Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131322e302f32332d3233203d3e2034383337.roa
File:                     3133392e3135392e3131322e302f32332d3233203d3e2034383337.roa (raw, json)
Hash identifier:          RUUu9/8ht2gZrxuJ8NZzgO27EBxw9n9jh8iUiHxgJbg=
Subject key identifier:   0A:86:FE:61:6E:AD:EC:BA:83:57:24:5E:E5:BA:08:BE:E0:C3:9C:9D
Certificate issuer:       /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2
Certificate serial:       2D2B8FAF8B8ECCAF99F8F2E4764D818A57536AA2
Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131322e302f32332d3233203d3e2034383337.roa
Signing time:             Sun 28 Jun 2026 13:49:05 +0000
ROA not before:           Sun 28 Jun 2026 13:44:05 +0000
ROA not after:            Sun 27 Jun 2027 13:49:05 +0000
asID:                     4837
IP address blocks:        139.159.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 21:18:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:2b:8f:af:8b:8e:cc:af:99:f8:f2:e4:76:4d:81:8a:57:53:6a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2
        Validity
            Not Before: Jun 28 13:44:05 2026 GMT
            Not After : Jun 27 13:49:05 2027 GMT
        Subject: CN=0A86FE616EADECBA8357245EE5BA08BEE0C39C9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8c:74:29:08:15:24:8c:96:8b:d9:ba:97:43:
                    95:2d:2c:2c:2c:f5:28:c6:01:68:3e:8f:8f:de:b4:
                    39:3b:0c:1e:ea:3c:05:54:bd:09:23:10:fe:cd:59:
                    79:77:8d:98:8d:34:24:97:14:0d:84:61:a0:4b:f9:
                    81:bb:8d:12:32:94:d4:af:6a:5f:11:66:97:94:62:
                    aa:8a:0f:45:7f:bd:2a:38:c6:23:fe:a8:2a:33:cd:
                    eb:d5:2c:a0:ca:08:b5:b8:f1:84:ce:8a:8c:c0:92:
                    1e:af:70:9c:d0:cf:a4:46:41:d8:46:40:89:7e:9e:
                    4f:a5:58:0c:c2:aa:aa:9a:72:36:a9:e2:5a:2b:10:
                    98:3d:e3:6b:d5:44:70:c1:26:30:f9:20:99:2e:f5:
                    31:00:eb:89:f5:e5:2e:3a:df:bc:3d:fa:08:7d:10:
                    45:d3:38:21:af:f7:13:cd:6b:21:71:2c:2b:9a:3a:
                    8d:43:dd:06:26:15:3c:a2:4b:70:93:3a:9b:3c:07:
                    6e:96:8e:38:ab:d5:aa:e3:4a:70:21:17:d9:f6:fe:
                    ab:e4:42:9b:3e:97:93:b8:83:96:e4:7c:9e:61:0b:
                    30:85:19:13:1c:f1:cf:f3:6a:73:ea:49:df:19:9c:
                    2d:ed:46:c6:60:da:ad:b5:cf:88:9a:5c:2b:1b:4f:
                    7b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:86:FE:61:6E:AD:EC:BA:83:57:24:5E:E5:BA:08:BE:E0:C3:9C:9D
            X509v3 Authority Key Identifier:
                keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131322e302f32332d3233203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.159.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:c0:49:db:d8:c4:cd:3a:d7:d8:06:4d:a1:32:43:33:10:4d:
         87:8d:de:7e:9f:06:ae:a7:f6:d2:27:ed:8a:6d:04:ec:f4:5f:
         e1:fa:2e:8e:73:8b:30:ce:e9:34:cd:59:5a:4f:36:06:98:c6:
         06:ad:1e:59:b9:be:78:80:20:30:64:a0:95:d3:81:a3:0a:2e:
         37:82:58:a0:1e:4e:83:93:f8:6f:b0:83:88:ac:1a:73:93:bb:
         34:04:e2:0b:9c:3d:fc:a4:d2:47:5c:e5:a2:7d:15:a4:f3:5d:
         7f:15:4a:96:f9:db:ff:e6:13:42:6e:a3:ee:8d:5e:c6:2a:32:
         8a:d0:f2:ac:b4:a3:06:66:5b:54:ed:72:a1:3f:15:d5:a0:55:
         f8:4e:68:ce:54:d0:b1:fa:d8:8e:b5:eb:96:b0:f4:fa:3d:03:
         a3:bf:b8:7d:9b:c1:2c:a2:db:f2:fb:a6:61:ce:37:f2:db:82:
         2c:56:29:54:6a:f1:34:6a:23:f2:9c:1a:59:dc:b8:16:94:f1:
         6a:9b:78:c1:68:49:71:8b:2e:d0:65:5c:b5:40:35:8c:87:e6:
         34:50:88:6f:ea:5c:08:e7:ee:5f:72:5c:0b:05:c9:9b:82:f7:
         e9:2c:0b:7e:25:37:4d:44:94:8b:a7:0a:d0:3e:57:50:85:66:
         df:43:f4:bb
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIULSuPr4uOzK+Z+PLkdk2BildTaqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3
RDk5REREMjAeFw0yNjA2MjgxMzQ0MDVaFw0yNzA2MjcxMzQ5MDVaMDMxMTAvBgNV
BAMTKDBBODZGRTYxNkVBREVDQkE4MzU3MjQ1RUU1QkEwOEJFRTBDMzlDOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtjHQpCBUkjJaL2bqXQ5UtLCws
9SjGAWg+j4/etDk7DB7qPAVUvQkjEP7NWXl3jZiNNCSXFA2EYaBL+YG7jRIylNSv
al8RZpeUYqqKD0V/vSo4xiP+qCozzevVLKDKCLW48YTOiozAkh6vcJzQz6RGQdhG
QIl+nk+lWAzCqqqacjap4lorEJg942vVRHDBJjD5IJku9TEA64n15S4637w9+gh9
EEXTOCGv9xPNayFxLCuaOo1D3QYmFTyiS3CTOps8B26Wjjir1arjSnAhF9n2/qvk
Qps+l5O4g5bkfJ5hCzCFGRMc8c/zanPqSd8ZnC3tRsZg2q21z4iaXCsbT3v7AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUCob+YW6t7LqDVyRe5boIvuDDnJ0wHwYDVR0j
BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE
NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4MDA1NTEyMTU1OTU1NC8xLzMxMzMzOTJlMzEz
NTM5MmUzMTMxMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzMzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAYufcDANBgkqhkiG9w0BAQsFAAOCAQEAbcBJ29jEzTrX2AZNoTJDMxBN
h43efp8Grqf20iftim0E7PRf4foujnOLMM7pNM1ZWk82BpjGBq0eWbm+eIAgMGSg
ldOBowouN4JYoB5Og5P4b7CDiKwac5O7NATiC5w9/KTSR1zlon0VpPNdfxVKlvnb
/+YTQm6j7o1exioyitDyrLSjBmZbVO1yoT8V1aBV+E5ozlTQsfrYjrXrlrD0+j0D
o7+4fZvBLKLb8vumYc438tuCLFYpVGrxNGoj8pwaWdy4FpTxapt4wWhJcYsu0GVc
tUA1jIfmNFCIb+pcCOfuX3JcCwXJm4L36SwLfiU3TUSUi6cK0D5XUIVm30P0uw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:25:49 2026 by rpki-client