Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f31382d3234203d3e203137363338.roa
File:                     3133392e3232302e3139322e302f31382d3234203d3e203137363338.roa (raw, json)
Hash identifier:          9e1JR5utTIemTqHP8y6kd3PDOckK8mDtEslp/BudJuE=
Subject key identifier:   03:D0:A4:AA:C2:66:77:54:18:5C:71:DC:24:B4:F4:B4:9C:A7:E6:2A
Certificate issuer:       /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial:       2993874C3E0E05356A7B8420D973F2B9EC19290B
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f31382d3234203d3e203137363338.roa
Signing time:             Wed 02 Sep 2026 03:55:20 +0000
ROA not before:           Wed 02 Sep 2026 03:50:20 +0000
ROA not after:            Wed 01 Sep 2027 03:55:20 +0000
asID:                     17638
IP address blocks:        139.220.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 10:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:93:87:4c:3e:0e:05:35:6a:7b:84:20:d9:73:f2:b9:ec:19:29:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
        Validity
            Not Before: Sep  2 03:50:20 2026 GMT
            Not After : Sep  1 03:55:20 2027 GMT
        Subject: CN=03D0A4AAC2667754185C71DC24B4F4B49CA7E62A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:aa:9d:2e:c5:62:d4:28:71:d2:5d:82:22:27:
                    76:64:9e:5f:1a:06:31:69:08:65:f4:5e:05:54:9e:
                    f2:84:02:3f:9a:5c:cf:30:49:6c:da:09:ca:4c:a0:
                    7e:2f:eb:1a:bf:91:5e:19:1e:9a:50:bb:fc:79:35:
                    84:3d:f4:59:8b:c6:d7:be:08:6b:74:9a:96:73:c6:
                    70:99:44:f2:2b:a5:06:16:cc:81:a2:1f:62:92:2c:
                    c9:ec:ff:a4:4e:cc:a6:12:52:94:de:15:14:56:d3:
                    bb:39:b7:12:5a:e0:89:74:f9:b5:df:24:c4:da:7b:
                    0b:f6:31:d2:b2:da:b8:c1:ba:1b:1c:27:ae:62:e0:
                    1b:bb:f0:7b:6a:c1:e6:ca:64:4b:39:48:a6:3f:0d:
                    00:08:79:97:ce:dd:7f:ee:51:e0:b9:5c:b5:60:ca:
                    44:c7:1b:11:75:80:d7:5f:4d:a8:6e:f1:1d:39:81:
                    b6:f8:00:fe:ca:ff:d7:ba:43:ce:f6:be:f4:a7:c2:
                    2f:d1:1e:b9:0a:ed:e2:d3:28:e2:58:89:a2:3f:8d:
                    37:b4:b1:8a:7f:5c:bc:f2:ef:49:7e:61:13:db:4b:
                    2d:0c:c9:23:ef:9e:f0:df:b9:9e:f2:68:f4:10:43:
                    b8:62:55:a6:05:b8:f1:71:26:51:15:4d:94:36:70:
                    1a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D0:A4:AA:C2:66:77:54:18:5C:71:DC:24:B4:F4:B4:9C:A7:E6:2A
            X509v3 Authority Key Identifier:
                keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f31382d3234203d3e203137363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.220.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4a:3a:ec:a2:be:2f:cb:dd:6a:a1:10:5c:0c:37:35:49:8d:e5:
         17:2f:69:53:4b:58:31:42:2e:d6:77:d0:35:77:96:8f:83:62:
         4f:ad:f8:47:94:5c:6c:0c:d1:82:ed:b4:31:62:af:9a:63:9d:
         a7:e2:de:c2:97:f9:e8:2a:c0:75:9f:98:3a:eb:40:94:cc:aa:
         3e:2a:38:dd:5a:a1:9a:6e:9f:12:d1:71:52:e5:1e:00:e5:90:
         cd:e5:5e:15:eb:b3:7d:ed:9a:c0:87:89:f4:5b:5d:5c:e6:61:
         b1:84:62:f0:02:b5:c8:bf:55:80:35:40:ac:7f:62:de:0b:e4:
         99:5d:1d:9f:62:5a:d7:9c:d3:c9:69:9c:64:26:6d:67:21:01:
         af:66:c0:6d:67:3e:e5:74:30:76:07:22:cf:52:8d:0a:a3:77:
         c1:11:0d:71:ea:fa:d1:ad:a0:c9:b4:39:b0:a5:cd:a9:60:cf:
         c3:71:74:0d:5e:d3:71:7c:94:48:21:e7:98:a6:f5:48:5e:33:
         3d:08:2f:7e:00:eb:88:b9:ee:84:a4:72:96:c8:00:23:ea:5c:
         06:35:6d:e1:37:6c:da:02:37:fb:51:db:63:79:6f:d1:3b:20:
         07:66:b2:9c:a0:61:af:e8:9d:1b:d3:02:1e:30:05:19:0f:7f:
         34:56:aa:1e
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUKZOHTD4OBTVqe4Qg2XPyuewZKQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3
MzdGQjNFQzAeFw0yNjA5MDIwMzUwMjBaFw0yNzA5MDEwMzU1MjBaMDMxMTAvBgNV
BAMTKDAzRDBBNEFBQzI2Njc3NTQxODVDNzFEQzI0QjRGNEI0OUNBN0U2MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDqp0uxWLUKHHSXYIiJ3Zknl8a
BjFpCGX0XgVUnvKEAj+aXM8wSWzaCcpMoH4v6xq/kV4ZHppQu/x5NYQ99FmLxte+
CGt0mpZzxnCZRPIrpQYWzIGiH2KSLMns/6ROzKYSUpTeFRRW07s5txJa4Il0+bXf
JMTaewv2MdKy2rjBuhscJ65i4Bu78HtqwebKZEs5SKY/DQAIeZfO3X/uUeC5XLVg
ykTHGxF1gNdfTahu8R05gbb4AP7K/9e6Q872vvSnwi/RHrkK7eLTKOJYiaI/jTe0
sYp/XLzy70l+YRPbSy0MySPvnvDfuZ7yaPQQQ7hiVaYFuPFxJlEVTZQ2cBqnAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUA9CkqsJmd1QYXHHcJLT0tJyn5iowHwYDVR0j
BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1
NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy
MzIzMDJlMzEzOTMyMmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzEzNzM2MzMzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBovcwDANBgkqhkiG9w0BAQsFAAOCAQEASjrsor4vy91qoRBcDDc1
SY3lFy9pU0tYMUIu1nfQNXeWj4NiT634R5RcbAzRgu20MWKvmmOdp+Lewpf56CrA
dZ+YOutAlMyqPio43Vqhmm6fEtFxUuUeAOWQzeVeFeuzfe2awIeJ9FtdXOZhsYRi
8AK1yL9VgDVArH9i3gvkmV0dn2Ja15zTyWmcZCZtZyEBr2bAbWc+5XQwdgciz1KN
CqN3wRENcer60a2gybQ5sKXNqWDPw3F0DV7TcXyUSCHnmKb1SF4zPQgvfgDriLnu
hKRylsgAI+pcBjVt4Tds2gI3+1HbY3lv0TsgB2aynKBhr+idG9MCHjAFGQ9/NFaq
Hg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:14:31 2026 by rpki-client