Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f31382d3234203d3e2034383038.roa
File:                     3133392e3232302e3139322e302f31382d3234203d3e2034383038.roa (raw, json)
Hash identifier:          wwjS0Hfa9ETH9YBLNaYs4ScL/I3+ub0Sbht0ZBy3oos=
Subject key identifier:   0C:46:42:5D:A2:01:27:60:D5:B6:A5:7F:A8:89:3D:D7:D8:6F:77:3B
Certificate issuer:       /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial:       1D6E1BF9CD7ECAD553E686934329C6508059965A
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f31382d3234203d3e2034383038.roa
Signing time:             Wed 02 Sep 2026 03:55:20 +0000
ROA not before:           Wed 02 Sep 2026 03:50:20 +0000
ROA not after:            Wed 01 Sep 2027 03:55:20 +0000
asID:                     4808
IP address blocks:        139.220.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 10:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:6e:1b:f9:cd:7e:ca:d5:53:e6:86:93:43:29:c6:50:80:59:96:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
        Validity
            Not Before: Sep  2 03:50:20 2026 GMT
            Not After : Sep  1 03:55:20 2027 GMT
        Subject: CN=0C46425DA2012760D5B6A57FA8893DD7D86F773B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e5:74:bb:f1:1c:ae:f2:9c:48:8a:f3:32:e4:
                    e3:19:ad:4e:5f:a3:56:e7:7a:e2:07:98:a4:df:f2:
                    69:7d:2e:2e:65:ed:1a:34:98:f5:16:10:ed:6d:d3:
                    91:b3:aa:f0:58:71:e9:fa:dc:86:ca:39:91:e0:0b:
                    1f:5a:85:d4:fb:fe:b1:07:fe:93:81:9f:8e:52:63:
                    01:e6:45:b3:e2:c2:3e:5b:e1:52:50:88:a7:0f:65:
                    b3:02:47:aa:18:1a:5f:0e:13:0e:1c:b2:5b:16:f7:
                    53:64:6f:fb:f4:d2:d4:ec:9c:43:f3:c8:bb:c6:4f:
                    04:f0:71:e6:75:04:f9:05:fc:82:0b:eb:f3:86:aa:
                    da:c9:ed:a9:cb:dd:ab:ed:7d:63:3c:de:b1:46:c3:
                    8e:90:bb:29:c8:c4:9e:55:15:57:c8:80:33:d3:bc:
                    f8:25:67:43:bb:66:c8:71:73:f1:f2:ea:81:39:db:
                    f7:23:bd:74:c2:6d:92:a8:03:bc:38:66:6f:19:68:
                    19:b3:ca:9c:32:85:5b:71:9b:df:3a:ef:4c:12:e1:
                    ce:78:89:3d:e5:bb:ea:6f:4f:6b:45:b9:12:6d:85:
                    d0:33:95:dc:a1:6d:b5:c1:9f:24:81:b3:27:4d:03:
                    20:13:0b:5f:96:ae:dd:94:10:3b:2a:91:30:7d:3d:
                    2b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:46:42:5D:A2:01:27:60:D5:B6:A5:7F:A8:89:3D:D7:D8:6F:77:3B
            X509v3 Authority Key Identifier:
                keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f31382d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.220.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3f:c7:57:6d:b8:87:64:4d:f7:45:5d:6c:3f:69:4a:c0:f4:99:
         5c:84:79:82:7e:e7:43:1c:90:fc:3e:98:7d:1f:1b:c8:db:86:
         f4:db:3c:7e:28:2d:13:f0:a5:f5:57:d9:07:4c:13:84:93:1e:
         f4:2f:10:55:34:57:b8:7a:9b:a2:60:82:a8:07:3c:93:16:08:
         5c:df:ec:4a:c6:63:38:87:7a:30:0d:b9:3a:84:b5:b9:35:c4:
         1c:3b:0e:92:43:5e:8b:76:c2:5e:63:58:e6:32:0e:2e:66:24:
         df:5c:ae:bf:5a:c7:c5:33:d4:cb:7c:8a:e5:49:31:dc:bd:20:
         f8:ae:15:51:3e:54:47:53:eb:d7:4f:fd:b7:81:f1:c5:84:7c:
         82:bc:10:44:73:a0:4d:40:d3:b4:9a:9b:98:98:97:0a:4f:13:
         40:02:b4:7c:a9:1e:24:53:d3:d2:3e:4a:c8:49:59:64:ee:70:
         36:69:a6:8c:fc:b2:d1:c1:e6:08:32:76:01:10:9e:93:b8:78:
         8c:62:aa:2a:82:15:63:b6:0b:4d:5b:25:2c:91:63:b9:6e:1b:
         b8:5a:57:1b:99:04:24:09:8d:c1:6b:50:d3:26:37:98:70:73:
         8d:63:67:c2:12:db:7c:f7:15:9f:d5:c0:0b:ab:8b:63:1e:09:
         35:d1:51:2b
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUHW4b+c1+ytVT5oaTQynGUIBZllowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3
MzdGQjNFQzAeFw0yNjA5MDIwMzUwMjBaFw0yNzA5MDEwMzU1MjBaMDMxMTAvBgNV
BAMTKDBDNDY0MjVEQTIwMTI3NjBENUI2QTU3RkE4ODkzREQ3RDg2Rjc3M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV5XS78Ryu8pxIivMy5OMZrU5f
o1bneuIHmKTf8ml9Li5l7Ro0mPUWEO1t05GzqvBYcen63IbKOZHgCx9ahdT7/rEH
/pOBn45SYwHmRbPiwj5b4VJQiKcPZbMCR6oYGl8OEw4cslsW91Nkb/v00tTsnEPz
yLvGTwTwceZ1BPkF/IIL6/OGqtrJ7anL3avtfWM83rFGw46QuynIxJ5VFVfIgDPT
vPglZ0O7Zshxc/Hy6oE52/cjvXTCbZKoA7w4Zm8ZaBmzypwyhVtxm98670wS4c54
iT3lu+pvT2tFuRJthdAzldyhbbXBnySBsydNAyATC1+Wrt2UEDsqkTB9PSvbAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUDEZCXaIBJ2DVtqV/qIk919hvdzswHwYDVR0j
BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1
NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0ODI3MTYxOS8xLzMxMzMzOTJlMzIz
MjMwMmUzMTM5MzIyZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzNDM4MzAzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBovcwDANBgkqhkiG9w0BAQsFAAOCAQEAP8dXbbiHZE33RV1sP2lKwPSZ
XIR5gn7nQxyQ/D6YfR8byNuG9Ns8figtE/Cl9VfZB0wThJMe9C8QVTRXuHqbomCC
qAc8kxYIXN/sSsZjOId6MA25OoS1uTXEHDsOkkNei3bCXmNY5jIOLmYk31yuv1rH
xTPUy3yK5Ukx3L0g+K4VUT5UR1Pr10/9t4HxxYR8grwQRHOgTUDTtJqbmJiXCk8T
QAK0fKkeJFPT0j5KyElZZO5wNmmmjPyy0cHmCDJ2ARCek7h4jGKqKoIVY7YLTVsl
LJFjuW4buFpXG5kEJAmNwWtQ0yY3mHBzjWNnwhLbfPcVn9XAC6uLYx4JNdFRKw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:14:30 2026 by rpki-client