Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f31382d3234203d3e203338303139.roa
File:                     3133392e3232302e3139322e302f31382d3234203d3e203338303139.roa (raw, json)
Hash identifier:          5AM3LW+QYMzlF7mR/y4zpHZroOgv17VxiMcIfOnHBWk=
Subject key identifier:   1D:AA:6D:7A:6E:75:2F:51:14:E9:87:E3:99:53:D3:53:E9:03:ED:9C
Certificate issuer:       /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial:       569899F4164462721A924450016CFF540E596F3B
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f31382d3234203d3e203338303139.roa
Signing time:             Wed 02 Sep 2026 03:55:20 +0000
ROA not before:           Wed 02 Sep 2026 03:50:20 +0000
ROA not after:            Wed 01 Sep 2027 03:55:20 +0000
asID:                     38019
IP address blocks:        139.220.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 10:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:98:99:f4:16:44:62:72:1a:92:44:50:01:6c:ff:54:0e:59:6f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
        Validity
            Not Before: Sep  2 03:50:20 2026 GMT
            Not After : Sep  1 03:55:20 2027 GMT
        Subject: CN=1DAA6D7A6E752F5114E987E39953D353E903ED9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:37:59:9b:0d:69:f1:8e:23:73:33:61:ed:8b:
                    74:2e:05:c4:d7:24:c5:34:72:aa:6b:c8:10:de:c2:
                    68:95:71:37:f1:d7:26:47:26:29:2c:ca:7c:68:34:
                    88:6d:dd:ac:38:11:b4:33:d8:03:f8:fe:4f:8c:9d:
                    6f:a1:7b:3b:f0:34:74:61:60:61:e6:11:72:14:40:
                    6b:92:9f:c8:b8:e2:dd:4e:0f:e6:1d:a7:c3:4a:67:
                    8a:11:21:50:b7:af:24:49:e6:f4:86:ff:80:75:0c:
                    1b:5c:d0:46:e1:9f:a5:1a:44:b3:f3:cd:95:c6:d0:
                    76:d4:57:f8:82:28:81:55:83:8b:9d:a9:09:1e:99:
                    14:8e:10:21:03:e5:42:d5:fa:13:bd:9b:70:1f:22:
                    a4:f4:c0:f7:c7:17:04:8f:d2:11:41:d3:f8:f6:2d:
                    3c:0c:41:0e:19:4e:46:9f:87:68:00:8c:e8:29:ff:
                    9a:45:e0:35:70:9b:02:bf:49:08:49:eb:77:68:e8:
                    c3:17:21:db:b4:3f:1d:b4:bf:3f:a6:a9:73:7b:e5:
                    d7:4a:51:c8:3a:9a:0c:1f:d5:a2:90:e8:d7:98:22:
                    0c:8b:01:bf:eb:13:a0:92:b4:ad:a7:82:ac:88:a0:
                    9a:7a:14:40:a3:1b:79:fa:35:79:4f:14:66:fe:84:
                    0f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AA:6D:7A:6E:75:2F:51:14:E9:87:E3:99:53:D3:53:E9:03:ED:9C
            X509v3 Authority Key Identifier:
                keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f31382d3234203d3e203338303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.220.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         83:87:0e:a1:cf:31:89:29:02:63:db:88:ce:71:29:2e:b9:40:
         59:ea:dc:1b:c3:f2:8c:d1:60:5e:81:70:10:5f:56:2f:51:2c:
         74:1c:9c:71:66:bd:ee:0b:10:ca:1e:fe:ca:18:00:71:87:b4:
         9a:51:25:48:cb:e1:01:b0:1f:22:e4:16:da:7d:0c:50:e5:f9:
         9a:96:e3:95:5e:ce:6d:cb:fe:9e:b7:f8:a8:2f:ea:c8:67:78:
         89:d3:ac:42:5b:15:03:b2:6b:d0:6e:2f:93:85:73:0a:65:40:
         2a:5b:9a:8d:b6:90:f5:cc:29:6e:fb:d1:60:c1:11:d6:99:90:
         30:06:75:86:9f:72:ea:4b:1b:95:77:e0:b1:c5:d8:c4:e4:e5:
         6f:9d:b4:20:5c:a3:cb:69:db:f4:e3:24:d2:f7:ad:ae:c5:51:
         6a:df:68:ee:e3:db:aa:cf:67:fb:1d:95:0e:2d:e7:15:fb:f5:
         1a:3b:6f:b6:b6:43:81:fc:d0:4f:6f:69:28:8c:7f:5b:a9:84:
         db:9c:39:f0:11:18:ea:28:31:b7:ba:a8:f1:f5:5f:e3:a0:ea:
         3b:dd:8f:06:90:9d:b8:1d:7b:f2:00:91:c5:2a:c7:ce:7f:67:
         dd:c3:c4:09:8d:0e:f6:31:3b:a5:eb:18:ff:e1:c2:7a:04:2b:
         0e:95:78:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:14:31 2026 by rpki-client