Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3134342e302f32302d3230203d3e20313334353432.roa
File:                     3133392e392e3134342e302f32302d3230203d3e20313334353432.roa (raw, json)
Hash identifier:          ki7AXUtHw2EABkdpN8JNGflO2ZMpEKVXdt4QK7LibKg=
Subject key identifier:   0D:8F:2D:9E:1E:E9:85:E0:C1:3D:60:65:F0:5D:40:65:CD:D0:92:CA
Certificate issuer:       /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial:       6767BBA314293CDCF03BD9F5BFA691DECA588817
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3134342e302f32302d3230203d3e20313334353432.roa
Signing time:             Thu 11 Jun 2026 14:52:01 +0000
ROA not before:           Thu 11 Jun 2026 14:47:01 +0000
ROA not after:            Thu 10 Jun 2027 14:52:01 +0000
asID:                     134542
IP address blocks:        139.9.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:67:bb:a3:14:29:3c:dc:f0:3b:d9:f5:bf:a6:91:de:ca:58:88:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
        Validity
            Not Before: Jun 11 14:47:01 2026 GMT
            Not After : Jun 10 14:52:01 2027 GMT
        Subject: CN=0D8F2D9E1EE985E0C13D6065F05D4065CDD092CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5a:b9:78:80:65:12:30:d1:ea:4a:61:38:84:
                    bb:29:e3:a8:20:fa:9d:93:c0:f6:f6:8f:54:31:02:
                    51:15:7e:5a:4e:5b:c5:7f:2c:20:1d:ed:ff:f0:c6:
                    a0:6a:95:0a:71:57:55:75:56:9d:08:70:2e:e9:fb:
                    1a:93:f7:40:6d:42:00:61:48:01:d6:bb:01:69:53:
                    89:ac:f6:16:bf:75:87:e6:87:fb:09:fa:b7:56:d3:
                    83:fc:a6:25:0a:d4:9d:dd:80:9a:cd:42:fa:51:4e:
                    56:76:89:e9:e7:c9:94:f4:b4:dc:0f:00:77:c9:92:
                    4b:09:30:29:e2:4e:c8:0f:f8:10:66:1e:60:f4:a1:
                    b5:df:a7:71:d9:27:71:11:f2:7f:f0:d4:57:35:34:
                    a2:5b:68:c1:87:72:6c:e3:74:d4:bc:d4:10:14:2b:
                    9b:3f:ab:34:14:be:1b:73:7e:8e:c7:f6:ef:66:97:
                    15:a6:81:33:55:39:3e:fe:8e:ed:cc:81:19:95:54:
                    c3:40:63:d6:51:2a:62:9d:41:44:c2:4a:46:47:d8:
                    4f:0e:d9:0d:e8:ec:31:fb:87:76:d5:81:00:b0:a7:
                    1f:29:75:c6:ea:00:42:4f:88:8f:ca:2a:ee:29:dd:
                    f0:dc:05:07:65:51:e1:1b:be:39:cf:1a:0d:da:b9:
                    15:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8F:2D:9E:1E:E9:85:E0:C1:3D:60:65:F0:5D:40:65:CD:D0:92:CA
            X509v3 Authority Key Identifier:
                keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3134342e302f32302d3230203d3e20313334353432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.9.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:d7:ef:b3:5f:fc:2f:1a:75:7b:6b:21:2b:74:df:cf:c4:8e:
         64:7f:89:c3:8c:99:a6:80:4b:ba:bd:21:0f:8c:5d:a2:d6:cd:
         53:70:07:e3:35:7b:a5:90:8c:88:96:bf:c1:7d:28:79:f6:66:
         6e:11:5b:28:1c:59:0c:c2:55:f5:7c:35:08:a1:4e:5c:cf:eb:
         41:f5:4b:a1:14:75:54:6a:93:e7:7e:f8:0e:22:2f:53:f0:56:
         99:56:e6:ee:f1:7b:89:33:b0:89:63:85:c1:01:c1:64:19:b1:
         a5:bc:35:e3:00:4a:55:1a:d2:df:32:fb:2c:0e:68:4a:b2:59:
         81:41:97:d3:b7:ec:c9:c5:52:ac:03:75:9e:a3:8e:7e:3f:b6:
         74:cb:8d:9e:a9:7e:2c:22:d4:d7:44:61:51:2f:29:b9:c0:fe:
         01:24:93:5a:73:70:34:c0:2c:56:91:fa:ad:88:34:fd:3b:b2:
         d0:d1:6a:d0:9f:3c:47:dc:00:dd:6f:1c:33:9a:95:24:99:6f:
         80:41:37:d5:55:9f:67:9a:0d:20:ca:c5:82:61:a3:07:e0:93:
         06:0b:d4:21:39:e7:36:16:9b:09:1e:63:0a:4d:85:ff:ca:19:
         c4:08:96:94:fa:60:e7:88:62:be:ce:0a:dd:86:58:ec:c0:49:
         e4:ea:70:f2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:56 2026 by rpki-client