Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3137362e302f32302d3230203d3e203535393930.roa
File:                     3133392e3135392e3137362e302f32302d3230203d3e203535393930.roa (raw, json)
Hash identifier:          MQpjjFGH0E42gdcatZK9d2A9/VlpCQ+7G38il/EY4BI=
Subject key identifier:   90:CB:C2:78:1A:AB:96:99:80:69:28:6F:08:7B:AA:32:FE:D8:68:8C
Certificate issuer:       /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial:       1B7B83461D80819B7A3C7BF5A36D691BBA9ADD61
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3137362e302f32302d3230203d3e203535393930.roa
Signing time:             Tue 02 Jun 2026 17:58:03 +0000
ROA not before:           Tue 02 Jun 2026 17:53:03 +0000
ROA not after:            Tue 01 Jun 2027 17:58:03 +0000
asID:                     55990
IP address blocks:        139.159.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:7b:83:46:1d:80:81:9b:7a:3c:7b:f5:a3:6d:69:1b:ba:9a:dd:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
        Validity
            Not Before: Jun  2 17:53:03 2026 GMT
            Not After : Jun  1 17:58:03 2027 GMT
        Subject: CN=90CBC2781AAB96998069286F087BAA32FED8688C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ef:e5:99:2e:22:fc:81:a3:e7:bf:82:50:1d:
                    07:c3:ef:b0:59:e8:85:a6:14:85:71:b5:86:37:a5:
                    c4:fc:ed:11:4b:c7:a1:32:06:93:f4:2c:ab:50:58:
                    9f:ea:8d:09:3c:24:5b:7c:84:d7:60:90:ce:7e:89:
                    bd:30:58:11:80:9c:ff:17:3c:a2:1e:f9:75:b9:00:
                    73:e9:19:65:bf:e2:be:ab:9d:ff:cb:af:b5:a2:77:
                    49:24:c9:a7:9c:a2:0a:18:02:01:8b:00:0d:25:e7:
                    d4:2f:24:8f:a1:e2:96:a3:ae:8d:33:31:e7:ff:38:
                    d4:ac:af:08:5a:da:4f:c4:a8:9e:1b:40:5d:22:67:
                    52:2c:c1:8e:75:23:9c:18:2f:9e:7f:be:72:07:b1:
                    25:50:03:39:eb:aa:07:17:04:85:26:9f:9c:f5:5f:
                    30:cc:2a:30:6d:cf:23:42:4e:31:15:3a:3d:72:8f:
                    d5:80:9f:5d:ad:54:04:e2:b1:33:ab:9c:ce:54:65:
                    7b:98:2c:04:03:a0:2d:e1:8d:1a:2c:a9:13:48:5a:
                    4c:0f:9a:26:1e:8f:e3:52:f9:cf:b4:7b:05:fa:29:
                    a3:2d:0f:b1:7c:fa:ae:e6:2b:7e:db:90:2b:6c:7d:
                    2d:8d:f2:8c:e3:75:c8:4b:c7:94:a2:8c:48:67:c2:
                    63:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CB:C2:78:1A:AB:96:99:80:69:28:6F:08:7B:AA:32:FE:D8:68:8C
            X509v3 Authority Key Identifier:
                keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3137362e302f32302d3230203d3e203535393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.159.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3a:99:bb:d4:7f:de:6e:48:04:49:34:27:c5:a7:7d:a5:7c:08:
         9a:79:75:c7:94:8c:a9:52:bc:28:2a:b3:46:98:1e:bf:e6:39:
         b6:ad:83:a0:ce:35:20:11:2e:e4:f1:ee:fd:0d:2c:45:ea:61:
         66:b1:56:3f:19:cd:6c:40:48:25:44:67:27:9e:93:fa:1e:d7:
         da:48:58:d8:69:f2:ce:98:5c:33:6e:62:3d:bb:23:3a:cd:f1:
         ce:c2:80:74:3e:08:13:c1:07:f0:2f:24:fe:63:62:a4:2f:06:
         b5:ad:3d:1a:a1:c9:2f:00:a9:92:72:5d:bf:a2:59:ff:21:3d:
         26:b1:b6:76:13:ca:f0:cf:be:7e:88:3c:77:27:f7:aa:a2:e2:
         ad:ad:61:3c:c5:a7:62:17:08:70:6d:1a:a5:e9:47:4c:ea:41:
         2f:bb:ec:b9:4c:73:7d:37:7b:8b:1e:04:c5:08:f3:0c:30:1a:
         78:b5:ec:23:39:5c:37:94:52:ed:e7:f9:25:c7:58:7e:0a:31:
         6f:37:05:a0:23:2b:bb:fe:6d:f7:c9:d0:46:c5:66:05:93:16:
         43:f7:31:6f:f9:ff:85:28:7a:ad:37:95:23:47:19:da:01:50:
         10:f2:fb:78:58:2f:df:e6:1e:2e:14:df:7f:2b:e9:4c:ee:20:
         a6:f1:53:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:48 2026 by rpki-client