Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e31352e302f32342d3234203d3e203539303738.roa
File:                     3133392e3139382e31352e302f32342d3234203d3e203539303738.roa (raw, json)
Hash identifier:          ilx/5YF7fA/a2GlsCJe0+Wu5lcZMMzQfP0Z1hAAHMbE=
Subject key identifier:   57:41:C9:C2:70:9A:D0:00:C5:A0:68:72:D4:44:19:0A:8C:1E:59:87
Certificate issuer:       /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial:       6C8B579612CD1B5C1FD01C7DC7AD6B4A70416C38
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e31352e302f32342d3234203d3e203539303738.roa
Signing time:             Wed 15 Apr 2026 07:21:27 +0000
ROA not before:           Wed 15 Apr 2026 07:16:27 +0000
ROA not after:            Wed 14 Apr 2027 07:21:27 +0000
asID:                     59078
IP address blocks:        139.198.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:8b:57:96:12:cd:1b:5c:1f:d0:1c:7d:c7:ad:6b:4a:70:41:6c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
        Validity
            Not Before: Apr 15 07:16:27 2026 GMT
            Not After : Apr 14 07:21:27 2027 GMT
        Subject: CN=5741C9C2709AD000C5A06872D444190A8C1E5987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a8:e8:0e:d5:15:87:d6:53:5c:62:7c:95:15:
                    4b:06:aa:4a:df:ca:b5:d4:1f:3e:e9:4e:b9:23:b4:
                    84:6c:43:3c:55:c3:03:e7:18:6e:1f:06:20:3c:b4:
                    ad:ec:e8:6a:12:d7:2c:74:47:24:9f:41:6d:9c:86:
                    3b:f1:a5:f8:7f:fe:c8:58:65:b1:68:27:c3:c1:ab:
                    be:80:b8:f1:a7:c4:91:8d:00:4f:b1:a8:b0:91:41:
                    a7:96:50:11:d2:13:07:9c:85:63:e8:2a:b5:85:a4:
                    31:b0:a0:a0:8d:71:ba:86:8f:a8:33:17:26:a7:26:
                    7b:77:0e:f5:df:ef:00:6f:f0:df:52:70:cc:cf:3f:
                    9e:0d:3d:29:67:8d:17:e0:3e:0b:28:33:f4:a0:6c:
                    a3:82:42:81:7c:65:40:ae:1e:8b:64:1c:ea:1e:d2:
                    9a:cf:15:97:1f:44:e1:bc:76:41:7f:0f:49:7b:6b:
                    1f:6c:c3:3a:40:22:49:b4:1a:5e:92:88:2b:04:dc:
                    ff:0c:19:ec:a9:14:09:82:32:5f:9f:84:d7:82:d3:
                    1f:c2:e5:ad:14:dd:40:f9:cb:ac:0d:76:39:f7:82:
                    30:d2:ae:24:9c:cc:50:63:0a:6d:cb:cb:9c:19:2c:
                    b4:a7:92:01:d6:91:2b:8a:ee:96:76:84:24:f4:dc:
                    4e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:41:C9:C2:70:9A:D0:00:C5:A0:68:72:D4:44:19:0A:8C:1E:59:87
            X509v3 Authority Key Identifier:
                keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e31352e302f32342d3234203d3e203539303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.198.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:78:32:2c:9d:cb:cb:27:63:c6:f7:8f:d0:59:05:46:c0:2e:
         9c:5e:91:f4:cc:ad:9d:3a:2b:11:f7:7d:61:e4:33:95:4f:f4:
         37:fd:f4:87:31:62:5d:24:5b:29:44:77:15:40:a9:d2:15:c3:
         be:d1:c4:77:25:88:d2:88:6c:ad:f7:26:94:d6:c7:39:33:25:
         20:49:93:87:3b:ca:a5:9c:f9:7e:13:d6:7b:62:55:1c:e7:7e:
         65:ad:99:91:c1:18:44:e8:4d:7a:3b:83:25:74:32:d1:0c:c8:
         2c:68:b6:06:1b:3a:05:d0:17:09:c8:9a:e6:d3:cb:9c:df:6d:
         b6:5c:0e:fd:72:c4:b5:aa:ad:6b:03:b4:fd:4d:5b:c5:c9:93:
         62:49:d0:ed:fc:96:6b:b8:8a:17:43:52:3b:c0:74:a3:17:91:
         80:ff:c2:a6:39:4b:23:80:a9:6c:e6:95:18:9d:be:b9:5e:05:
         b3:b8:0e:cc:23:e4:61:91:00:a5:b2:d3:bd:cc:41:ad:54:82:
         cd:4a:a6:60:7c:46:08:67:ed:ff:ff:ba:cf:d8:42:10:4e:06:
         c8:8d:04:4e:aa:4a:a4:a1:24:5e:0f:9b:09:55:6c:ad:2a:08:
         79:ef:1f:68:51:dd:f2:c5:2e:c3:29:07:70:b3:61:20:a0:f2:
         14:52:ee:ca
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:54:46 2026 by rpki-client