Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131322e302f32342d3234203d3e20313430373136.roa
File:                     3133392e3135392e3131322e302f32342d3234203d3e20313430373136.roa (raw, json)
Hash identifier:          KPAOTt8wYMJ11vfUGh+BRyjaApro0Jq6GJ2iKDPBenQ=
Subject key identifier:   98:91:6A:1A:BC:1B:5D:A8:DC:3F:D7:28:D0:1C:11:15:8B:D0:22:5C
Certificate issuer:       /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2
Certificate serial:       4C25D290F7A0F6C281DEEA1DE204D2AA22D63539
Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131322e302f32342d3234203d3e20313430373136.roa
Signing time:             Sun 28 Jun 2026 13:49:05 +0000
ROA not before:           Sun 28 Jun 2026 13:44:05 +0000
ROA not after:            Sun 27 Jun 2027 13:49:05 +0000
asID:                     140716
IP address blocks:        139.159.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 11:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:25:d2:90:f7:a0:f6:c2:81:de:ea:1d:e2:04:d2:aa:22:d6:35:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2
        Validity
            Not Before: Jun 28 13:44:05 2026 GMT
            Not After : Jun 27 13:49:05 2027 GMT
        Subject: CN=98916A1ABC1B5DA8DC3FD728D01C11158BD0225C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:89:23:e8:fa:e3:ef:16:30:3d:09:da:09:15:
                    78:5a:ff:f5:8c:86:10:93:87:06:a1:7f:6b:7d:f9:
                    38:4d:6d:0d:28:cb:23:7d:45:15:ad:32:e5:cf:49:
                    fd:53:60:a6:ce:1c:ad:aa:20:a3:d5:3f:d7:7d:b4:
                    30:b9:f1:2b:1b:e4:ba:ea:7f:17:d4:57:74:14:77:
                    ee:3b:a5:04:75:5d:c3:cf:d7:07:9d:da:b9:72:71:
                    ba:ae:6f:a7:57:7f:86:35:88:24:8e:1b:79:d2:96:
                    3c:a1:94:c1:74:e0:b1:45:96:8d:6a:6a:10:db:e1:
                    31:9d:3e:59:10:ca:1e:17:eb:a4:5e:0d:58:92:39:
                    37:ba:a2:ff:74:47:2b:6a:c7:d1:b3:f5:bd:c6:30:
                    f0:2c:bd:35:4a:d8:8a:34:89:a6:b3:2e:2d:b6:9d:
                    4d:14:1a:f3:02:e5:b1:41:43:2c:eb:74:0d:0e:b3:
                    49:0f:82:d2:48:15:8d:ee:bb:9e:fe:73:4b:93:2b:
                    37:4d:fe:08:b9:0e:4b:18:58:a9:59:93:d0:01:9a:
                    3c:e3:89:a8:3e:b0:1a:6c:18:e9:88:61:3c:fc:21:
                    e5:d8:e3:d8:53:49:fe:14:75:9d:94:46:b6:2c:20:
                    2a:35:45:2e:c9:08:61:dc:b2:6d:1e:3d:a7:b5:9e:
                    72:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:91:6A:1A:BC:1B:5D:A8:DC:3F:D7:28:D0:1C:11:15:8B:D0:22:5C
            X509v3 Authority Key Identifier:
                keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131322e302f32342d3234203d3e20313430373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.159.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:5c:55:b7:83:74:86:7a:e5:a2:18:f1:b3:23:41:c4:cb:fc:
         34:62:bf:1b:33:fc:6f:7f:55:51:c9:be:3a:06:e5:74:6c:73:
         e7:a4:39:17:01:af:0b:64:6d:68:b2:21:5f:36:50:59:56:1e:
         58:de:2c:f5:ab:ed:cd:ce:94:ab:98:1b:da:7b:67:0e:bc:b9:
         6a:de:65:8e:88:18:7d:86:23:3f:66:99:76:47:20:78:ca:9c:
         d8:45:bf:3c:f9:e5:4f:39:b1:fc:70:76:2a:d6:2f:80:21:1b:
         ce:8b:6b:69:b7:39:e6:57:f2:4b:c6:1f:c7:2c:e8:b6:9d:b8:
         70:7e:92:c2:2b:74:36:8a:eb:1a:7b:ba:5a:b1:e8:07:5b:a0:
         d7:59:bd:24:a0:57:0c:24:da:2b:1f:16:ce:7e:43:eb:45:30:
         41:fd:16:0b:cc:35:59:9f:c2:80:94:13:ee:20:0b:53:be:9d:
         01:96:e8:16:93:61:34:23:fc:ff:13:2b:fe:50:ef:ea:65:08:
         06:cf:da:98:11:50:6f:c8:4c:f9:c7:23:f3:a9:ab:80:3a:c0:
         47:9c:6d:4e:3a:ad:ff:53:c4:b4:7c:aa:3b:5f:e6:75:9a:2c:
         33:74:df:cd:75:82:22:ea:25:e7:6b:c6:8a:6d:19:82:18:d4:
         ae:b5:4d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 23:09:40 2026 by rpki-client