Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e302e302f31392d3139203d3e203535393930.roa
File:                     3133392e392e302e302f31392d3139203d3e203535393930.roa (raw, json)
Hash identifier:          6RSPFrqjFEP3dJdMoAHzGaQ+YGTRQjfoBitGzkdTfug=
Subject key identifier:   B5:85:48:9B:42:D0:31:CC:A0:F3:4A:79:1F:55:5A:B4:DB:B9:B3:9E
Certificate issuer:       /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial:       614113C58C4FD7D981AA9B0DEC4B45FCEDD9EDC3
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e302e302f31392d3139203d3e203535393930.roa
Signing time:             Tue 02 Jun 2026 17:40:25 +0000
ROA not before:           Tue 02 Jun 2026 17:35:25 +0000
ROA not after:            Tue 01 Jun 2027 17:40:25 +0000
asID:                     55990
IP address blocks:        139.9.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:41:13:c5:8c:4f:d7:d9:81:aa:9b:0d:ec:4b:45:fc:ed:d9:ed:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
        Validity
            Not Before: Jun  2 17:35:25 2026 GMT
            Not After : Jun  1 17:40:25 2027 GMT
        Subject: CN=B585489B42D031CCA0F34A791F555AB4DBB9B39E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:00:19:8d:0f:4e:9e:31:3a:80:2c:39:ac:6c:
                    4b:9e:40:52:37:ae:71:e5:fa:d8:11:f6:2a:e4:7d:
                    73:d9:8d:0b:91:13:2f:e8:4f:33:3d:67:b3:ea:a4:
                    ff:f4:75:19:80:f4:b5:13:6b:53:ff:52:fe:1c:aa:
                    fd:39:74:89:e5:e0:5f:2f:2f:0f:21:90:71:45:01:
                    31:2f:e6:fd:35:f5:f4:60:df:37:af:9a:70:96:57:
                    71:f5:70:67:d7:69:d0:18:be:10:ae:e4:8c:b7:9c:
                    42:b7:57:23:d2:2a:83:01:da:d6:15:be:e4:2a:ba:
                    f4:20:30:ca:f5:7f:cd:a6:1f:31:a6:f2:30:96:85:
                    54:9f:d0:66:48:59:d1:9c:6b:b4:5f:4c:57:21:2a:
                    67:59:c2:55:d5:af:20:fb:90:6e:d7:3e:95:d7:b8:
                    46:0c:db:52:1e:e3:92:27:c9:46:c7:e1:25:19:67:
                    75:75:9b:a1:eb:06:ca:a0:49:8c:48:be:48:27:b3:
                    eb:1a:a7:0b:ac:0b:1a:ae:1e:de:88:37:68:91:1f:
                    ed:d2:e6:a8:3a:0e:52:8f:6e:00:76:9e:60:a5:fb:
                    7e:4d:9e:4b:ac:f7:4f:31:89:d6:89:09:65:34:4f:
                    1b:10:7a:e2:08:d7:16:f6:af:dd:06:84:1e:cb:0c:
                    8c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:85:48:9B:42:D0:31:CC:A0:F3:4A:79:1F:55:5A:B4:DB:B9:B3:9E
            X509v3 Authority Key Identifier:
                keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e302e302f31392d3139203d3e203535393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.9.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         71:c2:09:c6:a9:63:83:6e:34:87:d4:26:b1:76:7d:19:d1:dc:
         84:35:14:e5:50:c0:ce:09:e0:b7:a7:6e:9c:bb:c4:4a:da:3d:
         eb:e1:43:27:6f:8b:45:17:e3:c1:4e:46:d1:ad:2c:f0:d8:ed:
         85:9f:e2:5e:39:7f:d7:b0:20:a1:45:73:45:d4:0c:4b:61:50:
         b7:79:1c:08:c8:2c:c7:af:bd:46:3e:dd:85:5e:50:4b:b9:51:
         e8:ff:fd:2f:01:75:a5:83:ae:f6:90:3d:0a:30:82:a9:7b:51:
         6a:c4:8a:fe:30:ba:0f:5b:3c:c6:b0:51:bd:49:9b:7e:c5:3f:
         4b:fd:3e:e3:bc:f2:74:bf:d8:24:7b:67:c8:19:d2:34:47:d8:
         ef:d2:50:9b:7a:fa:16:ff:c4:68:7c:d9:c9:80:35:03:4a:a1:
         1b:a2:eb:0f:4b:dd:7c:7c:7e:85:03:97:1b:34:1d:9a:45:ac:
         42:01:99:0c:7e:6c:57:91:67:4f:34:30:43:1f:ed:cb:2e:5d:
         10:1c:46:4b:84:1e:35:bc:34:cb:83:ed:d2:db:55:3a:9b:8e:
         55:e4:81:1b:24:3f:b3:13:09:e9:36:fc:13:f1:b1:ff:f3:ae:
         ab:27:9f:ff:d7:f2:d8:94:56:82:70:75:71:53:9c:06:aa:6e:
         a8:00:ba:17
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUYUETxYxP19mBqpsN7EtF/O3Z7cMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5
NjFENzkzRDAeFw0yNjA2MDIxNzM1MjVaFw0yNzA2MDExNzQwMjVaMDMxMTAvBgNV
BAMTKEI1ODU0ODlCNDJEMDMxQ0NBMEYzNEE3OTFGNTU1QUI0REJCOUIzOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqABmND06eMTqALDmsbEueQFI3
rnHl+tgR9irkfXPZjQuREy/oTzM9Z7PqpP/0dRmA9LUTa1P/Uv4cqv05dInl4F8v
Lw8hkHFFATEv5v019fRg3zevmnCWV3H1cGfXadAYvhCu5Iy3nEK3VyPSKoMB2tYV
vuQquvQgMMr1f82mHzGm8jCWhVSf0GZIWdGca7RfTFchKmdZwlXVryD7kG7XPpXX
uEYM21Ie45InyUbH4SUZZ3V1m6HrBsqgSYxIvkgns+sapwusCxquHt6IN2iRH+3S
5qg6DlKPbgB2nmCl+35Nnkus908xidaJCWU0TxsQeuII1xb2r90GhB7LDIwzAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUtYVIm0LQMcyg80p5H1VatNu5s54wHwYDVR0j
BBgwFoAUrhQxzco8UkVrAUbEnV7uMpYdeT0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTM4OTI2NTIyMzY4MS8xL0FFMTQzMUNEQ0EzQzUyNDU2QjAxNDZDNDlENUVF
RTMyOTYxRDc5M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5NjFENzkzRC5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1MjIzNjgxLzEvMzEzMzM5MmUzOTJl
MzAyZTMwMmYzMTM5MmQzMTM5MjAzZDNlMjAzNTM1MzkzOTMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF
iwkAMA0GCSqGSIb3DQEBCwUAA4IBAQBxwgnGqWODbjSH1Caxdn0Z0dyENRTlUMDO
CeC3p26cu8RK2j3r4UMnb4tFF+PBTkbRrSzw2O2Fn+JeOX/XsCChRXNF1AxLYVC3
eRwIyCzHr71GPt2FXlBLuVHo//0vAXWlg672kD0KMIKpe1FqxIr+MLoPWzzGsFG9
SZt+xT9L/T7jvPJ0v9gke2fIGdI0R9jv0lCbevoW/8RofNnJgDUDSqEbousPS918
fH6FA5cbNB2aRaxCAZkMfmxXkWdPNDBDH+3LLl0QHEZLhB41vDTLg+3S21U6m45V
5IEbJD+zEwnpNvwT8bH/866rJ5//1/LYlFaCcHVxU5wGqm6oALoX
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:59 2026 by rpki-client