Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132302e302f32342d3234203d3e203538343636.roa
File:                     3133392e3139382e3132302e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier:          HV2/8IH5KmX2FZorQMwNTzbjajPOghryLUXR2ttyeIk=
Subject key identifier:   F9:B9:C4:01:8D:64:8F:9F:C5:07:4C:04:CD:DE:ED:8E:2F:5A:89:5E
Certificate issuer:       /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial:       0A1A0EEC9E511411CE282E5D66B5D3F24BDB4231
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132302e302f32342d3234203d3e203538343636.roa
Signing time:             Wed 15 Apr 2026 07:43:15 +0000
ROA not before:           Wed 15 Apr 2026 07:38:15 +0000
ROA not after:            Wed 14 Apr 2027 07:43:15 +0000
asID:                     58466
IP address blocks:        139.198.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:1a:0e:ec:9e:51:14:11:ce:28:2e:5d:66:b5:d3:f2:4b:db:42:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
        Validity
            Not Before: Apr 15 07:38:15 2026 GMT
            Not After : Apr 14 07:43:15 2027 GMT
        Subject: CN=F9B9C4018D648F9FC5074C04CDDEED8E2F5A895E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e5:29:a0:44:8d:f6:02:94:3e:25:3a:74:3a:
                    2f:d6:72:17:14:c9:2b:b8:25:74:b7:2f:7a:2c:89:
                    48:2e:ca:44:2b:3e:d2:9a:37:be:96:ca:31:00:ba:
                    df:5d:b5:f8:6d:fe:2a:84:52:83:bb:bf:67:2c:cf:
                    10:61:3e:be:c4:7d:22:04:98:17:be:0f:46:f9:cc:
                    ad:12:01:c1:d0:21:e5:a0:4c:d3:5d:1d:b2:87:e4:
                    f3:51:7f:0e:9b:92:94:95:77:10:02:22:4c:4f:f9:
                    57:c4:3f:a5:75:0e:62:59:80:c6:90:1c:f5:7c:a2:
                    f1:35:3a:d5:02:12:59:24:c0:5c:64:a2:45:ce:00:
                    2b:2b:e2:da:8b:ed:56:df:c4:d8:ab:4f:6f:fd:89:
                    4c:85:fd:a7:6e:10:a2:bc:89:39:3e:9f:5f:0c:05:
                    23:db:72:3e:08:36:b2:43:5b:f8:fe:c2:ae:2f:64:
                    64:6d:83:0d:6b:c0:ab:1c:d0:95:25:8c:d8:83:8c:
                    76:11:83:e5:07:4e:1c:d6:4d:cc:8d:a3:ad:d8:07:
                    8f:31:1d:6d:5f:ef:b2:5d:cd:99:b8:c2:1b:e0:7a:
                    ec:07:06:c0:d9:18:d3:ad:fc:b5:fd:4b:14:c4:c4:
                    70:67:a4:50:29:95:88:dd:7a:71:61:56:19:d2:08:
                    3a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B9:C4:01:8D:64:8F:9F:C5:07:4C:04:CD:DE:ED:8E:2F:5A:89:5E
            X509v3 Authority Key Identifier:
                keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132302e302f32342d3234203d3e203538343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.198.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:fe:7a:c3:4e:8d:83:f5:a8:a8:8e:80:09:6b:8b:f0:7c:8b:
         39:31:2f:07:d3:bd:40:55:bc:89:ec:d1:99:d3:71:7a:f9:1e:
         80:fd:6a:62:d7:15:f3:9c:76:ec:61:02:ce:90:7a:02:89:b6:
         fc:5f:ef:30:3a:af:c6:f2:69:f3:65:b7:50:3e:4c:d2:aa:b0:
         0c:5d:d8:fd:0f:9c:d9:f0:8c:1f:87:fc:99:91:39:fd:54:5b:
         2f:c4:37:44:b7:b4:4a:e9:ec:35:52:26:d6:ca:ac:b6:f9:30:
         8c:9a:a5:6f:2d:a9:09:dd:56:7d:05:f4:4b:17:9d:65:50:39:
         3b:45:23:24:bd:11:40:2c:85:0b:2d:38:71:2a:dc:97:ec:c9:
         5c:05:81:3f:72:fd:03:f3:87:9a:24:23:92:14:a7:14:ae:67:
         49:5e:65:90:39:21:eb:f2:60:1b:b9:4a:64:3f:8c:bd:39:ca:
         5c:a0:55:b7:8c:ef:7b:f8:02:e3:1c:74:87:b2:7a:b1:ed:c0:
         3a:64:6e:45:fe:5f:75:f0:21:d6:71:69:4c:f9:cb:28:43:55:
         ce:2f:85:c8:6b:7b:03:26:ae:af:87:94:a5:6d:5a:d6:d3:2b:
         1d:38:50:3c:a7:53:64:e8:bb:56:a6:8f:ca:cb:84:dd:1b:67:
         6b:39:ab:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:06:25 2026 by rpki-client