Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132332e302f32342d3234203d3e203538343636.roa
File:                     3133392e3139382e3132332e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier:          KuR9AyrSwu2p75Chpfxj8Z25juukqc+2zlINRNUDjZI=
Subject key identifier:   47:C8:F3:0C:F0:D6:49:32:92:F3:92:E2:AE:8D:21:9E:ED:62:8E:1B
Certificate issuer:       /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial:       2B6F75D8D887695EE5426C4C0D9BB03BAD7DFD12
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132332e302f32342d3234203d3e203538343636.roa
Signing time:             Wed 15 Apr 2026 07:47:04 +0000
ROA not before:           Wed 15 Apr 2026 07:42:04 +0000
ROA not after:            Wed 14 Apr 2027 07:47:04 +0000
asID:                     58466
IP address blocks:        139.198.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:6f:75:d8:d8:87:69:5e:e5:42:6c:4c:0d:9b:b0:3b:ad:7d:fd:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
        Validity
            Not Before: Apr 15 07:42:04 2026 GMT
            Not After : Apr 14 07:47:04 2027 GMT
        Subject: CN=47C8F30CF0D6493292F392E2AE8D219EED628E1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2b:21:9a:b9:14:77:a2:eb:ac:68:fe:82:49:
                    99:3e:e4:46:6d:c8:09:1f:4e:8b:bc:83:cf:80:da:
                    89:10:27:f8:2b:28:55:13:42:01:11:e8:9b:cc:d7:
                    e4:9e:c3:87:84:67:74:3f:ea:0d:ce:b6:d7:15:d3:
                    cd:8f:21:91:5a:38:0b:17:31:5d:da:7d:10:4c:06:
                    26:37:f1:f1:9e:ec:c3:aa:bf:9a:88:bf:9c:e7:40:
                    1a:d3:e5:ab:f4:de:52:da:2a:eb:b7:ee:4e:ea:fe:
                    5b:19:b7:71:f6:30:e2:5e:f2:69:a3:30:eb:51:31:
                    4c:5a:4d:e4:f9:77:e7:57:75:8c:58:43:f6:95:c6:
                    1b:74:64:10:0c:e2:9c:7e:a5:a4:00:ed:ce:94:43:
                    28:2b:ee:02:ac:12:94:38:e3:eb:bf:d0:3f:37:f1:
                    c5:11:a3:df:68:60:98:3f:c1:e9:c0:db:26:2a:37:
                    16:b9:48:57:12:9c:77:a1:9e:3a:9b:52:40:1b:18:
                    cb:e2:28:34:46:9d:2f:29:ae:64:c8:07:41:4a:6e:
                    d4:d0:59:67:8e:ee:26:03:dc:b6:17:95:3a:af:57:
                    2b:a4:00:56:88:81:7a:04:d0:73:7c:51:f6:e9:0f:
                    5b:0f:28:29:90:3d:f9:2f:0f:83:24:76:ad:b2:a5:
                    5d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C8:F3:0C:F0:D6:49:32:92:F3:92:E2:AE:8D:21:9E:ED:62:8E:1B
            X509v3 Authority Key Identifier:
                keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132332e302f32342d3234203d3e203538343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.198.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:fa:1e:9b:62:fb:76:8e:4d:52:5e:5f:a1:9d:f1:90:ac:cd:
         82:10:3f:ee:b5:ed:9a:80:28:6e:52:30:81:1d:d9:17:0f:99:
         8b:1a:e8:17:9d:37:d4:50:ba:0a:28:e3:64:c7:c3:bc:2d:d0:
         bb:4b:a0:b8:7b:b6:d9:84:78:d7:f9:e0:e3:8e:3f:e0:9a:ce:
         47:c3:40:48:38:b7:00:ca:12:da:d6:27:e5:67:6f:26:ca:28:
         99:bb:80:b8:f2:c0:04:83:22:3d:70:df:3c:22:22:8a:57:9b:
         1a:6f:a1:92:23:b9:eb:45:fa:6d:e3:cf:db:f9:d5:6e:fd:09:
         a4:05:9a:6c:d0:10:8c:61:68:a6:a8:45:b0:3d:38:8c:9a:a3:
         71:83:fc:34:88:e6:0f:15:8e:45:bb:39:b4:e7:11:8e:f2:c5:
         53:93:f7:31:bc:1b:9f:58:1b:e2:ba:3e:8d:e3:83:fa:52:b7:
         45:c5:fb:c8:2e:2f:66:6c:bf:08:b7:09:cb:2e:33:08:17:d6:
         68:5e:c2:20:5a:82:e8:a2:d0:c8:9c:78:c0:fa:7e:a7:73:8c:
         01:7e:a3:77:bd:7d:9b:cc:fc:6b:04:ab:6e:8a:1e:4b:4a:03:
         4f:ae:b3:f1:39:30:eb:10:32:58:49:c1:e3:b6:d9:be:9c:a4:
         7a:4e:c9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:16:29 2026 by rpki-client