Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132352e302f32342d3234203d3e203538343636.roa
File:                     3133392e3139382e3132352e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier:          VyrNN7WZKS8b2EdyvIocAeZiRJxvRsyRG/T/V2UsP0M=
Subject key identifier:   C4:68:53:FE:2B:86:73:7C:4A:D2:E8:7D:C2:71:5E:43:2D:49:7F:26
Certificate issuer:       /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial:       16C1CB1317168352FA79A4FD48666A73989053BE
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132352e302f32342d3234203d3e203538343636.roa
Signing time:             Wed 15 Apr 2026 07:47:04 +0000
ROA not before:           Wed 15 Apr 2026 07:42:04 +0000
ROA not after:            Wed 14 Apr 2027 07:47:04 +0000
asID:                     58466
IP address blocks:        139.198.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c1:cb:13:17:16:83:52:fa:79:a4:fd:48:66:6a:73:98:90:53:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
        Validity
            Not Before: Apr 15 07:42:04 2026 GMT
            Not After : Apr 14 07:47:04 2027 GMT
        Subject: CN=C46853FE2B86737C4AD2E87DC2715E432D497F26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8e:78:6c:30:a5:59:a1:76:b0:e2:43:dc:fb:
                    20:48:0a:13:f8:ff:8c:23:a8:44:9a:09:b7:10:cf:
                    4f:eb:c5:8f:bc:79:6c:f6:ac:b6:2a:ba:02:b8:e3:
                    36:be:88:3d:ad:5b:b2:7b:6a:66:d7:92:92:d2:e1:
                    0d:be:55:ed:27:2e:ca:1b:78:79:c9:82:7f:e7:b5:
                    29:1b:77:cd:ec:3b:70:65:e9:1f:97:a1:86:31:4b:
                    2a:4f:80:8c:5e:66:dc:f2:f7:ea:9c:fb:81:88:cf:
                    12:5a:f1:1c:6d:8f:ca:65:fa:ff:e6:07:21:05:2e:
                    75:82:89:ff:70:0e:3f:d0:45:ce:1a:59:b0:0a:b0:
                    db:fd:6d:00:fc:3e:7f:26:11:94:33:75:60:7a:ac:
                    b3:60:1e:04:70:56:d1:25:9f:58:a4:da:01:49:42:
                    2b:d9:45:0e:64:ee:68:f8:17:ae:9f:0d:80:d3:6a:
                    12:75:f5:f9:90:4d:f3:8a:0f:2e:8e:a9:10:8b:61:
                    b8:db:d2:ef:de:17:d7:99:23:78:6e:ce:ec:c7:94:
                    79:33:c4:a4:59:0d:20:67:f6:2c:29:fb:d5:53:99:
                    92:9c:23:f1:8c:e4:7d:9a:ab:c6:66:7d:de:2f:b0:
                    e7:34:f9:f6:00:e0:41:4c:f0:05:85:d8:5a:5e:41:
                    1e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:68:53:FE:2B:86:73:7C:4A:D2:E8:7D:C2:71:5E:43:2D:49:7F:26
            X509v3 Authority Key Identifier:
                keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132352e302f32342d3234203d3e203538343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.198.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:ac:55:f2:96:ec:b0:91:2b:07:68:40:86:a8:ee:b7:ea:12:
         ad:eb:90:79:7b:ea:58:fe:1d:ad:5e:7e:f0:d8:68:e6:4b:f1:
         16:ff:c5:24:4f:87:b0:5e:d6:29:83:09:84:6d:d1:8b:82:48:
         53:9e:c9:13:28:71:d4:50:be:20:9c:eb:32:2f:ba:2a:5c:f2:
         26:04:82:09:fc:09:a0:3c:02:4a:8b:69:23:72:bd:67:25:da:
         e1:77:5e:fe:4e:03:46:b9:a1:3b:3f:e6:85:1a:e1:ce:91:3b:
         35:07:9e:cc:68:8a:cb:c7:0f:86:b5:68:93:d7:1d:75:8f:c2:
         13:8c:b0:64:93:e4:ed:0e:9c:6a:57:d5:89:f2:43:73:92:cf:
         d4:54:75:6c:95:a7:4e:b6:e9:32:18:35:51:c2:a8:e0:d7:d9:
         30:19:b3:f9:35:51:e9:ef:44:e2:d6:8f:ff:76:8d:59:73:34:
         f6:45:05:81:ee:51:c9:6b:f7:1a:88:dc:91:cf:b0:a8:8e:b8:
         21:1d:7f:56:4a:d7:a3:6a:a9:b8:01:ef:2e:65:bd:d2:f9:17:
         99:fc:38:fe:dc:9a:35:ed:b3:ba:1c:58:6d:58:9c:54:63:93:
         0a:e8:fc:9a:35:fd:40:83:dc:d8:ad:1b:f3:9d:ba:45:5d:ce:
         9a:2f:64:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:21:56 2026 by rpki-client