Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131362e302f32342d3234203d3e203538343636.roa
File:                     3133392e3139382e3131362e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier:          cVoD0gusf/R7C1QIY7y9V+09hh1+12hgg1GdLafjpSY=
Subject key identifier:   75:8C:06:35:BA:F7:2A:72:0D:27:36:D1:33:B8:A9:F9:29:B2:D5:01
Certificate issuer:       /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial:       6091487FACA12D6AB1BB6A8AF1EF8745A73BC615
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131362e302f32342d3234203d3e203538343636.roa
Signing time:             Wed 15 Apr 2026 07:47:05 +0000
ROA not before:           Wed 15 Apr 2026 07:42:05 +0000
ROA not after:            Wed 14 Apr 2027 07:47:05 +0000
asID:                     58466
IP address blocks:        139.198.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:91:48:7f:ac:a1:2d:6a:b1:bb:6a:8a:f1:ef:87:45:a7:3b:c6:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
        Validity
            Not Before: Apr 15 07:42:05 2026 GMT
            Not After : Apr 14 07:47:05 2027 GMT
        Subject: CN=758C0635BAF72A720D2736D133B8A9F929B2D501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:69:cb:cc:a2:9c:0d:87:4f:29:e7:22:6e:a7:
                    54:91:03:9d:f2:e7:5c:c5:f7:9d:02:e3:8d:d2:41:
                    e9:3b:74:35:ca:a4:37:a9:77:47:68:ac:69:34:75:
                    fd:0a:98:45:77:d0:8e:a8:46:2d:90:3c:bc:b3:8c:
                    f9:d8:85:64:6a:c5:bb:99:a3:b0:48:8c:82:c3:31:
                    40:4f:08:a7:85:e1:0b:cf:89:d1:98:0d:43:8b:38:
                    a2:4c:e6:e7:15:de:9a:bd:4a:74:b6:9d:50:c2:f0:
                    73:d7:8c:c4:ed:78:4b:ee:a4:04:cd:41:34:20:a0:
                    77:aa:31:13:75:35:80:f7:80:69:78:41:8f:1e:e3:
                    7e:99:bd:3d:81:ce:38:16:53:d2:b0:cc:ba:fb:a1:
                    44:9f:bc:71:5f:4f:58:cc:dd:dc:5d:98:f9:7a:f9:
                    e4:dc:09:e3:3e:fd:bb:6c:bb:e5:1d:4c:58:2f:1e:
                    3c:5d:14:62:e9:28:fa:0c:de:88:55:09:31:79:19:
                    46:36:b6:69:ac:97:a9:4b:69:48:a8:74:8a:97:72:
                    27:93:c0:22:48:ad:77:8a:48:03:9a:10:5c:89:cb:
                    f2:e7:96:46:cc:7e:a1:a2:1e:fb:85:3a:0c:fd:21:
                    91:13:44:1b:17:f7:06:b3:bc:51:2a:ec:a8:27:b3:
                    a4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8C:06:35:BA:F7:2A:72:0D:27:36:D1:33:B8:A9:F9:29:B2:D5:01
            X509v3 Authority Key Identifier:
                keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131362e302f32342d3234203d3e203538343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.198.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:de:57:c8:56:74:31:df:cf:d7:fc:ae:95:24:2a:59:06:3f:
         4b:4d:bf:5a:7d:eb:3c:29:b1:fd:ae:b0:05:b9:c7:fe:ef:b1:
         5b:39:57:3d:b3:50:dc:81:f4:f8:af:91:bf:3b:23:a5:5a:d7:
         32:dd:1f:66:a2:0e:3b:6f:e8:b6:46:67:69:6f:b4:c2:be:81:
         e9:df:30:cb:6d:22:fb:91:81:cb:52:75:56:b6:5a:b4:9c:43:
         73:71:08:14:ce:cc:2c:da:5a:93:1e:42:22:6e:67:7f:a9:0e:
         6e:f0:15:8f:39:1e:bd:05:61:2c:6b:cc:e8:68:47:93:a6:f0:
         5a:c1:e6:d9:49:9c:3d:fb:71:0f:4a:21:ca:d3:ae:c9:2c:4f:
         9a:f7:61:89:79:98:92:c1:6d:3b:53:58:36:80:8d:97:03:b9:
         cc:1c:06:58:39:b0:70:e3:85:fe:ec:9b:33:f7:1e:3b:3f:1b:
         bd:d5:32:97:c9:01:55:b3:68:97:b3:52:23:f7:90:a2:ad:53:
         92:1f:d3:78:f8:26:3b:47:c6:7e:36:5a:9d:2e:c4:31:c8:dc:
         ab:81:84:23:db:75:42:2d:f9:4b:9c:7e:26:a1:71:97:97:f1:
         1e:05:15:7c:c6:e0:e8:c8:a6:c0:34:ae:ba:66:43:e9:a2:e8:
         ac:52:29:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:21:30 2026 by rpki-client