Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3132382e302f31382d3234203d3e203337393635.roa
File:                     3133392e3232302e3132382e302f31382d3234203d3e203337393635.roa (raw, json)
Hash identifier:          NsU/MvBPgoz+zRTUXf02e/M2WxhIq5Ju/jaHUiP7H0Y=
Subject key identifier:   F8:FF:7D:73:43:AE:BD:5B:7A:AF:5C:4A:B8:2F:4E:0E:D9:75:A7:86
Certificate issuer:       /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial:       5E4D59DD948278E55DF5CE82343C4D1FB189A09F
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3132382e302f31382d3234203d3e203337393635.roa
Signing time:             Wed 05 Aug 2026 02:47:06 +0000
ROA not before:           Wed 05 Aug 2026 02:42:06 +0000
ROA not after:            Wed 04 Aug 2027 02:47:06 +0000
asID:                     37965
IP address blocks:        139.220.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 08:11:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:4d:59:dd:94:82:78:e5:5d:f5:ce:82:34:3c:4d:1f:b1:89:a0:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
        Validity
            Not Before: Aug  5 02:42:06 2026 GMT
            Not After : Aug  4 02:47:06 2027 GMT
        Subject: CN=F8FF7D7343AEBD5B7AAF5C4AB82F4E0ED975A786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6f:00:08:1f:56:94:93:7d:85:6a:0b:33:26:
                    09:3b:c7:71:48:80:75:d4:a1:a6:94:12:0e:6b:e7:
                    3a:58:86:ec:6c:37:f3:08:ad:9d:94:d8:21:84:b1:
                    27:c5:95:42:eb:a4:38:76:ec:74:eb:a4:8a:09:c3:
                    3e:a7:29:a4:dd:15:85:63:4c:18:ae:e8:3e:f9:31:
                    46:5c:cc:bc:c3:54:58:95:78:69:4e:20:ce:b9:ca:
                    a3:94:b5:15:3a:46:35:03:4b:63:fa:fb:95:0e:2b:
                    0a:77:2d:da:aa:c9:a5:95:79:ff:b3:34:7b:39:30:
                    90:41:cd:55:92:ba:02:cc:ab:e1:8a:ef:74:99:b8:
                    2e:89:b8:4f:4f:e2:09:76:41:5b:b5:7e:6a:c5:ec:
                    5e:50:a3:27:8c:f0:be:b5:13:a0:d6:4f:50:a9:27:
                    80:a4:1b:7d:5a:9b:42:80:84:32:1b:98:c2:95:89:
                    e1:25:6b:63:73:b5:f6:b0:9a:c0:0a:ba:67:24:42:
                    45:b5:54:55:55:6b:0c:66:b7:db:dd:97:b4:4e:7b:
                    6a:8e:d5:80:6d:ca:4d:48:f5:6b:90:40:f0:03:d0:
                    91:a1:a2:df:40:82:a6:af:c6:d9:33:38:19:07:d6:
                    30:0a:13:6c:e1:57:9e:f6:00:5c:3e:45:7f:45:03:
                    25:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FF:7D:73:43:AE:BD:5B:7A:AF:5C:4A:B8:2F:4E:0E:D9:75:A7:86
            X509v3 Authority Key Identifier:
                keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3132382e302f31382d3234203d3e203337393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.220.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         bc:4d:7e:44:55:2a:3c:54:0e:e3:86:4e:62:4d:9b:04:09:c4:
         e7:7a:23:51:a6:10:f0:bc:e6:93:be:77:55:cf:59:f3:c4:a5:
         66:73:1b:ed:fb:8a:0b:80:8f:66:45:0a:55:82:9a:b5:aa:1f:
         13:ff:e3:2b:1b:b2:79:d7:20:e2:63:fa:4b:e5:0f:a3:05:ae:
         5c:c9:b3:51:8d:36:ed:66:c2:a2:1a:43:db:71:9d:67:95:36:
         74:31:72:14:be:15:90:95:44:e8:ef:e7:95:4b:3f:92:3f:cb:
         36:de:4b:1b:1b:ba:99:c7:c1:29:e6:76:fb:b8:5b:44:52:41:
         fa:d9:d7:a6:54:c1:fd:2c:eb:d4:12:d1:43:c8:8d:dc:54:f3:
         7d:97:ea:fb:40:0b:b4:e9:b3:a3:e2:fd:bd:48:9a:13:63:d4:
         3a:21:12:d1:dd:16:42:26:ba:15:b6:a6:b4:78:d7:dc:f3:eb:
         f3:06:e8:31:cc:c1:31:3a:1a:35:93:94:51:fc:5b:29:f5:d3:
         38:3d:1a:9d:8c:db:7b:df:c4:17:c8:34:77:34:bc:8f:7c:fa:
         62:17:00:85:11:b9:43:03:2f:21:bc:44:be:93:8a:b7:c4:18:
         d8:70:6f:bc:42:b3:12:7c:d2:d7:ae:bc:6a:e2:82:0d:30:13:
         d0:73:e9:ac
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUXk1Z3ZSCeOVd9c6CNDxNH7GJoJ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3
MzdGQjNFQzAeFw0yNjA4MDUwMjQyMDZaFw0yNzA4MDQwMjQ3MDZaMDMxMTAvBgNV
BAMTKEY4RkY3RDczNDNBRUJENUI3QUFGNUM0QUI4MkY0RTBFRDk3NUE3ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBbwAIH1aUk32FagszJgk7x3FI
gHXUoaaUEg5r5zpYhuxsN/MIrZ2U2CGEsSfFlULrpDh27HTrpIoJwz6nKaTdFYVj
TBiu6D75MUZczLzDVFiVeGlOIM65yqOUtRU6RjUDS2P6+5UOKwp3LdqqyaWVef+z
NHs5MJBBzVWSugLMq+GK73SZuC6JuE9P4gl2QVu1fmrF7F5QoyeM8L61E6DWT1Cp
J4CkG31am0KAhDIbmMKVieEla2NztfawmsAKumckQkW1VFVVawxmt9vdl7ROe2qO
1YBtyk1I9WuQQPAD0JGhot9AgqavxtkzOBkH1jAKE2zhV572AFw+RX9FAyU7AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU+P99c0OuvVt6r1xKuC9ODtl1p4YwHwYDVR0j
BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1
NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy
MzIzMDJlMzEzMjM4MmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzMzNzM5MzYzNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBovcgDANBgkqhkiG9w0BAQsFAAOCAQEAvE1+RFUqPFQO44ZOYk2b
BAnE53ojUaYQ8Lzmk753Vc9Z88SlZnMb7fuKC4CPZkUKVYKataofE//jKxuyedcg
4mP6S+UPowWuXMmzUY027WbCohpD23GdZ5U2dDFyFL4VkJVE6O/nlUs/kj/LNt5L
Gxu6mcfBKeZ2+7hbRFJB+tnXplTB/Szr1BLRQ8iN3FTzfZfq+0ALtOmzo+L9vUia
E2PUOiES0d0WQia6FbamtHjX3PPr8wboMczBMToaNZOUUfxbKfXTOD0anYzbe9/E
F8g0dzS8j3z6YhcAhRG5QwMvIbxEvpOKt8QY2HBvvEKzEnzS1668auKCDTAT0HPp
rA==
-----END CERTIFICATE-----
Generated at Sat Aug 29 07:12:18 2026 by rpki-client