Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131362e302f32342d3234203d3e203539303738.roa
File:                     3133392e3139382e3131362e302f32342d3234203d3e203539303738.roa (raw, json)
Hash identifier:          R+9CEe8lf42dCUvagb9L3bVXNAnRBTLlmNWDwpXNmj4=
Subject key identifier:   2E:36:08:2B:43:06:41:01:FB:3E:B1:05:07:D5:08:F3:D9:DB:9A:4D
Certificate issuer:       /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial:       27C4C09A4AC5FB347932A38FEEBD6A5248BFAA1D
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131362e302f32342d3234203d3e203539303738.roa
Signing time:             Wed 15 Apr 2026 07:27:29 +0000
ROA not before:           Wed 15 Apr 2026 07:22:29 +0000
ROA not after:            Wed 14 Apr 2027 07:27:29 +0000
asID:                     59078
IP address blocks:        139.198.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c4:c0:9a:4a:c5:fb:34:79:32:a3:8f:ee:bd:6a:52:48:bf:aa:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
        Validity
            Not Before: Apr 15 07:22:29 2026 GMT
            Not After : Apr 14 07:27:29 2027 GMT
        Subject: CN=2E36082B43064101FB3EB10507D508F3D9DB9A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3b:58:dc:74:4e:16:7f:7a:39:25:f5:a5:8d:
                    62:8e:a5:e8:2a:9b:d7:a9:83:f7:02:a8:d5:b6:26:
                    99:98:27:4c:a1:ec:61:49:c2:e6:83:91:89:62:54:
                    d0:d4:c8:9c:08:8c:30:de:8f:f2:58:96:a3:40:c9:
                    09:5d:cc:c6:bb:90:ba:e5:5e:d2:63:65:ad:6d:6a:
                    29:ed:e0:db:40:15:bf:62:87:d1:22:a5:9d:60:51:
                    68:2e:84:93:a3:e0:18:23:bf:f9:79:ba:3c:b2:85:
                    93:6b:40:17:eb:0b:5f:83:dc:c9:ab:7c:81:e2:fa:
                    eb:47:d4:b0:c0:1d:a2:c5:10:9d:b6:95:d5:04:fc:
                    8e:8c:82:28:3c:60:e0:c6:98:f9:8b:e1:c0:3f:f7:
                    3f:e2:5d:ac:1c:fa:3c:42:9a:f0:e3:36:fb:f0:e5:
                    89:5a:28:49:5e:ca:4a:9d:d2:6c:22:69:f7:53:df:
                    7f:5e:87:bf:37:85:08:25:6e:8f:dd:9b:99:ac:78:
                    2a:6b:bb:21:b5:57:46:98:e7:e4:f5:25:59:5d:54:
                    ff:49:e5:f8:03:ca:8c:07:42:c7:23:4c:79:87:69:
                    9d:84:fb:a9:a2:8f:22:db:b4:43:08:0d:5e:9e:ec:
                    f4:54:1a:65:9f:e2:0e:30:a4:06:fc:64:7b:38:e5:
                    21:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:36:08:2B:43:06:41:01:FB:3E:B1:05:07:D5:08:F3:D9:DB:9A:4D
            X509v3 Authority Key Identifier:
                keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131362e302f32342d3234203d3e203539303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.198.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:4c:8f:a1:10:26:35:2e:88:09:22:71:f8:17:bb:68:6d:17:
         1e:69:1e:ec:48:c8:17:78:9e:11:81:cc:31:28:22:72:52:a7:
         01:d0:f5:8a:72:fd:1f:62:d7:bb:f8:c6:31:0d:e9:6b:43:f9:
         5c:7f:b8:a9:9a:65:48:71:27:d2:61:b5:28:4d:aa:31:16:b1:
         5c:e0:33:c6:13:28:d6:73:c9:01:ee:11:e5:36:c2:9c:05:65:
         1a:f0:97:cb:df:28:77:58:ca:49:c0:cd:c4:e5:52:54:0e:24:
         7a:7c:70:df:f4:0f:3e:d0:24:40:03:e0:5d:9c:da:2f:b1:c9:
         ec:d9:ec:80:9f:69:2f:48:d0:4f:88:c3:1f:8d:c4:0a:6a:55:
         59:86:fd:e5:ab:e4:76:b5:a3:f7:71:11:00:2c:07:3e:ba:2c:
         31:99:d1:7f:68:d8:18:78:07:ad:bc:54:08:4e:af:c4:37:b8:
         6b:ae:b1:d9:9a:f3:15:fd:1a:6b:e1:a5:15:03:01:68:3e:da:
         a3:dc:20:5b:a0:47:18:71:f4:9e:ac:f1:b2:e1:58:2a:cc:4a:
         97:eb:40:36:71:12:4f:c4:b9:40:78:88:c2:2d:6c:8b:e4:91:
         91:3a:1f:85:d5:76:fd:46:c2:10:65:f7:25:29:b2:05:ff:b6:
         d3:e7:f9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:30:07 2026 by rpki-client