Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS137539.roa
File:                     AS137539.roa (raw, json)
Hash identifier:          hgbPsIvw/d1FiopIGd9dsMQ/f/0+FCTUyZgg2C0Ykg4=
Subject key identifier:   08:EE:BE:33:A0:44:6C:88:AC:B7:53:93:8D:8C:2A:ED:77:8C:DF:F0
Certificate issuer:       /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
Certificate serial:       3442EE4FFC879571E27912F2D2AB1FE7484FECC6
Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS137539.roa
Signing time:             Thu 11 Jun 2026 12:13:18 +0000
ROA not before:           Thu 11 Jun 2026 12:08:18 +0000
ROA not after:            Thu 10 Jun 2027 12:13:18 +0000
asID:                     137539
IP address blocks:        116.182.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 00:55:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:42:ee:4f:fc:87:95:71:e2:79:12:f2:d2:ab:1f:e7:48:4f:ec:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
        Validity
            Not Before: Jun 11 12:08:18 2026 GMT
            Not After : Jun 10 12:13:18 2027 GMT
        Subject: CN=08EEBE33A0446C88ACB753938D8C2AED778CDFF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:36:bb:c3:5e:76:c0:98:27:4b:dd:46:73:87:
                    28:ca:87:b2:7f:f6:51:d0:31:e2:a2:19:24:5d:4c:
                    1c:ba:9b:77:7d:8a:2f:53:15:60:97:d7:bb:5d:ef:
                    06:db:b6:30:89:a1:25:9c:09:7e:fc:6d:ec:c9:76:
                    55:28:48:b0:51:05:b2:56:04:76:67:a4:c9:7d:c1:
                    94:49:8e:be:48:84:72:ff:e2:4b:d8:29:32:38:4e:
                    d0:ee:d8:a9:d7:28:6b:2e:2b:93:f7:30:f4:a7:91:
                    b7:8b:b1:00:a5:2b:8e:b4:b4:53:59:29:ad:85:7d:
                    7f:cb:c8:f8:c3:6d:e0:d4:3b:b7:c2:8d:a9:7a:07:
                    f9:35:3b:21:ce:a2:67:73:a6:1d:7c:96:bf:70:23:
                    c7:74:c7:10:95:5c:3e:5d:df:d1:ad:30:51:d4:e5:
                    5a:42:f0:6f:7c:52:fa:2d:dd:71:26:01:e2:c2:4d:
                    c3:4f:4d:3d:3c:a9:af:9f:81:85:1c:78:0c:9b:78:
                    18:da:18:d7:73:d4:9f:77:04:91:7e:f9:a4:f7:11:
                    41:cf:84:38:b1:26:f3:b7:f1:9c:10:c8:a9:29:8e:
                    19:ea:2a:11:03:eb:92:1d:2d:e8:0a:cb:75:fc:48:
                    35:85:85:ef:1c:c7:90:48:62:b4:aa:5f:d7:81:fb:
                    8c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EE:BE:33:A0:44:6C:88:AC:B7:53:93:8D:8C:2A:ED:77:8C:DF:F0
            X509v3 Authority Key Identifier:
                keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS137539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.182.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         26:d5:4a:80:7c:3e:6b:3b:45:16:d6:d5:25:a0:b5:d2:be:ea:
         6a:cc:e1:63:a4:72:af:da:51:94:01:02:ba:50:61:ae:37:da:
         6b:83:bd:47:e2:92:d8:ee:56:26:cd:6e:46:61:33:e4:01:bf:
         55:62:0a:87:ee:44:04:cc:f8:c2:7c:d5:65:21:45:c2:9f:08:
         3d:af:b3:ab:58:f4:35:20:64:58:1e:2a:25:ad:f3:26:92:4e:
         cf:1c:ee:51:43:24:d4:6d:10:1e:99:57:00:d2:54:8a:b5:61:
         a4:96:81:e5:80:29:96:f2:4a:e6:8b:e5:57:44:5c:4e:9e:2e:
         68:8b:de:73:d0:4f:c7:3b:88:e8:ac:80:4f:0d:17:ee:cd:4e:
         18:96:c4:ba:fc:9a:fd:c9:c7:0c:82:d1:23:71:2a:cb:91:f7:
         2a:3e:d4:23:55:56:59:e7:12:21:5b:91:ea:52:08:ba:ec:f3:
         7e:10:8c:b0:7a:cc:b0:b3:2c:b5:fa:49:a2:b5:ef:69:ef:39:
         9e:9a:20:2a:10:9c:e8:d1:4e:29:d6:98:24:88:e9:78:96:db:
         f6:bc:c5:6f:57:01:69:b5:a6:3d:f8:c9:7d:82:dd:be:47:e8:
         84:42:4e:c8:10:34:4e:ce:4d:5b:b2:19:28:8c:b8:86:d8:e8:
         af:d1:22:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:01:34 2026 by rpki-client