Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3232342e302f32302d3230203d3e20313338343037.roa
File:                     3133392e392e3232342e302f32302d3230203d3e20313338343037.roa (raw, json)
Hash identifier:          lS07tJtjeB6CHFJVnROPy69CcYZc/rLmUXjtFLmysYw=
Subject key identifier:   FB:86:81:D7:C7:4E:2E:8C:73:C9:46:C4:31:0B:5F:AE:6D:7B:BE:A4
Certificate issuer:       /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial:       146215B3B69BC2E9FF6A2AFACDE0519023E00F54
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3232342e302f32302d3230203d3e20313338343037.roa
Signing time:             Thu 11 Jun 2026 16:02:06 +0000
ROA not before:           Thu 11 Jun 2026 15:57:06 +0000
ROA not after:            Thu 10 Jun 2027 16:02:06 +0000
asID:                     138407
IP address blocks:        139.9.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:62:15:b3:b6:9b:c2:e9:ff:6a:2a:fa:cd:e0:51:90:23:e0:0f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
        Validity
            Not Before: Jun 11 15:57:06 2026 GMT
            Not After : Jun 10 16:02:06 2027 GMT
        Subject: CN=FB8681D7C74E2E8C73C946C4310B5FAE6D7BBEA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:89:40:51:74:01:fa:06:9f:f6:a4:49:e1:65:
                    52:23:12:18:bf:1e:c4:fd:b2:40:4b:f0:f4:ae:98:
                    f0:17:b6:b1:d6:87:98:77:2f:ef:44:15:4c:fc:57:
                    d3:9f:ae:34:13:6d:b7:b1:eb:38:60:21:19:40:1d:
                    45:49:aa:23:37:32:1b:37:d8:e0:e6:e7:35:ec:9a:
                    4d:a6:e4:c5:52:ba:07:d5:4d:e8:06:cb:a4:cf:ce:
                    1d:ab:c4:d5:88:f5:28:c7:bc:27:6a:42:5e:d5:36:
                    f4:28:ac:9e:24:31:03:a4:a6:5e:e1:e4:c3:4a:6b:
                    ce:6a:2c:ea:a0:c5:b8:49:79:2a:9d:ec:02:4e:48:
                    ce:ae:12:be:6a:46:d4:9c:7a:43:a1:3b:37:99:e2:
                    e4:b9:89:63:d4:9a:96:cd:7a:87:4e:db:56:3e:a7:
                    e6:cb:ba:86:e9:05:18:2d:5f:30:44:f0:92:95:9b:
                    f2:86:21:d7:62:6e:78:3e:25:65:15:5b:07:88:11:
                    ee:79:a7:fc:29:ed:8e:b1:de:15:93:55:f3:f1:8b:
                    9f:56:85:b8:60:1e:08:6e:3c:b6:f6:9c:79:fa:05:
                    f4:a7:fd:57:56:66:4d:43:05:0b:86:09:51:e2:31:
                    0f:d5:87:44:99:73:fb:57:ec:37:0b:95:44:16:ad:
                    30:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:86:81:D7:C7:4E:2E:8C:73:C9:46:C4:31:0B:5F:AE:6D:7B:BE:A4
            X509v3 Authority Key Identifier:
                keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3232342e302f32302d3230203d3e20313338343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.9.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b0:7a:4a:21:a1:6f:33:71:c2:57:e9:0b:ef:3b:2d:6b:ae:63:
         c2:0a:3a:57:d5:08:b9:bb:ec:c1:34:c8:e3:c0:3a:6d:3c:3e:
         77:8b:2e:c1:a9:cf:c9:00:af:83:b3:be:d6:b4:6c:b1:fa:47:
         14:d3:55:7d:a1:e4:21:e3:2a:fe:2f:88:8d:f5:e9:ca:df:1e:
         74:c5:3c:2f:36:b9:50:a2:5b:29:96:0c:dc:10:8d:83:a4:48:
         68:91:7c:74:51:8d:69:a1:07:3b:6e:29:cf:58:11:b7:6d:95:
         43:c8:57:c1:22:75:fe:46:0b:f6:8c:33:44:62:a0:68:ca:27:
         05:af:38:9a:5c:8e:bc:be:38:21:45:34:90:3c:2b:99:b4:09:
         bc:bd:88:97:47:c7:02:60:24:cb:6f:f1:66:68:e4:e6:2b:67:
         68:d4:b6:19:bf:d6:a4:29:98:ab:bd:0d:67:1c:3e:2e:fa:27:
         f1:60:a8:04:d3:35:8c:38:90:6a:4f:71:e0:b9:c9:d8:b0:3d:
         b9:7d:26:c3:d3:97:b8:60:5b:5f:bd:a9:27:71:68:a8:b9:7e:
         c8:a8:4d:97:18:ec:29:b2:46:2a:a2:58:00:83:e0:9b:c2:40:
         c7:e2:d5:53:3f:3e:be:88:d0:c8:a5:91:4b:8a:25:b4:cd:d6:
         c4:a6:2c:49
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:02 2026 by rpki-client