Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132312e302f32342d3234203d3e203539303738.roa
File:                     3133392e3139382e3132312e302f32342d3234203d3e203539303738.roa (raw, json)
Hash identifier:          aAIM2dNkkPIC6Wch9fy34hSudkBk78LSfV7N31nEaIg=
Subject key identifier:   3C:80:72:CF:19:21:7E:E2:09:D0:C5:C3:27:30:AA:23:B7:B7:21:60
Certificate issuer:       /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial:       7A5F65E302787A4816EFBF3069CB6BAFBC3CBFC1
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132312e302f32342d3234203d3e203539303738.roa
Signing time:             Wed 15 Apr 2026 07:43:15 +0000
ROA not before:           Wed 15 Apr 2026 07:38:15 +0000
ROA not after:            Wed 14 Apr 2027 07:43:15 +0000
asID:                     59078
IP address blocks:        139.198.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:5f:65:e3:02:78:7a:48:16:ef:bf:30:69:cb:6b:af:bc:3c:bf:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
        Validity
            Not Before: Apr 15 07:38:15 2026 GMT
            Not After : Apr 14 07:43:15 2027 GMT
        Subject: CN=3C8072CF19217EE209D0C5C32730AA23B7B72160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:40:74:4c:0e:80:39:af:b7:d9:9a:5b:bd:b2:
                    57:8b:ef:98:61:85:95:fa:b1:b8:62:b1:f7:70:34:
                    10:3a:cf:b9:21:a8:df:f2:c4:43:d7:aa:e1:39:c9:
                    c0:da:fe:e7:1e:bc:23:65:ff:d1:84:eb:89:6f:f5:
                    23:cc:50:c6:a5:e6:d5:d8:b8:39:10:84:da:f3:75:
                    8e:c0:c4:04:4c:6c:5d:ce:44:76:41:9e:53:f9:09:
                    46:e7:21:cd:df:aa:2a:a6:97:70:f3:eb:4d:62:4b:
                    d0:f1:c9:05:2c:0f:72:51:ad:c6:91:5d:1e:3e:b7:
                    68:e0:c9:b1:00:df:96:41:70:c7:63:59:0a:90:ab:
                    1b:98:4d:9f:62:99:c2:ff:19:80:16:fd:11:71:ae:
                    fb:ac:b9:12:78:64:ee:10:81:cd:8d:08:80:af:5c:
                    48:7e:44:c3:70:29:ef:6c:a6:ea:83:99:14:35:81:
                    03:03:06:dd:23:a9:14:7f:40:9e:0d:3f:37:b1:b0:
                    e8:5b:4b:c8:27:ed:35:05:6c:eb:2a:4e:4a:8b:cc:
                    15:43:f1:df:96:2f:39:73:8f:c7:8c:ca:72:03:a2:
                    a2:9c:bf:f0:9d:3f:87:0d:1a:38:06:b0:f9:d4:b8:
                    b5:98:08:2d:ac:68:0b:9d:30:33:98:ba:12:85:b5:
                    eb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:80:72:CF:19:21:7E:E2:09:D0:C5:C3:27:30:AA:23:B7:B7:21:60
            X509v3 Authority Key Identifier:
                keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132312e302f32342d3234203d3e203539303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.198.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:5f:e8:ef:47:40:41:45:43:66:70:52:5e:b1:8c:20:07:4c:
         3a:be:11:ce:86:70:13:36:2d:d4:9f:1d:32:bc:91:89:58:d8:
         8c:56:b3:c6:3c:2b:8b:ca:6e:a2:8a:ad:62:d0:6a:cd:69:e6:
         c2:17:1e:1a:f4:d7:a0:7a:e7:92:0e:32:c8:1d:38:70:88:4b:
         39:3e:7b:65:62:95:75:2c:61:ff:12:33:5d:cd:da:89:73:00:
         ac:6d:a4:bf:c6:2e:c5:ee:27:8b:8f:ba:1e:0c:c6:f6:a7:fe:
         f0:2f:d2:b7:32:8f:bb:0b:4d:22:5d:bb:d1:4e:5c:13:ec:98:
         66:78:1a:ea:79:23:fd:52:22:cf:83:5f:39:05:c4:34:08:de:
         7c:04:4d:eb:22:93:1b:2c:ce:2f:5c:83:79:31:c0:e3:a5:c4:
         09:ad:34:a4:b0:a2:38:fc:83:be:20:db:2c:8b:56:7c:86:e9:
         09:97:e7:47:37:04:bf:cc:d2:a8:08:cc:e0:b0:32:93:e6:95:
         97:c1:3d:ff:b2:67:d4:4d:7f:df:26:14:93:10:d1:50:17:e0:
         3e:6b:31:9c:00:cc:29:93:45:e3:cc:d1:b5:e8:26:9d:c9:fe:
         e4:3b:f2:be:62:3d:0a:54:bd:42:b1:da:32:08:a9:7d:bc:5e:
         88:73:9b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:12:56 2026 by rpki-client