Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131382e302f32342d3234203d3e203539303738.roa
File:                     3133392e3139382e3131382e302f32342d3234203d3e203539303738.roa (raw, json)
Hash identifier:          v6NvPAJG+xje/O6jb6Yn0pp/mmzB9uXzfv1lAMok8EQ=
Subject key identifier:   8E:6B:C5:AB:F0:0D:CF:FF:2E:75:AF:1A:52:2D:04:CC:8B:95:57:C0
Certificate issuer:       /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial:       30B6C0848C437AD1374C16B1D1F3C66C5634F7A8
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131382e302f32342d3234203d3e203539303738.roa
Signing time:             Wed 15 Apr 2026 07:27:30 +0000
ROA not before:           Wed 15 Apr 2026 07:22:30 +0000
ROA not after:            Wed 14 Apr 2027 07:27:30 +0000
asID:                     59078
IP address blocks:        139.198.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b6:c0:84:8c:43:7a:d1:37:4c:16:b1:d1:f3:c6:6c:56:34:f7:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
        Validity
            Not Before: Apr 15 07:22:30 2026 GMT
            Not After : Apr 14 07:27:30 2027 GMT
        Subject: CN=8E6BC5ABF00DCFFF2E75AF1A522D04CC8B9557C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ec:e9:3c:47:91:c3:f6:00:b4:16:53:e1:55:
                    b5:53:ba:a5:96:3d:97:9f:23:26:b6:7c:d4:c2:f2:
                    15:8c:eb:07:4a:07:32:b9:a0:93:ac:ce:9e:16:13:
                    27:59:cf:0c:f1:ba:39:5c:60:1d:89:f4:c2:f7:3c:
                    da:9b:c8:fb:3f:0f:e6:d1:12:41:62:92:51:61:d2:
                    1e:2c:1b:5c:37:21:83:39:b9:2c:b8:c8:09:c2:80:
                    30:bf:2d:78:c9:2b:3b:e2:cb:5b:65:91:a0:b3:19:
                    16:53:a4:2b:36:f0:9a:3e:db:18:3a:36:fc:40:43:
                    12:c9:e3:31:cf:84:54:52:3c:18:b7:17:e1:89:81:
                    70:70:62:47:ca:6e:7b:85:37:b3:0c:58:2c:6c:c2:
                    70:11:0c:7b:65:2b:85:9b:7f:be:ac:d5:dc:b8:91:
                    de:bd:5e:a1:74:ba:a3:a6:bd:ee:f1:b9:9f:b4:69:
                    8b:57:94:94:f6:5d:a5:86:09:6a:e8:95:16:06:db:
                    39:91:b7:7b:49:01:75:d2:3b:79:fc:12:1f:b7:25:
                    b3:48:99:18:8b:af:c2:b6:51:2a:31:c7:ef:7c:1b:
                    0d:c2:4e:3f:c3:53:49:82:bf:41:de:4c:ae:bd:e3:
                    20:67:6c:43:64:8c:1d:63:30:51:c6:58:a6:2e:44:
                    91:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6B:C5:AB:F0:0D:CF:FF:2E:75:AF:1A:52:2D:04:CC:8B:95:57:C0
            X509v3 Authority Key Identifier:
                keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131382e302f32342d3234203d3e203539303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.198.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:92:7f:d6:b6:87:96:9c:07:c5:da:f8:54:79:a5:b6:19:48:
         0e:11:29:ab:21:80:f9:45:4a:fe:ac:05:68:9e:fd:3e:34:96:
         b9:0e:21:01:77:d1:5d:83:a0:13:a4:f0:d4:db:62:8c:be:27:
         0a:c7:d9:41:98:18:a9:f5:26:21:e6:cb:90:7b:43:84:d3:7b:
         af:1a:e3:3a:88:a4:3b:ca:77:60:14:f2:51:d1:f4:ea:c6:0c:
         c9:e9:7b:88:23:2f:87:51:7f:37:82:72:cd:7d:f8:11:fb:4d:
         06:5c:29:c0:fb:34:0b:e9:cb:d8:7e:80:99:33:c5:3f:2f:c9:
         72:0e:0a:ca:8e:61:0e:b1:a9:57:af:d2:cc:c7:da:e9:bf:a4:
         c3:ba:8f:c5:8e:72:3b:cc:df:f9:49:c3:0f:f1:ed:16:9a:32:
         08:12:09:b8:99:87:e7:d8:00:14:23:8e:3f:7c:68:d7:27:01:
         00:2a:2f:81:78:f5:45:01:3d:d9:8e:21:c5:a6:09:23:8b:57:
         46:b2:f3:1b:04:96:ad:25:1a:b7:a3:9d:8e:e5:e5:1e:4a:75:
         2d:48:24:2a:4a:1a:4d:a5:d7:b2:d4:d9:b4:45:37:99:ea:8e:
         14:f6:fd:69:d6:32:79:61:26:b7:73:13:d5:4b:3f:ab:4a:6b:
         42:ab:ab:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:17:33 2026 by rpki-client