Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e302e302f31392d3139203d3e203233373234.roa
File:                     3133392e3135392e302e302f31392d3139203d3e203233373234.roa (raw, json)
Hash identifier:          eajbHqwV9jG35tzwzJ8FrSGTHR/3fG3MjUYqTyZG+P0=
Subject key identifier:   02:13:AB:75:B7:46:10:04:8B:C3:11:A1:95:EA:E0:E6:BD:47:50:3B
Certificate issuer:       /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial:       37F685A5E4F68E4E4CDA46161402067CBC2FC48D
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e302e302f31392d3139203d3e203233373234.roa
Signing time:             Thu 04 Jun 2026 16:38:02 +0000
ROA not before:           Thu 04 Jun 2026 16:33:02 +0000
ROA not after:            Thu 03 Jun 2027 16:38:02 +0000
asID:                     23724
IP address blocks:        139.159.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f6:85:a5:e4:f6:8e:4e:4c:da:46:16:14:02:06:7c:bc:2f:c4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
        Validity
            Not Before: Jun  4 16:33:02 2026 GMT
            Not After : Jun  3 16:38:02 2027 GMT
        Subject: CN=0213AB75B74610048BC311A195EAE0E6BD47503B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:27:8e:fd:37:dd:b6:88:69:11:93:69:a9:09:
                    63:e1:1c:06:ed:4f:6b:c0:36:38:3e:3f:ae:c3:fa:
                    62:e6:c6:96:e6:20:ce:b8:72:7a:d0:cd:5a:99:6e:
                    be:9f:4f:2b:d1:4c:da:18:e3:52:71:98:90:f0:66:
                    4a:b5:1c:38:1a:4e:c3:c0:2b:a7:58:67:fd:69:32:
                    ff:b9:e2:d4:80:ad:d6:a5:19:52:68:8a:75:14:c0:
                    f3:b5:cc:f8:0a:17:8d:4f:ab:05:34:2f:a6:78:38:
                    2e:e0:d7:e1:87:62:51:10:79:0d:42:95:c4:cf:bc:
                    f8:18:0c:28:74:4a:68:53:91:8e:93:90:2d:45:9d:
                    d5:dc:28:ce:aa:3a:5c:0c:10:45:d6:b7:7c:36:13:
                    f8:98:7e:c0:f8:ea:9a:c2:6c:5c:ca:9d:10:fc:51:
                    9b:34:49:8c:61:2e:e0:3b:54:cb:47:b7:bc:36:97:
                    71:fd:41:d8:ca:2b:0e:1b:f6:bd:10:15:ae:51:65:
                    4a:83:28:da:62:ef:a8:75:34:37:38:b5:51:bd:85:
                    66:cf:31:8c:20:bb:f0:99:85:69:12:a5:e2:85:36:
                    ba:b1:d7:98:aa:b8:3b:1b:d2:38:6f:f0:29:00:8d:
                    88:8f:df:0d:d0:1b:d1:5e:33:7b:7e:8e:ea:6f:d7:
                    c4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:13:AB:75:B7:46:10:04:8B:C3:11:A1:95:EA:E0:E6:BD:47:50:3B
            X509v3 Authority Key Identifier:
                keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e302e302f31392d3139203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.159.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2b:c9:e3:28:70:4c:30:d8:87:52:e1:89:56:91:73:89:b9:2b:
         2a:22:d5:3b:e0:63:c7:db:29:5c:48:a3:75:b1:5e:cd:43:bf:
         3c:9e:2e:81:0b:d3:89:ee:aa:4f:8a:af:f7:46:d4:bd:8b:4f:
         63:d6:57:0f:f7:3b:1a:cd:c0:cf:ee:d4:1b:eb:a8:62:69:b7:
         f7:2a:eb:d3:0d:22:5d:ac:97:d2:80:39:22:d0:d5:5d:db:e7:
         37:58:35:e5:fc:fb:65:97:ed:86:fc:04:49:75:6a:49:c4:72:
         61:e0:91:1a:ca:b9:a7:8b:49:aa:a4:5a:1d:6b:75:51:fa:71:
         5f:61:1e:44:fe:ca:70:8c:09:b6:4d:24:6e:9c:96:32:b5:e7:
         3c:56:92:db:ec:72:b2:5d:49:ee:97:bb:19:95:64:b2:36:b0:
         2b:c6:a5:e8:1a:60:7e:9d:a0:36:b6:46:44:e3:a8:00:40:0f:
         a8:96:f4:29:7f:d2:c5:a1:23:f7:a6:3f:7c:1b:90:bb:50:a3:
         be:74:b6:1a:32:b6:eb:29:24:41:c7:d0:7c:66:da:a7:39:d9:
         1d:40:58:68:23:64:55:56:d8:5b:82:05:fe:c3:64:6b:f7:1c:
         c1:07:6d:f5:44:27:ff:69:74:43:ae:52:d9:88:1a:d7:6f:df:
         2e:bd:4d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:27:17 2026 by rpki-client