Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131392e302f32342d3234203d3e203538343636.roa
File:                     3133392e3139382e3131392e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier:          1LO6Eb++T5Igy4DZ0iEBNFE/F4deddOcXy1E/OqITpI=
Subject key identifier:   C5:08:CB:46:97:46:47:D2:DB:B1:5D:95:85:AE:C9:5E:67:02:E7:85
Certificate issuer:       /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial:       1123F269553DA1A36D49013A2DBE52BA46820EFF
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131392e302f32342d3234203d3e203538343636.roa
Signing time:             Wed 15 Apr 2026 07:47:04 +0000
ROA not before:           Wed 15 Apr 2026 07:42:04 +0000
ROA not after:            Wed 14 Apr 2027 07:47:04 +0000
asID:                     58466
IP address blocks:        139.198.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:23:f2:69:55:3d:a1:a3:6d:49:01:3a:2d:be:52:ba:46:82:0e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
        Validity
            Not Before: Apr 15 07:42:04 2026 GMT
            Not After : Apr 14 07:47:04 2027 GMT
        Subject: CN=C508CB46974647D2DBB15D9585AEC95E6702E785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:f0:70:94:91:24:40:a9:d3:1e:94:b1:70:dd:
                    74:ae:de:48:16:f7:64:c4:af:32:62:63:10:06:12:
                    46:db:a3:31:26:e6:60:92:76:10:01:90:b6:6a:c8:
                    6d:a5:0f:c5:b2:bd:5f:d4:69:4c:4e:a9:8e:3d:0f:
                    92:ec:ca:69:49:d2:82:57:99:da:ad:62:b0:03:48:
                    d9:41:71:5d:b4:eb:1d:88:4a:8d:d6:0e:6a:53:cb:
                    19:a0:55:3b:61:9d:dd:16:ed:20:33:4e:39:a6:c9:
                    5d:5e:d6:48:81:a1:2c:d2:20:a4:c2:ae:4d:4e:c2:
                    95:bc:a2:89:ce:1d:42:a4:7e:d8:ca:57:28:0e:1a:
                    23:5f:b7:6c:12:7f:f6:0c:6f:48:07:23:e1:29:f5:
                    1e:a7:2c:3b:cd:08:36:6e:f2:c6:0d:0b:7e:dc:84:
                    a2:a4:7d:2b:2f:b1:3a:fa:0c:b5:7c:b0:35:a7:72:
                    50:63:80:4d:bc:c2:db:ec:0c:92:6e:75:02:e8:1a:
                    6c:8c:9f:8d:99:f5:5c:dd:d0:f1:81:ca:6c:c8:b8:
                    0a:13:52:eb:1f:7d:9d:df:0b:8d:14:5e:ce:48:75:
                    9d:c5:e0:cf:84:f5:70:d8:94:bc:25:cf:81:1e:28:
                    14:ce:79:0e:0b:94:87:b9:af:f0:71:7f:31:d1:58:
                    95:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:08:CB:46:97:46:47:D2:DB:B1:5D:95:85:AE:C9:5E:67:02:E7:85
            X509v3 Authority Key Identifier:
                keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131392e302f32342d3234203d3e203538343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.198.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:7b:2f:e5:87:e1:2b:9a:b3:af:ea:16:d6:d3:55:5f:66:95:
         50:56:38:30:1c:fe:28:6a:da:c6:b3:10:a9:95:90:b5:dd:71:
         2f:f0:f3:69:4d:1d:df:be:bf:a1:a2:73:d5:b6:b9:87:48:6c:
         c1:89:3b:07:ab:74:77:cf:e5:c8:08:40:65:dd:0c:1c:10:b7:
         15:b4:36:d7:9b:73:f0:4d:fa:f2:9a:83:18:cc:76:74:55:66:
         44:a9:2c:1f:68:d7:10:43:d5:7c:e3:ba:e5:a7:f2:f2:1a:8c:
         99:e8:4b:99:0f:1e:4b:4a:9a:c2:80:48:95:8a:65:d1:83:22:
         d3:1f:f3:97:5a:14:35:2c:c1:78:80:82:7e:41:a9:7b:53:02:
         a7:7e:57:b2:0b:08:4b:a4:60:ab:3a:d8:b2:10:db:c8:52:88:
         54:de:e7:66:45:03:17:ac:73:44:cc:cf:5d:e6:e8:56:d8:8f:
         d2:b9:c8:1c:62:c0:3d:94:bd:e7:c8:44:16:a6:e4:0f:f0:26:
         86:ae:3c:51:d5:d9:e1:0e:64:a9:22:b8:9c:2d:89:e2:98:f2:
         03:73:35:4a:02:d3:f8:d0:79:c7:02:68:02:6c:b4:58:e9:44:
         2c:4f:a5:4d:b1:b4:bf:41:22:59:45:61:50:13:49:c4:42:b1:
         34:36:ad:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:27:01 2026 by rpki-client