Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3133362e302f32312d3231203d3e203535393930.roa
File:                     3133392e3135392e3133362e302f32312d3231203d3e203535393930.roa (raw, json)
Hash identifier:          XgzhZ0xTgSML+nf4xufZg+FlhNJOO9Jv3schrgvN8Cg=
Subject key identifier:   A7:78:42:2A:EA:E7:77:F9:0A:5D:0A:9C:CE:13:30:B7:69:29:7D:F7
Certificate issuer:       /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial:       597A3F1126677157888DB697E2AE3AF2293057ED
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3133362e302f32312d3231203d3e203535393930.roa
Signing time:             Tue 02 Jun 2026 17:58:03 +0000
ROA not before:           Tue 02 Jun 2026 17:53:03 +0000
ROA not after:            Tue 01 Jun 2027 17:58:03 +0000
asID:                     55990
IP address blocks:        139.159.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:7a:3f:11:26:67:71:57:88:8d:b6:97:e2:ae:3a:f2:29:30:57:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
        Validity
            Not Before: Jun  2 17:53:03 2026 GMT
            Not After : Jun  1 17:58:03 2027 GMT
        Subject: CN=A778422AEAE777F90A5D0A9CCE1330B769297DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:34:05:64:7e:3e:c4:21:4d:e5:f4:1c:c9:0f:
                    82:02:e6:30:51:25:34:68:25:9a:59:d0:7d:3a:7b:
                    3e:27:85:d8:5d:1f:c4:16:7a:52:9c:83:ca:54:30:
                    25:8d:92:66:ea:d9:94:ff:0c:5f:04:77:cc:c7:17:
                    92:2f:60:13:68:71:73:58:bb:61:69:7b:e6:08:43:
                    61:88:c5:cb:e8:ff:25:4d:94:d8:2e:60:5a:69:44:
                    0b:fe:46:53:4a:c1:c5:42:44:45:e8:2c:ea:ad:7d:
                    1b:3a:90:3b:12:c9:16:ce:ca:05:0e:a2:b7:a3:7a:
                    60:ae:d7:a2:8c:a6:9e:5d:bc:41:7d:5e:54:d3:30:
                    16:24:83:5d:21:7d:42:35:08:1d:1a:28:3a:05:0a:
                    bb:ee:d8:0a:15:a5:ba:5e:08:97:9a:28:5a:91:f4:
                    57:cd:ba:ed:e3:eb:78:0b:53:13:52:f2:46:5d:3e:
                    e8:1b:e5:35:06:04:8f:44:66:a5:c3:30:94:51:c2:
                    a8:05:36:0d:ec:54:95:9e:90:83:75:78:90:07:ab:
                    c2:56:2f:27:39:fb:1d:58:30:dc:12:1a:9b:de:8d:
                    64:69:b2:b1:76:9c:a6:aa:a3:7e:26:92:4e:ba:2c:
                    e4:fe:3c:6c:0b:97:8e:27:fe:d7:c7:a5:9b:25:9f:
                    93:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:78:42:2A:EA:E7:77:F9:0A:5D:0A:9C:CE:13:30:B7:69:29:7D:F7
            X509v3 Authority Key Identifier:
                keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3133362e302f32312d3231203d3e203535393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.159.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         98:76:b7:d4:02:81:ef:08:58:de:8b:c6:4e:05:ba:48:27:da:
         8e:84:20:ab:8a:9d:ae:97:38:c8:09:42:1a:fa:fc:f5:a2:e3:
         a1:7f:40:ce:25:42:2a:86:23:be:8c:9d:c7:ef:8d:cc:66:22:
         1f:3a:16:1c:d3:a3:ae:58:eb:3a:2a:65:d8:2a:60:dd:aa:f4:
         c7:cc:f9:7c:9e:0e:45:c6:5a:78:9a:cf:fa:3f:62:18:c0:24:
         74:da:f3:59:55:5c:af:fc:e6:5e:ef:95:af:9a:aa:4a:93:61:
         d7:9c:53:ac:38:9c:28:82:04:7e:cb:19:63:f4:fe:00:af:4d:
         e3:1f:99:c9:52:e6:9b:60:9a:67:2b:ae:3b:26:6d:10:ad:9d:
         79:e9:3a:97:2b:03:07:ac:55:f0:57:75:7d:e7:2a:4e:ad:e2:
         fa:07:b9:78:0f:99:93:78:bb:39:02:a3:ce:bc:d7:b6:c8:aa:
         08:8d:df:59:c7:f5:c8:dc:48:a4:21:d3:6d:94:38:4f:23:53:
         13:e1:d7:55:c4:f7:a3:49:53:02:a8:94:20:7f:11:45:ec:8c:
         76:d3:47:88:c6:ce:46:d5:e2:67:fb:78:9c:1c:b1:66:91:94:
         56:61:93:2a:a2:68:af:10:c9:11:7d:c7:40:71:fa:a2:1a:0d:
         ce:44:1b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:47 2026 by rpki-client