Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f32332d3233203d3e203137363338.roa
File:                     3133392e3232302e3139322e302f32332d3233203d3e203137363338.roa (raw, json)
Hash identifier:          j/dV85j1e7ErhB8gj+zqldM20y1jxlTZbrzf/O+PAF0=
Subject key identifier:   6D:18:73:90:04:0E:19:E0:41:0B:3E:ED:F9:A2:FB:B2:CE:22:72:22
Certificate issuer:       /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial:       56630FEBF48A1752FB4299645A697C41B9E9345D
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f32332d3233203d3e203137363338.roa
Signing time:             Fri 24 Apr 2026 05:45:53 +0000
ROA not before:           Fri 24 Apr 2026 05:40:53 +0000
ROA not after:            Fri 23 Apr 2027 05:45:53 +0000
asID:                     17638
IP address blocks:        139.220.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Apr 2026 20:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:63:0f:eb:f4:8a:17:52:fb:42:99:64:5a:69:7c:41:b9:e9:34:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
        Validity
            Not Before: Apr 24 05:40:53 2026 GMT
            Not After : Apr 23 05:45:53 2027 GMT
        Subject: CN=6D187390040E19E0410B3EEDF9A2FBB2CE227222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:58:f9:14:b4:4f:d5:66:7c:60:ba:85:12:24:
                    85:33:c7:8d:6a:50:3c:93:d4:3b:63:1d:1a:43:99:
                    13:60:de:cc:53:15:56:9b:ff:1a:34:f9:11:31:89:
                    c7:f9:6b:cf:c8:57:7e:ae:75:9c:e9:56:0f:ba:a2:
                    4e:e3:a7:24:61:53:a6:24:48:22:14:23:9c:a0:98:
                    dc:53:31:6b:c4:19:b4:4c:d6:f2:bb:b7:e8:e8:e2:
                    95:2c:ff:33:18:08:67:aa:5c:66:0e:b9:f9:85:0d:
                    9f:c2:9f:75:f9:59:a9:db:ad:cc:14:6d:e6:68:12:
                    5c:96:da:4a:a8:73:2a:c5:5a:1b:5c:08:7f:f4:98:
                    00:b1:59:c5:25:5b:cc:32:15:62:7b:5f:e5:80:0a:
                    74:1c:a3:38:2d:3c:8d:47:5d:36:ec:38:14:63:9b:
                    b4:e9:75:d0:ae:5c:b6:41:da:2c:89:c2:72:55:9d:
                    fc:a2:f2:af:8c:d5:b0:93:6c:4e:06:32:49:37:02:
                    11:c7:25:40:59:45:f4:e2:4b:47:5e:70:7e:89:d9:
                    d5:ca:c5:70:b3:ba:e7:6e:a3:b3:f6:54:dd:ea:08:
                    56:1f:31:30:76:2f:fc:91:89:58:3d:89:b9:16:21:
                    e5:9a:a1:6d:e4:9c:3b:c9:ec:e3:56:9a:7a:e4:7f:
                    72:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:18:73:90:04:0E:19:E0:41:0B:3E:ED:F9:A2:FB:B2:CE:22:72:22
            X509v3 Authority Key Identifier:
                keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f32332d3233203d3e203137363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.220.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:07:d7:a2:7c:7f:0d:c3:29:33:48:54:01:e5:70:87:ea:b5:
         17:4c:c4:16:e5:61:0d:97:47:4f:f0:4f:f6:36:19:44:47:37:
         38:37:24:fb:71:50:62:04:73:c8:00:47:03:8d:b5:f1:36:83:
         b5:fa:b4:aa:20:cd:4a:37:44:6a:d5:d9:46:b6:1c:20:a6:35:
         89:57:0b:8e:7f:6d:00:83:08:89:31:c5:06:e7:c0:88:1b:4b:
         96:cb:ca:30:81:8b:5f:e0:da:35:7d:33:9b:6d:06:1b:d5:b5:
         66:aa:52:b5:7d:3f:bf:ba:aa:9e:1d:31:69:2f:13:96:2a:e3:
         f4:83:ee:eb:3d:e5:42:7b:32:ee:86:9f:5d:de:3b:93:cc:74:
         5c:1f:72:1d:4f:e3:ff:67:34:c9:5e:88:20:03:f3:e1:dc:56:
         e2:67:66:6c:0b:0f:4b:49:e6:ca:6f:79:ac:5c:e7:8f:cf:d6:
         73:3e:54:f9:fc:7b:aa:de:da:0d:86:1d:15:1d:e7:2c:35:98:
         49:51:e0:00:93:64:6a:fc:e8:2b:e9:90:87:99:9b:15:65:df:
         75:fd:a8:1f:b8:15:79:33:64:af:44:7a:bd:5c:6a:0d:8e:0c:
         17:62:82:a8:3e:f0:94:59:6e:d8:48:e3:e8:2a:5e:dc:05:5c:
         4e:8a:5b:f4
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUVmMP6/SKF1L7QplkWml8QbnpNF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3
MzdGQjNFQzAeFw0yNjA0MjQwNTQwNTNaFw0yNzA0MjMwNTQ1NTNaMDMxMTAvBgNV
BAMTKDZEMTg3MzkwMDQwRTE5RTA0MTBCM0VFREY5QTJGQkIyQ0UyMjcyMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrWPkUtE/VZnxguoUSJIUzx41q
UDyT1DtjHRpDmRNg3sxTFVab/xo0+RExicf5a8/IV36udZzpVg+6ok7jpyRhU6Yk
SCIUI5ygmNxTMWvEGbRM1vK7t+jo4pUs/zMYCGeqXGYOufmFDZ/Cn3X5WanbrcwU
beZoElyW2kqocyrFWhtcCH/0mACxWcUlW8wyFWJ7X+WACnQcozgtPI1HXTbsOBRj
m7TpddCuXLZB2iyJwnJVnfyi8q+M1bCTbE4GMkk3AhHHJUBZRfTiS0decH6J2dXK
xXCzuuduo7P2VN3qCFYfMTB2L/yRiVg9ibkWIeWaoW3knDvJ7ONWmnrkf3JDAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUbRhzkAQOGeBBCz7t+aL7ss4iciIwHwYDVR0j
BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1
NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy
MzIzMDJlMzEzOTMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEzNzM2MzMzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAYvcwDANBgkqhkiG9w0BAQsFAAOCAQEAOgfXonx/DcMpM0hUAeVw
h+q1F0zEFuVhDZdHT/BP9jYZREc3ODck+3FQYgRzyABHA4218TaDtfq0qiDNSjdE
atXZRrYcIKY1iVcLjn9tAIMIiTHFBufAiBtLlsvKMIGLX+DaNX0zm20GG9W1ZqpS
tX0/v7qqnh0xaS8Tlirj9IPu6z3lQnsy7oafXd47k8x0XB9yHU/j/2c0yV6IIAPz
4dxW4mdmbAsPS0nmym95rFznj8/Wcz5U+fx7qt7aDYYdFR3nLDWYSVHgAJNkavzo
K+mQh5mbFWXfdf2oH7gVeTNkr0R6vVxqDY4MF2KCqD7wlFlu2Ejj6Cpe3AVcTopb
9A==
-----END CERTIFICATE-----
Generated at Mon Apr 27 13:54:38 2026 by rpki-client