Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3134342e302f32302d3230203d3e203535393930.roa
File:                     3133392e3135392e3134342e302f32302d3230203d3e203535393930.roa (raw, json)
Hash identifier:          ZW7u1prkDs1ot45dOccNiB+WG2X62R5T7+dGgT80Hes=
Subject key identifier:   55:BA:5D:07:56:8A:4E:78:3F:71:68:DD:AD:58:C8:0C:A9:07:BE:31
Certificate issuer:       /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial:       75E0558F6DD386CF29347849C9FA74500535DD36
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3134342e302f32302d3230203d3e203535393930.roa
Signing time:             Tue 02 Jun 2026 17:58:03 +0000
ROA not before:           Tue 02 Jun 2026 17:53:03 +0000
ROA not after:            Tue 01 Jun 2027 17:58:03 +0000
asID:                     55990
IP address blocks:        139.159.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e0:55:8f:6d:d3:86:cf:29:34:78:49:c9:fa:74:50:05:35:dd:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
        Validity
            Not Before: Jun  2 17:53:03 2026 GMT
            Not After : Jun  1 17:58:03 2027 GMT
        Subject: CN=55BA5D07568A4E783F7168DDAD58C80CA907BE31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:52:6a:3f:51:e8:e3:96:5f:7e:15:cc:2b:a8:
                    af:4a:95:36:9d:ca:90:2f:4e:4b:9f:b8:0e:c6:68:
                    f4:41:86:38:22:fb:73:1a:54:d5:67:e2:21:0f:e0:
                    fd:af:b7:2c:70:25:cf:5b:67:a1:c0:0c:63:5f:63:
                    dd:0a:bb:fc:6c:38:b0:ac:06:9b:40:cc:e4:bf:c1:
                    07:bc:e6:4a:5d:34:a1:00:d9:a5:60:f5:70:c1:56:
                    52:12:3f:97:2e:1d:e4:ba:2d:3e:48:75:58:f2:09:
                    e2:ec:49:3d:63:75:00:f4:3c:4e:51:0e:00:0e:94:
                    7e:00:ca:93:c2:6a:69:b1:f7:02:fc:54:ba:d6:9e:
                    58:72:e6:dc:1b:39:59:05:1f:ac:64:a6:d4:fd:83:
                    6a:78:93:a1:50:70:91:d9:c8:1f:e5:3d:86:71:1a:
                    33:0d:91:7b:d5:08:f0:81:8c:0b:e8:4f:53:ee:05:
                    8b:69:9f:f2:e6:1e:5a:0d:a0:a4:d3:83:99:d7:7b:
                    0d:f8:33:03:d3:4d:3b:a3:0d:ac:b9:c9:a7:c7:44:
                    2e:5a:c0:0e:1c:2e:c7:f5:94:7a:25:7c:aa:11:88:
                    80:49:ae:3d:96:5f:61:40:3d:67:e8:f6:aa:66:ac:
                    d6:cd:33:90:01:97:3e:f1:6c:2f:cc:77:5b:91:3e:
                    a1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BA:5D:07:56:8A:4E:78:3F:71:68:DD:AD:58:C8:0C:A9:07:BE:31
            X509v3 Authority Key Identifier:
                keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3134342e302f32302d3230203d3e203535393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.159.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3b:e3:68:6f:34:2d:ea:0c:9b:28:ff:d3:ba:b1:07:64:73:b1:
         62:a3:a8:15:07:27:10:ac:83:78:2c:51:17:5b:f2:57:3c:09:
         dc:b3:f3:69:35:44:50:23:94:3a:6c:88:d7:a6:cb:1b:43:aa:
         9c:ee:21:f3:c0:08:0f:63:05:f0:88:78:ad:33:d2:bb:37:d4:
         d4:2f:bc:f1:49:51:c8:74:b0:49:2d:a5:ef:9b:e5:55:f8:cf:
         ef:85:0a:32:77:d1:55:c9:3a:3f:ea:0f:54:0c:41:a6:16:43:
         ab:7f:81:54:d0:a2:c2:fd:21:01:fb:68:61:b3:46:e9:fb:fa:
         f6:60:56:09:d7:7d:b9:d7:f8:11:8f:3d:9d:73:57:f6:cd:0c:
         0c:e5:b2:7c:8d:a9:9c:63:75:52:45:25:5d:b4:94:30:ae:b2:
         3b:df:b8:e0:be:8b:e0:86:35:86:f1:c7:c9:0f:76:e7:b0:e0:
         4a:5a:d0:03:94:7e:7f:f4:85:75:a9:07:54:65:51:dd:94:6c:
         76:d2:ca:ba:93:d3:9e:16:1b:00:a6:9d:e7:2e:f6:03:19:21:
         58:51:82:5c:6c:29:60:75:13:77:a9:12:f6:af:29:82:5c:ef:
         40:ac:ba:86:e7:ed:5f:90:6b:e4:9a:b6:0f:55:4b:c8:b5:31:
         ca:d3:2a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:48 2026 by rpki-client