Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3136382e302f32322d3232203d3e20313336393538.roa
File:                     3133392e3135392e3136382e302f32322d3232203d3e20313336393538.roa (raw, json)
Hash identifier:          SXVLS8TGSCkTP5SjcehyH9CGMPIkHhPfvnL1XsWf0c0=
Subject key identifier:   E4:71:FD:0C:3E:C8:1E:6C:DD:26:73:DA:F0:66:64:FB:4A:1D:C4:93
Certificate issuer:       /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial:       07B09C12270BFAB0909C53E1616A44E8E2A8723D
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3136382e302f32322d3232203d3e20313336393538.roa
Signing time:             Tue 16 Jun 2026 14:15:56 +0000
ROA not before:           Tue 16 Jun 2026 14:10:56 +0000
ROA not after:            Tue 15 Jun 2027 14:15:56 +0000
asID:                     136958
IP address blocks:        139.159.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 21:18:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b0:9c:12:27:0b:fa:b0:90:9c:53:e1:61:6a:44:e8:e2:a8:72:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
        Validity
            Not Before: Jun 16 14:10:56 2026 GMT
            Not After : Jun 15 14:15:56 2027 GMT
        Subject: CN=E471FD0C3EC81E6CDD2673DAF06664FB4A1DC493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:18:e0:90:8e:e4:da:fc:b6:27:e4:d4:62:55:
                    c3:0a:d0:6d:bf:90:17:17:d8:e0:6b:d7:66:55:42:
                    8e:10:dc:73:d5:c0:36:a7:95:f8:18:b6:39:f6:ef:
                    32:3c:07:e0:34:e4:75:59:6b:58:35:28:c0:11:aa:
                    6a:77:04:44:d0:0d:a4:fd:e1:55:7d:fa:01:b0:48:
                    8e:8f:6d:79:ea:16:dc:5e:79:6e:13:90:80:8a:57:
                    68:f8:7e:e6:81:e3:b8:2c:27:d1:a0:8f:c3:47:13:
                    ef:ae:21:e5:65:9d:d7:32:5a:de:90:78:c9:f2:79:
                    b7:5b:cf:55:d3:f8:41:da:ec:c0:87:18:1c:d7:e0:
                    f0:c9:de:5d:31:b6:af:bf:55:29:e6:95:24:3f:e5:
                    8b:78:1a:87:a9:8b:3d:09:eb:ff:6d:24:82:a4:47:
                    41:21:85:2e:3a:c5:ad:38:35:8b:25:b9:6c:8b:7b:
                    b9:cd:f7:1d:0c:58:cb:67:2c:6c:98:ae:89:fc:59:
                    ae:86:e0:fb:08:02:df:b0:c9:de:c5:7b:25:30:94:
                    87:8b:47:e9:66:2c:1c:92:3d:dd:0e:74:1b:81:b3:
                    48:cd:5f:04:f3:1a:6f:64:34:ce:6a:6f:73:e2:e7:
                    02:bd:51:78:f0:99:fa:e8:1a:a1:db:dc:64:4e:3d:
                    41:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:71:FD:0C:3E:C8:1E:6C:DD:26:73:DA:F0:66:64:FB:4A:1D:C4:93
            X509v3 Authority Key Identifier:
                keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3136382e302f32322d3232203d3e20313336393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.159.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:b1:a8:cf:04:1a:cd:c6:5d:1a:79:93:f4:87:28:aa:4d:03:
         17:e8:82:5e:99:2d:13:7e:dd:4a:22:53:01:9d:3f:cd:4b:4d:
         84:92:af:73:5c:dc:5c:63:9c:e8:42:2e:d5:f1:1c:53:a5:88:
         08:b3:ff:5b:f1:42:e6:1f:bc:00:bb:2e:1d:3a:a0:ae:89:d6:
         43:3b:78:d5:0c:5d:cb:2d:8a:51:db:2a:64:88:4f:ca:f9:76:
         82:f4:94:49:a0:87:5b:41:48:ca:fe:d8:15:53:a1:ae:d5:fe:
         5f:ae:95:dd:57:c4:6f:34:07:d6:1c:0a:9e:85:16:72:1b:05:
         88:fb:85:2d:70:29:fb:d0:6b:50:bd:cc:67:58:b1:4f:22:39:
         ef:42:cd:9f:77:de:ba:90:1d:5c:5b:de:c1:a6:0c:4a:9e:3a:
         b4:f6:7c:01:97:40:3f:ec:f9:3f:8c:a9:74:f3:1f:69:b9:b9:
         40:6e:ac:52:c8:a9:dd:33:8c:ed:ce:85:6c:d7:b3:d6:85:07:
         b0:ec:e2:52:0a:6e:ff:ba:8f:be:9d:7d:ea:3b:5a:ff:a4:7a:
         ba:99:b2:71:1b:d5:64:20:31:07:79:3f:33:3d:75:8a:60:0d:
         9a:1e:cd:2f:26:ff:f9:70:bc:5a:7f:04:13:a5:84:c3:17:ad:
         d2:b5:13:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:37:42 2026 by rpki-client