Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3139322e302f32302d3230203d3e203535393930.roa
File:                     3133392e3135392e3139322e302f32302d3230203d3e203535393930.roa (raw, json)
Hash identifier:          t5MFleiIkgBC17ezI8KoXpAHBsSspfcPDQPcja9Wi1U=
Subject key identifier:   EC:A6:ED:75:50:F5:04:F6:7A:5F:7E:9B:9B:17:D8:FD:40:EE:4F:51
Certificate issuer:       /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial:       7549090930F62466DF814225D73D9C8F27191488
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3139322e302f32302d3230203d3e203535393930.roa
Signing time:             Tue 02 Jun 2026 17:58:03 +0000
ROA not before:           Tue 02 Jun 2026 17:53:03 +0000
ROA not after:            Tue 01 Jun 2027 17:58:03 +0000
asID:                     55990
IP address blocks:        139.159.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:49:09:09:30:f6:24:66:df:81:42:25:d7:3d:9c:8f:27:19:14:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
        Validity
            Not Before: Jun  2 17:53:03 2026 GMT
            Not After : Jun  1 17:58:03 2027 GMT
        Subject: CN=ECA6ED7550F504F67A5F7E9B9B17D8FD40EE4F51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5a:fb:bc:a3:d0:2c:d9:ac:8e:c4:23:a1:e1:
                    2a:ac:26:a9:db:6d:71:13:c9:ed:b5:b1:7b:a8:88:
                    fe:b7:e3:2d:21:32:0f:ca:ad:d8:19:8a:0d:b3:f9:
                    a9:2b:1f:f3:6f:53:73:31:95:7e:d1:ef:b7:55:9c:
                    eb:2f:bd:c6:b9:a8:7e:6e:7c:cd:97:be:d6:10:85:
                    28:4e:50:cc:db:e3:c1:ab:f8:a8:06:53:18:e9:25:
                    fd:bd:13:2d:60:5a:5f:aa:39:f7:2e:75:85:7d:e5:
                    21:b9:fc:ec:aa:fa:7a:e1:ec:48:72:aa:53:5f:f7:
                    37:42:b5:48:a6:09:6b:61:6c:01:aa:f0:91:29:e9:
                    6a:dd:99:52:6b:32:6d:02:ed:48:67:65:b6:50:53:
                    10:9e:95:0e:3e:4b:d9:e2:ae:0d:05:ea:41:83:36:
                    81:2f:b9:86:26:32:93:83:c7:a9:2a:ca:32:b9:34:
                    ec:9a:75:2e:7e:45:f2:29:d9:0a:f9:54:fa:c0:5b:
                    e9:b8:5a:83:6d:ef:fd:5b:8d:2b:51:3f:94:ca:5a:
                    8d:2b:7b:a8:4b:76:7c:45:f6:f1:9d:3d:a9:4b:5c:
                    6d:51:88:97:90:bf:ed:6c:c9:21:ca:fd:e6:ba:4f:
                    46:a7:4f:6f:5c:5b:5d:03:0d:47:00:0b:4a:77:a5:
                    25:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A6:ED:75:50:F5:04:F6:7A:5F:7E:9B:9B:17:D8:FD:40:EE:4F:51
            X509v3 Authority Key Identifier:
                keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3139322e302f32302d3230203d3e203535393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.159.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:1a:c9:f7:43:ea:3e:9a:59:b4:6b:d8:55:68:be:45:d7:3c:
         fe:cc:19:41:7c:a4:df:13:14:bd:44:f5:7e:b1:b6:f7:39:63:
         c6:41:b6:ee:03:78:64:40:63:c2:bf:36:dd:4a:d3:0f:99:c0:
         ef:63:fb:6a:c6:40:20:1a:22:ad:c6:0a:ff:5f:76:a0:39:26:
         87:7c:fc:ea:39:c7:a1:e4:a1:c4:fa:83:f8:be:b7:49:f1:fe:
         ee:d8:f0:8e:ca:9f:98:c9:55:5a:83:bf:3b:70:44:de:9f:28:
         5f:bc:0e:2f:61:b7:cd:6a:16:d5:92:f6:34:6a:89:e0:0e:f7:
         8a:db:aa:f5:b7:a5:c6:58:9b:10:ac:08:81:21:20:51:ef:18:
         ab:50:85:c3:5f:98:3e:dc:2c:ca:f1:f3:41:67:b7:db:aa:39:
         71:24:11:26:e0:64:8b:87:06:35:a7:59:79:4f:f5:b8:4b:b8:
         a0:ce:c2:09:9d:f6:4c:1f:01:28:d6:3e:4e:f1:c4:a8:84:3a:
         ae:c4:4d:d0:4a:fc:1d:6b:2d:60:84:b2:fe:c1:4f:27:6c:2b:
         3d:44:f8:08:21:61:fa:60:b1:d2:51:1f:86:c1:d0:ff:fe:1f:
         b0:81:a3:7e:f4:3a:5b:2b:95:cb:55:b9:c0:d9:3c:9b:f3:bf:
         6c:e2:c8:39
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUdUkJCTD2JGbfgUIl1z2cjycZFIgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5
NjFENzkzRDAeFw0yNjA2MDIxNzUzMDNaFw0yNzA2MDExNzU4MDNaMDMxMTAvBgNV
BAMTKEVDQTZFRDc1NTBGNTA0RjY3QTVGN0U5QjlCMTdEOEZENDBFRTRGNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTWvu8o9As2ayOxCOh4SqsJqnb
bXETye21sXuoiP634y0hMg/KrdgZig2z+akrH/NvU3MxlX7R77dVnOsvvca5qH5u
fM2XvtYQhShOUMzb48Gr+KgGUxjpJf29Ey1gWl+qOfcudYV95SG5/Oyq+nrh7Ehy
qlNf9zdCtUimCWthbAGq8JEp6WrdmVJrMm0C7UhnZbZQUxCelQ4+S9nirg0F6kGD
NoEvuYYmMpODx6kqyjK5NOyadS5+RfIp2Qr5VPrAW+m4WoNt7/1bjStRP5TKWo0r
e6hLdnxF9vGdPalLXG1RiJeQv+1sySHK/ea6T0anT29cW10DDUcAC0p3pSVJAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU7KbtdVD1BPZ6X36bmxfY/UDuT1EwHwYDVR0j
BBgwFoAUrhQxzco8UkVrAUbEnV7uMpYdeT0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTM4OTI2NTIyMzY4MS8xL0FFMTQzMUNEQ0EzQzUyNDU2QjAxNDZDNDlENUVF
RTMyOTYxRDc5M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5NjFENzkzRC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMS8zMTMzMzkyZTMx
MzUzOTJlMzEzOTMyMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzUzNTM5MzkzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBIufwDANBgkqhkiG9w0BAQsFAAOCAQEAFBrJ90PqPppZtGvYVWi+
Rdc8/swZQXyk3xMUvUT1frG29zljxkG27gN4ZEBjwr823UrTD5nA72P7asZAIBoi
rcYK/192oDkmh3z86jnHoeShxPqD+L63SfH+7tjwjsqfmMlVWoO/O3BE3p8oX7wO
L2G3zWoW1ZL2NGqJ4A73ituq9belxlibEKwIgSEgUe8Yq1CFw1+YPtwsyvHzQWe3
26o5cSQRJuBki4cGNadZeU/1uEu4oM7CCZ32TB8BKNY+TvHEqIQ6rsRN0Er8HWst
YISy/sFPJ2wrPUT4CCFh+mCx0lEfhsHQ//4fsIGjfvQ6WyuVy1W5wNk8m/O/bOLI
OQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:49 2026 by rpki-client