e:fe:a4:a4:d5:79:2e:cd:cf:12:1a:8d:dd:02:76:96:93:
         fe:b3:b2:06:c0:44:ce:6b:23:84:41:1b:6c:bc:fe:57:86:67:
         cc:8d:63:7e:b6:58:3b:c4:58:7d:f6:63:67:4d:c3:08:76:73:
         fb:5e:7b:0f:97:e0:52:4b:b4:44:8b:90:eb:c6:74:b5:aa:43:
         5e:5f:2e:50:b1:68:20:55:a9:73:f9:45:fa:75:cf:71:69:69:
         a4:c7:08:cb:02:dc:3d:93:a7:41:c7:3a:f2:59:00:5f:3c:4f:
         e2:8c:e6:26:57:89:ad:7e:2f:a6:aa:b0:c4:78:94:90:69:5e:
         70:10:6d:32:f0:f8:96:c6:07:ee:a7:d1:e1:b3:32:4e:94:a6:
         ea:a3:9b:1e:be:48:4d:0d:d4:73:9d:20:ea:41:ce:83:fe:20:
         ae:eb:e8:bb:a9:8c:8b:c5:69:15:11:6e:b2:44:51:35:a1:dc:
         1c:a4:0e:69:2d:98:1c:80:e8:f1:97:ff:95:49:fb:19:08:76:
         b9:2d:0b:16:3d:49:cb:e0:3e:a8:38:26:35:1b:24:74:f0:63:
         bf:04:56:0d:ef:e9:5b:76:b0:db:78:e3:be:48:07:bc:95:e6:
         5c:93:b1:1a:66:65:bf:22:5e:e3:75:f5:ad:35:5a:a9:76:3b:
         b9:fb:ff:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:26:54 2026 by rpki-client