Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132322e302f32342d3234203d3e203538343636.roa
File:                     3133392e3139382e3132322e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier:          /I3Rh/DMaxDwP2bH4pnzlCwULKtT3C2DlYD63Qk7dww=
Subject key identifier:   F2:C4:C8:FC:04:FE:82:03:EF:DD:CF:DA:FA:34:94:24:7A:CD:2D:0D
Certificate issuer:       /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial:       529BF6D16CECDD22DFEB37C7A36D5152EFE7D95F
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132322e302f32342d3234203d3e203538343636.roa
Signing time:             Wed 15 Apr 2026 07:47:04 +0000
ROA not before:           Wed 15 Apr 2026 07:42:04 +0000
ROA not after:            Wed 14 Apr 2027 07:47:04 +0000
asID:                     58466
IP address blocks:        139.198.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:9b:f6:d1:6c:ec:dd:22:df:eb:37:c7:a3:6d:51:52:ef:e7:d9:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
        Validity
            Not Before: Apr 15 07:42:04 2026 GMT
            Not After : Apr 14 07:47:04 2027 GMT
        Subject: CN=F2C4C8FC04FE8203EFDDCFDAFA3494247ACD2D0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ab:e2:67:e9:75:a4:b0:82:0e:3e:69:95:90:
                    f1:f6:97:a1:4b:c2:6e:15:44:8a:e1:57:20:2f:ee:
                    5f:d5:6f:a1:b2:25:34:ed:3c:f6:de:90:59:84:e3:
                    15:f7:27:04:ca:3c:26:2c:c6:a8:c8:48:71:ae:0d:
                    1f:b2:d7:2f:85:9f:4c:09:0b:6f:14:40:ee:87:04:
                    dc:6c:86:92:a4:e8:27:9e:4e:ca:a1:41:1c:fc:c0:
                    f5:cf:40:5b:d6:b7:ac:74:90:23:aa:1c:fb:df:1f:
                    00:4f:50:d9:dc:69:a7:cf:a9:c6:e5:1f:54:69:8d:
                    62:13:bd:cc:54:aa:8a:b2:d2:27:04:98:0e:18:13:
                    28:a4:97:9b:14:82:e2:74:58:fd:9e:21:47:cd:ac:
                    d9:12:f9:d3:42:a6:09:05:00:56:07:53:f9:fc:cb:
                    44:ef:44:75:9d:2f:aa:8f:b3:95:45:e5:ee:df:6f:
                    da:29:a5:8a:fc:f3:75:46:22:45:f9:ac:6b:54:25:
                    d9:97:55:3c:0f:ba:a7:0f:16:50:0f:8e:24:34:6f:
                    5a:26:47:a4:27:9a:07:70:68:7d:ee:bc:52:2f:aa:
                    38:8b:34:e8:4e:74:66:22:29:00:34:44:07:b5:4c:
                    d6:00:59:c3:43:2d:74:6a:08:45:7b:23:35:72:9f:
                    81:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C4:C8:FC:04:FE:82:03:EF:DD:CF:DA:FA:34:94:24:7A:CD:2D:0D
            X509v3 Authority Key Identifier:
                keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132322e302f32342d3234203d3e203538343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.198.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:86:6c:94:18:ad:b9:9a:5e:e9:c7:e8:19:36:0d:f5:2a:7c:
         7c:f3:b2:5b:7e:d8:08:45:6c:78:76:c6:0f:06:93:26:a2:7a:
         c9:75:e5:94:41:16:99:ce:67:ca:08:42:15:33:d8:db:0f:fd:
         4c:9a:bc:de:c6:b0:4b:74:84:bd:33:49:1b:1d:06:61:c9:1c:
         9b:1f:03:dd:0c:b2:f0:be:89:fb:4a:7a:f1:b2:ac:66:1c:4d:
         69:39:97:7d:ca:af:17:0f:07:b6:91:3a:f3:20:c7:db:44:fc:
         84:a0:f0:44:11:3b:b1:75:5e:ab:51:00:95:29:96:09:e1:95:
         d7:72:7e:66:78:fd:59:0f:62:a1:79:c9:72:95:a6:37:b7:69:
         11:3f:ec:32:f3:e3:c3:1b:96:21:8f:19:6c:d6:9d:03:7f:01:
         eb:a2:0f:76:82:89:54:3d:17:41:de:64:a0:57:4b:3a:2a:98:
         f9:17:24:8e:8d:57:35:dd:e1:04:2f:35:7c:81:55:30:03:f7:
         49:5c:40:d6:a8:36:46:bf:15:fd:df:28:89:80:2c:6d:b1:d5:
         cd:84:48:e3:46:d2:f1:ee:ae:d0:8c:b2:2b:c0:36:af:4e:60:
         7f:e2:73:f2:d6:b1:f7:b2:79:0b:a6:54:23:4a:b0:f8:a4:c4:
         d6:5b:62:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:21:23 2026 by rpki-client