Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3137362e302f32302d3230203d3e203535393930.roa
File:                     3133392e392e3137362e302f32302d3230203d3e203535393930.roa (raw, json)
Hash identifier:          VsJMIqhGGimUqPufhAuTT032jD0E12ksZWSQ+6S6nfI=
Subject key identifier:   7E:22:D3:71:B9:B2:02:05:2B:9D:66:0E:FD:D9:28:C9:1D:EA:38:0A
Certificate issuer:       /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial:       586E8629FDBCA664DA200AD93A00465D8BC1B7C0
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3137362e302f32302d3230203d3e203535393930.roa
Signing time:             Tue 02 Jun 2026 17:58:04 +0000
ROA not before:           Tue 02 Jun 2026 17:53:04 +0000
ROA not after:            Tue 01 Jun 2027 17:58:04 +0000
asID:                     55990
IP address blocks:        139.9.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:6e:86:29:fd:bc:a6:64:da:20:0a:d9:3a:00:46:5d:8b:c1:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
        Validity
            Not Before: Jun  2 17:53:04 2026 GMT
            Not After : Jun  1 17:58:04 2027 GMT
        Subject: CN=7E22D371B9B202052B9D660EFDD928C91DEA380A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b7:2a:75:7d:b3:2c:e6:97:d0:97:c1:be:05:
                    a9:3b:9f:95:a7:c5:b4:ed:a6:e8:69:28:29:81:73:
                    07:2f:59:b0:2f:3f:1d:a0:c0:71:35:d5:fd:4d:3e:
                    56:8d:65:73:d0:90:d4:9f:5e:4d:cd:7d:23:e3:a6:
                    d0:77:c0:8e:6c:e7:2c:2d:77:ca:e8:6c:75:f4:97:
                    c2:4a:f9:9b:c1:77:65:22:61:d9:3c:b7:48:57:94:
                    a6:6e:2f:57:9f:c8:19:5e:63:48:50:f7:1c:af:d4:
                    9a:c5:f7:8e:c6:c7:a0:90:05:ec:2a:39:2a:0c:ce:
                    dc:6a:be:ee:d9:2d:71:6b:dd:6a:ee:3f:12:fa:cf:
                    fe:3e:f3:63:91:44:1a:d7:2b:0d:a9:8e:c5:31:71:
                    d8:ab:18:6f:ab:9c:5b:7b:b1:7f:10:59:27:40:28:
                    e4:2c:18:91:d3:2f:d7:93:b9:95:a3:4a:01:65:80:
                    a9:ca:00:08:30:80:79:42:01:4c:14:17:40:59:ba:
                    55:73:40:47:bb:69:56:1f:ab:17:44:35:a0:88:0d:
                    bd:6f:ad:f6:6d:99:b9:ae:9a:8c:9c:12:c4:1c:00:
                    e9:2f:00:e5:31:e4:2b:83:d6:18:a7:21:8e:7a:e9:
                    02:cf:50:7f:50:7e:5e:75:9f:3d:86:52:bf:99:32:
                    ea:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:22:D3:71:B9:B2:02:05:2B:9D:66:0E:FD:D9:28:C9:1D:EA:38:0A
            X509v3 Authority Key Identifier:
                keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3137362e302f32302d3230203d3e203535393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.9.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         28:86:7c:50:77:01:4b:bb:37:4d:2e:c7:b8:1e:a4:5f:d3:8a:
         ef:74:33:6b:a2:71:8b:a5:d1:fb:4f:e3:af:c3:ea:f8:d2:8e:
         2e:b6:91:42:b0:a6:08:05:6a:1f:bd:d6:f8:b5:94:f3:4f:77:
         36:66:25:57:31:46:14:42:56:b1:7b:94:27:7e:de:b7:ed:ed:
         9d:73:e3:94:db:1d:ec:74:32:a4:ce:a4:eb:d8:bf:75:8e:67:
         85:ee:a7:7a:57:2d:6f:e5:38:56:2a:12:8e:13:97:bd:03:b2:
         1c:08:44:72:5e:31:41:3f:89:c3:e7:9d:34:bd:3c:51:d9:5c:
         5a:b3:49:03:10:98:bd:ad:cb:c8:61:93:67:e3:b9:fd:9e:61:
         d1:e6:f8:3e:ae:ef:4e:20:36:76:df:c9:6f:b8:be:04:21:e5:
         2a:77:63:be:47:fb:b6:ca:a9:e7:53:1e:c0:10:8d:f6:4a:d1:
         ea:84:79:61:52:01:0f:28:88:78:fc:0f:86:0c:d0:57:09:6b:
         93:53:08:d1:ee:45:67:4a:27:f1:b3:02:be:13:2b:1a:9c:a9:
         b1:fc:76:e5:6e:36:15:aa:00:e0:cf:d4:f1:c0:a2:c7:47:b4:
         26:22:92:0c:e8:c0:74:19:3f:4c:43:a1:28:f2:4e:90:1d:fd:
         0e:5c:61:1d
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUWG6GKf28pmTaIArZOgBGXYvBt8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5
NjFENzkzRDAeFw0yNjA2MDIxNzUzMDRaFw0yNzA2MDExNzU4MDRaMDMxMTAvBgNV
BAMTKDdFMjJEMzcxQjlCMjAyMDUyQjlENjYwRUZERDkyOEM5MURFQTM4MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxtyp1fbMs5pfQl8G+Bak7n5Wn
xbTtpuhpKCmBcwcvWbAvPx2gwHE11f1NPlaNZXPQkNSfXk3NfSPjptB3wI5s5ywt
d8robHX0l8JK+ZvBd2UiYdk8t0hXlKZuL1efyBleY0hQ9xyv1JrF947Gx6CQBewq
OSoMztxqvu7ZLXFr3WruPxL6z/4+82ORRBrXKw2pjsUxcdirGG+rnFt7sX8QWSdA
KOQsGJHTL9eTuZWjSgFlgKnKAAgwgHlCAUwUF0BZulVzQEe7aVYfqxdENaCIDb1v
rfZtmbmumoycEsQcAOkvAOUx5CuD1hinIY566QLPUH9Qfl51nz2GUr+ZMuopAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUfiLTcbmyAgUrnWYO/dkoyR3qOAowHwYDVR0j
BBgwFoAUrhQxzco8UkVrAUbEnV7uMpYdeT0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTM4OTI2NTIyMzY4MS8xL0FFMTQzMUNEQ0EzQzUyNDU2QjAxNDZDNDlENUVF
RTMyOTYxRDc5M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5NjFENzkzRC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1MjIzNjgxLzEvMzEzMzM5MmUzOTJl
MzEzNzM2MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzUzNTM5MzkzMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBIsJsDANBgkqhkiG9w0BAQsFAAOCAQEAKIZ8UHcBS7s3TS7HuB6kX9OK73Qz
a6Jxi6XR+0/jr8Pq+NKOLraRQrCmCAVqH73W+LWU8093NmYlVzFGFEJWsXuUJ37e
t+3tnXPjlNsd7HQypM6k69i/dY5nhe6nelctb+U4VioSjhOXvQOyHAhEcl4xQT+J
w+edNL08UdlcWrNJAxCYva3LyGGTZ+O5/Z5h0eb4Pq7vTiA2dt/Jb7i+BCHlKndj
vkf7tsqp51MewBCN9krR6oR5YVIBDyiIePwPhgzQVwlrk1MI0e5FZ0on8bMCvhMr
Gpypsfx25W42FaoA4M/U8cCix0e0JiKSDOjAdBk/TEOhKPJOkB39DlxhHQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:57 2026 by rpki-client