Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131382e302f32342d3234203d3e203538343636.roa
File:                     3133392e3139382e3131382e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier:          S7LRAwbGKLkJKPvLSEHaE2z2AJftYhJsjowcTFy8qjE=
Subject key identifier:   E2:64:0C:3B:5A:E2:F7:5A:19:F9:27:89:B1:D4:B9:83:D2:1A:0E:15
Certificate issuer:       /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial:       755801060F253C3161BAFDE0A9FCAD426039C0D8
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131382e302f32342d3234203d3e203538343636.roa
Signing time:             Wed 15 Apr 2026 07:47:04 +0000
ROA not before:           Wed 15 Apr 2026 07:42:04 +0000
ROA not after:            Wed 14 Apr 2027 07:47:04 +0000
asID:                     58466
IP address blocks:        139.198.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:58:01:06:0f:25:3c:31:61:ba:fd:e0:a9:fc:ad:42:60:39:c0:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
        Validity
            Not Before: Apr 15 07:42:04 2026 GMT
            Not After : Apr 14 07:47:04 2027 GMT
        Subject: CN=E2640C3B5AE2F75A19F92789B1D4B983D21A0E15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a2:43:11:5b:a7:0b:9d:90:74:95:29:1e:5f:
                    ad:2e:a3:71:99:53:d7:8e:c1:42:49:fb:2a:90:4d:
                    15:a4:0b:d2:1d:e1:ec:ed:17:55:bb:c6:65:2f:02:
                    24:77:c5:88:d4:21:1c:4e:a1:8e:d7:f9:59:e2:8b:
                    5b:14:33:a8:4c:f5:af:1b:93:0a:ea:95:39:ac:49:
                    56:bf:3b:9a:95:c8:4b:02:dd:f7:ed:29:22:c2:3a:
                    86:7b:41:32:fb:b2:f3:bd:7d:a0:32:01:bc:72:01:
                    f0:a4:df:b2:11:74:86:4d:db:d0:6b:a5:91:42:e9:
                    1c:95:47:55:25:cf:d3:43:59:fd:91:61:6b:9d:3f:
                    13:d1:7d:f4:27:39:79:c7:b8:b5:08:60:8c:65:cc:
                    b3:9d:ca:a8:de:18:a9:69:50:84:03:ee:21:70:d0:
                    9c:1f:2d:8e:41:f6:de:c1:ab:93:a6:6c:56:50:13:
                    bc:27:3b:32:fc:60:98:38:c1:97:5c:36:c5:a0:17:
                    41:f4:87:ce:4d:c6:53:8d:f3:db:ab:af:65:6b:3a:
                    76:85:0d:94:89:0d:6d:d7:7d:e5:fd:64:9b:d3:79:
                    63:d3:ba:e4:15:3e:1d:e0:40:51:61:0f:e9:bc:22:
                    13:ca:d6:6c:1f:dd:24:d4:5a:3e:c5:fc:68:6b:63:
                    35:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:64:0C:3B:5A:E2:F7:5A:19:F9:27:89:B1:D4:B9:83:D2:1A:0E:15
            X509v3 Authority Key Identifier:
                keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131382e302f32342d3234203d3e203538343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.198.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:da:63:d2:58:5a:81:3e:92:35:e0:1c:95:c2:b0:39:8a:df:
         c7:f6:32:09:1f:a0:e7:f0:7a:6e:d9:69:57:6d:8b:06:11:12:
         ce:50:de:10:3c:70:e1:bf:79:5e:09:38:14:ba:b8:23:fe:8b:
         17:1d:92:09:f8:cd:ff:2c:e2:9d:e2:b7:25:4a:23:73:17:90:
         f9:88:a0:d2:da:21:a9:f4:d1:bb:87:ea:bf:8d:10:48:d2:b7:
         cd:ef:66:41:ca:e0:eb:b8:85:5d:78:b1:29:3c:85:bf:1f:fd:
         a6:5e:32:48:93:56:d6:67:e3:e8:d9:b3:e0:30:01:4d:7f:31:
         4a:e1:5c:01:ee:e0:22:b1:ec:9b:97:d0:0a:f1:4f:8e:9a:f6:
         00:36:2c:eb:d8:64:19:ac:a6:46:3c:38:33:f1:67:05:5c:4d:
         e5:02:ca:30:15:f6:85:ad:e0:e4:f9:48:41:74:35:f4:c8:2a:
         a8:37:51:00:7f:12:2b:67:a8:e8:5d:8d:25:61:89:83:78:25:
         81:7a:af:18:0e:d2:6e:63:71:e7:b5:cc:11:ec:5b:c9:68:bd:
         af:37:e4:d8:e4:26:a8:5a:67:5b:a0:e0:0e:8f:69:86:90:19:
         cf:53:3b:7a:90:7e:6d:8a:cb:30:48:76:ff:48:c6:06:ff:68:
         96:15:ce:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:26:58 2026 by rpki-client