Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e31332e302f32342d3234203d3e203539303738.roa
File:                     3133392e3139382e31332e302f32342d3234203d3e203539303738.roa (raw, json)
Hash identifier:          k/lgB19C0/8Savh4Ct2yq/H2FRTSb7hUKTKRsGFRq70=
Subject key identifier:   D4:D9:67:3C:84:91:78:84:B8:98:3D:D3:1C:A7:9B:AF:15:6A:CE:41
Certificate issuer:       /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial:       498745FB2AA342FC4AD7E3B34FE4D6CA800DE107
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e31332e302f32342d3234203d3e203539303738.roa
Signing time:             Wed 15 Apr 2026 07:21:28 +0000
ROA not before:           Wed 15 Apr 2026 07:16:28 +0000
ROA not after:            Wed 14 Apr 2027 07:21:28 +0000
asID:                     59078
IP address blocks:        139.198.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:87:45:fb:2a:a3:42:fc:4a:d7:e3:b3:4f:e4:d6:ca:80:0d:e1:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
        Validity
            Not Before: Apr 15 07:16:28 2026 GMT
            Not After : Apr 14 07:21:28 2027 GMT
        Subject: CN=D4D9673C84917884B8983DD31CA79BAF156ACE41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:32:e7:82:a8:b7:ff:f3:33:20:a5:1f:54:
                    de:31:7d:60:41:fd:0e:2d:32:f3:7a:7c:7b:b9:c2:
                    b2:44:ab:12:a2:d3:f1:67:be:2b:d5:5e:ec:52:aa:
                    37:68:0f:2a:37:08:46:c8:bd:78:99:72:00:01:73:
                    44:79:0b:34:0c:26:fd:d4:4e:d4:e1:44:99:90:c7:
                    f2:a7:aa:d9:e1:3b:ef:1d:4c:96:16:58:9e:58:3e:
                    b8:ed:70:95:f5:4e:38:7c:7d:37:b5:61:ea:a2:16:
                    24:3c:99:0b:8e:f2:a5:e5:84:6f:0d:a8:28:70:78:
                    52:c0:42:81:31:6f:e1:88:91:9e:1b:3f:ac:f5:00:
                    87:d6:ae:b5:cb:f3:70:02:9a:30:c0:8f:2f:cb:c8:
                    e7:3f:a4:c0:21:4b:fc:74:c1:fa:77:31:58:87:13:
                    97:2b:b2:9b:7e:39:41:3d:0f:49:ed:73:e6:a6:2f:
                    ac:92:1f:03:d2:48:ff:2f:c7:44:ff:10:cb:8c:54:
                    f3:bf:45:fb:16:1e:a7:88:ab:2f:97:18:68:ce:12:
                    e9:c9:97:21:2d:64:1f:22:10:37:50:6a:c1:0b:1e:
                    3c:4b:9e:a6:17:52:55:9c:e6:d7:e5:e4:e8:bd:8f:
                    b1:4c:b1:b9:ba:21:90:c5:6e:27:0a:d6:11:07:4b:
                    f8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D9:67:3C:84:91:78:84:B8:98:3D:D3:1C:A7:9B:AF:15:6A:CE:41
            X509v3 Authority Key Identifier:
                keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e31332e302f32342d3234203d3e203539303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.198.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:ab:f5:89:ae:b1:d0:f3:3e:cf:4e:40:a5:f3:a2:9d:34:d8:
         7d:5b:00:1a:ce:b9:15:16:66:82:83:8d:b1:eb:53:7d:9b:68:
         8c:2b:26:f9:29:15:20:da:64:6e:b7:e4:37:20:13:9f:4a:1c:
         a5:23:7b:3e:1b:d2:77:df:57:81:e4:94:b9:1b:20:ee:3f:32:
         8d:ca:6e:72:97:39:a1:83:45:b3:a3:ef:06:81:81:fa:f4:f5:
         59:ad:bf:0c:85:91:14:66:a2:cf:fb:c6:eb:d9:fa:f8:55:f8:
         cd:3e:96:d9:27:f9:54:1c:f9:4b:ce:17:68:b6:21:f4:0e:4b:
         7c:1c:9a:c5:7f:a3:10:4b:78:8f:59:f4:b8:35:32:7a:fc:a8:
         de:ce:f1:82:c2:7e:64:3e:ec:7a:ff:64:c3:57:bf:78:da:c7:
         28:d6:16:b2:43:c9:a7:cb:cb:ac:c1:88:f1:36:46:cc:72:40:
         79:d4:16:2e:a7:eb:ea:29:b7:5e:8c:78:68:e4:84:e9:90:84:
         e8:41:0d:6b:53:67:ea:32:cb:20:77:63:34:20:be:c3:96:f4:
         d4:62:52:f5:24:c1:b5:36:50:06:57:22:da:a8:6b:a2:eb:79:
         a4:01:9c:24:00:df:f6:18:13:8d:71:14:36:b5:93:ab:3a:8e:
         33:63:63:a2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:16:53 2026 by rpki-client