Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3134342e302f32302d3230203d3e203538353139.roa
File:                     3133392e392e3134342e302f32302d3230203d3e203538353139.roa (raw, json)
Hash identifier:          9qkZWiyGWOwRvdIbQEiErROr/sjfRttzNKLYHuZyGMY=
Subject key identifier:   C1:F1:4D:AD:24:60:5F:86:1A:83:31:78:47:D7:9F:88:CC:BA:36:88
Certificate issuer:       /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial:       41C7C47A5918A71DAAF310D622026AF23BC77E3D
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3134342e302f32302d3230203d3e203538353139.roa
Signing time:             Thu 11 Jun 2026 14:52:01 +0000
ROA not before:           Thu 11 Jun 2026 14:47:01 +0000
ROA not after:            Thu 10 Jun 2027 14:52:01 +0000
asID:                     58519
IP address blocks:        139.9.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 18:53:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c7:c4:7a:59:18:a7:1d:aa:f3:10:d6:22:02:6a:f2:3b:c7:7e:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
        Validity
            Not Before: Jun 11 14:47:01 2026 GMT
            Not After : Jun 10 14:52:01 2027 GMT
        Subject: CN=C1F14DAD24605F861A83317847D79F88CCBA3688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:dc:f6:32:e4:25:eb:cf:da:17:0e:bb:b8:f2:
                    a4:b0:35:ea:4f:95:50:c5:4f:ae:3b:88:0e:68:ff:
                    15:f4:6e:54:67:18:93:b0:5d:af:ce:24:67:a3:db:
                    ce:b4:45:09:65:fd:9f:b7:60:e0:d1:f6:39:5b:da:
                    3e:e1:2e:7f:f7:0a:07:ed:23:05:d0:84:73:c8:21:
                    29:9f:29:de:4d:49:9f:ac:1c:58:9b:91:31:c6:59:
                    25:e7:fb:fa:7b:e9:20:91:a1:9c:01:34:bf:51:79:
                    58:b0:e5:99:b4:c3:bf:0e:96:18:f6:4b:e1:08:45:
                    fb:5b:f8:bb:4d:d7:66:42:f0:89:c0:09:da:b7:42:
                    68:52:df:b5:ff:4a:5b:94:ca:de:4a:b9:72:9e:a8:
                    56:77:ae:48:f8:48:74:3c:0e:87:2e:99:e4:85:8a:
                    5d:55:4e:91:8d:4c:99:9c:d6:b5:28:a0:68:1a:1f:
                    6f:f5:85:23:0d:16:9a:0b:bb:24:a3:2f:1c:36:1c:
                    7d:b7:5e:30:42:15:57:79:b2:51:3a:55:23:03:3f:
                    dc:cd:5e:06:01:98:ce:d4:0f:79:60:e3:f1:70:00:
                    2a:cd:5f:eb:95:23:c2:3a:26:5e:b4:09:95:a0:22:
                    33:58:aa:6e:e9:17:0b:79:c9:1c:23:9e:d8:76:62:
                    a4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F1:4D:AD:24:60:5F:86:1A:83:31:78:47:D7:9F:88:CC:BA:36:88
            X509v3 Authority Key Identifier:
                keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3134342e302f32302d3230203d3e203538353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.9.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:37:03:b4:61:b2:e2:98:53:97:a5:b7:b6:f6:2e:ae:1e:f5:
         1b:1e:f3:0d:98:e5:e1:a6:49:7e:af:32:cd:34:39:b3:02:22:
         09:ae:47:95:f1:41:8b:76:a7:37:ee:3f:05:04:e4:32:37:f6:
         3e:90:79:3e:b1:3b:c6:f0:24:2b:b7:07:f3:ed:85:6d:e1:45:
         67:ee:0e:01:8e:9e:f4:65:5f:02:68:8c:e6:c3:40:6e:2f:66:
         d1:f4:aa:4c:e6:99:d2:6b:2a:f3:e8:5f:a4:75:cf:0e:4f:99:
         c5:a4:06:8f:7b:6f:fa:f2:c0:c1:67:ae:d6:fd:b6:6a:3a:8c:
         8a:d7:59:bc:64:14:02:43:5e:9f:38:4c:cd:5c:5a:77:31:e2:
         2e:19:31:84:7d:75:b2:bd:68:27:b4:ce:a6:12:e9:5c:3f:33:
         d6:2d:4e:bc:c0:96:6f:cf:f3:20:48:a1:b3:e5:21:81:76:9c:
         72:c2:31:f1:f6:a0:f8:a6:1b:18:6a:e6:2f:45:31:5c:1f:b8:
         aa:b2:50:1b:36:e0:04:58:7f:6c:8e:c5:2e:2d:9d:4d:e4:46:
         bd:35:b9:b8:8b:e6:77:68:0a:9f:7d:7a:c6:2a:a3:d4:2e:fa:
         d2:51:77:ca:2e:e5:ad:db:8e:5f:8c:ba:af:07:a9:26:90:17:
         53:3c:1a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:10 2026 by rpki-client