Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e34372e302f32342d3234203d3e203633313939.roa
File:                     3133392e3135392e34372e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier:          SVQCSI1ihdcBPifHV4+rFLDIktF9UbuXv4PsWSNcxU0=
Subject key identifier:   71:C6:57:0D:10:58:F2:A2:C5:2B:C4:A0:01:D9:EC:3B:55:12:CB:97
Certificate issuer:       /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial:       6122D54D7E47851D51B2EC7E8EFA0E53698616F3
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e34372e302f32342d3234203d3e203633313939.roa
Signing time:             Thu 04 Jun 2026 16:38:01 +0000
ROA not before:           Thu 04 Jun 2026 16:33:01 +0000
ROA not after:            Thu 03 Jun 2027 16:38:01 +0000
asID:                     63199
IP address blocks:        139.159.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:22:d5:4d:7e:47:85:1d:51:b2:ec:7e:8e:fa:0e:53:69:86:16:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
        Validity
            Not Before: Jun  4 16:33:01 2026 GMT
            Not After : Jun  3 16:38:01 2027 GMT
        Subject: CN=71C6570D1058F2A2C52BC4A001D9EC3B5512CB97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9e:0a:92:a6:b5:af:6e:95:5e:16:d2:f8:f9:
                    3d:46:2c:3b:44:b8:19:64:0b:6a:04:eb:ac:ed:d9:
                    c4:f1:00:50:e1:6e:09:08:0f:2e:0e:0d:63:47:06:
                    f4:03:39:9b:3b:95:58:13:49:51:23:64:19:a1:20:
                    58:c8:7e:44:0f:a4:f7:56:24:d0:18:a9:2a:c0:31:
                    18:ce:c6:76:2c:69:58:06:0d:98:fe:0f:12:cb:98:
                    8a:39:3a:25:84:03:05:f3:01:9d:78:be:03:41:93:
                    e9:01:ac:00:8e:34:23:43:c9:6a:4f:eb:10:d5:89:
                    eb:ae:62:6c:77:dd:d5:28:c0:46:7a:ab:72:14:ce:
                    96:65:d9:4b:65:36:45:0c:eb:b1:28:80:db:9b:a3:
                    2d:86:fe:f0:33:e4:32:96:fc:a5:1d:25:9d:65:bf:
                    da:aa:ff:e7:4d:2a:dc:44:32:8e:ab:fb:9d:01:b2:
                    6b:33:2e:d1:1a:34:fa:21:d4:18:3e:c5:13:ba:80:
                    c7:ce:96:73:e8:b2:b6:0e:9d:35:8e:0a:9a:50:12:
                    78:72:6c:69:a2:f5:9f:9f:af:7b:f5:38:93:b4:ef:
                    3d:30:05:48:0b:12:c6:6c:38:69:83:2c:f0:dc:5a:
                    6e:3e:a0:bb:85:b0:2b:1c:5d:b8:25:32:72:e4:8d:
                    f4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C6:57:0D:10:58:F2:A2:C5:2B:C4:A0:01:D9:EC:3B:55:12:CB:97
            X509v3 Authority Key Identifier:
                keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e34372e302f32342d3234203d3e203633313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.159.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:49:71:11:e3:70:28:07:fa:85:39:3f:0c:5f:f5:a4:c3:f7:
         37:ee:03:0d:6b:6e:de:72:e9:18:bf:87:44:32:4a:5c:8f:6a:
         81:b4:ab:0a:7d:e1:15:69:c6:2e:10:04:ea:38:1d:4e:ab:c2:
         c0:14:c9:8f:ca:14:48:bf:03:05:73:cf:46:d8:7d:18:de:54:
         21:06:8b:b7:a1:d5:b1:63:76:d2:07:0e:c3:59:a7:68:5c:55:
         a1:88:63:66:be:47:31:53:c0:1a:12:38:30:59:7c:5f:ee:2e:
         e1:b1:77:8b:d1:3b:92:18:56:8a:b4:a6:9c:50:09:c6:8d:02:
         a8:87:e5:21:61:a5:f9:eb:38:cb:1b:d8:e0:4d:d7:50:be:2a:
         7c:75:35:61:fe:05:4c:74:d0:59:5b:8f:cf:61:6f:5d:2c:a0:
         2e:30:e2:32:b3:8e:12:33:6d:1a:7e:7e:70:92:dc:9b:ed:da:
         bb:2b:54:1e:db:2e:13:72:46:f9:78:73:ac:3e:85:95:68:52:
         0c:4a:8f:15:c0:a1:07:49:87:84:b0:06:c8:1d:7d:65:7f:38:
         b0:f5:14:33:48:55:b2:11:a0:db:29:a5:22:a3:77:8d:b2:5c:
         c1:8e:f1:18:8f:46:eb:39:80:10:7c:fd:f9:9c:05:26:3e:ec:
         57:ef:c1:1a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:36:46 2026 by rpki-client