Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3234302e302f32312d3231203d3e20313334353432.roa
File:                     3133392e392e3234302e302f32312d3231203d3e20313334353432.roa (raw, json)
Hash identifier:          uoAxmhT+2OpRSiYypYllNmQHVlcsBTIYDjwVye93CoI=
Subject key identifier:   88:56:65:15:C5:DA:A7:5C:95:8B:9E:F7:ED:D8:4F:AB:7B:95:97:AE
Certificate issuer:       /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial:       58A821A4D69742C33AFC455004CA7667AFCCA5B7
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3234302e302f32312d3231203d3e20313334353432.roa
Signing time:             Thu 11 Jun 2026 16:02:07 +0000
ROA not before:           Thu 11 Jun 2026 15:57:07 +0000
ROA not after:            Thu 10 Jun 2027 16:02:07 +0000
asID:                     134542
IP address blocks:        139.9.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a8:21:a4:d6:97:42:c3:3a:fc:45:50:04:ca:76:67:af:cc:a5:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
        Validity
            Not Before: Jun 11 15:57:07 2026 GMT
            Not After : Jun 10 16:02:07 2027 GMT
        Subject: CN=88566515C5DAA75C958B9EF7EDD84FAB7B9597AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ae:47:52:2a:5a:31:3f:f1:66:10:96:16:62:
                    7b:1b:c2:47:5c:71:b6:98:d3:f6:d2:66:be:1a:0d:
                    95:89:ed:0e:3a:3c:34:07:09:fc:f4:61:57:f5:45:
                    94:07:b6:59:40:05:11:aa:c4:7b:fe:cb:39:17:ce:
                    5c:7b:b9:9b:4d:ef:80:22:be:55:1b:de:61:a7:a6:
                    79:3f:51:24:0d:b0:29:5b:2d:59:1c:d2:28:d2:61:
                    84:a6:14:2a:72:81:78:21:04:1b:aa:4d:33:04:cb:
                    a3:b2:61:ca:3b:cf:43:ad:d8:24:e8:9e:0a:8c:99:
                    f7:b3:52:01:58:c2:ba:6c:c9:75:27:a4:e2:d9:6b:
                    98:50:97:85:7c:06:72:81:3a:5e:60:5a:60:33:43:
                    c5:5a:9a:92:c8:81:19:34:5a:57:07:2f:05:b0:8f:
                    67:b9:4d:a6:38:39:47:df:96:d3:20:a0:d0:1d:b6:
                    23:79:dd:d6:08:9f:85:d7:4e:2f:d9:a9:fd:82:8a:
                    a7:65:c6:12:eb:e9:ae:ba:42:c2:ad:d6:4c:73:de:
                    da:50:92:7a:47:0c:74:4c:2d:fa:f4:0c:84:bf:fe:
                    e1:9a:ee:cb:94:b0:db:a0:e4:0b:d7:60:79:47:30:
                    ee:eb:6c:c1:4b:4a:10:a5:63:33:e1:1b:d5:50:9e:
                    0a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:56:65:15:C5:DA:A7:5C:95:8B:9E:F7:ED:D8:4F:AB:7B:95:97:AE
            X509v3 Authority Key Identifier:
                keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3234302e302f32312d3231203d3e20313334353432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.9.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d9:05:c1:96:85:af:59:6b:01:10:a0:59:4b:60:f9:1b:7e:5a:
         e5:af:14:3f:7b:47:ec:74:d0:d3:55:c0:5b:97:ec:9e:2f:4b:
         76:66:66:28:22:33:a6:06:67:6a:a2:16:24:1e:05:00:8e:29:
         18:15:3f:56:47:29:56:3d:cd:90:88:87:01:69:fb:c8:82:a4:
         50:fd:62:c8:77:0f:bf:c9:f4:a9:44:e4:ce:b2:6a:d2:b2:18:
         f8:94:31:e9:ca:61:79:0d:c6:94:72:7f:8a:dd:d9:9c:3b:0d:
         b7:b7:f0:cb:2e:81:2c:0c:27:33:2c:10:9f:80:9e:1d:d2:dd:
         f1:89:3c:dc:de:fa:d9:f2:08:28:42:e6:45:5b:f5:50:70:12:
         1b:69:ca:7c:af:ff:c6:03:ad:18:c0:0d:35:35:8b:cb:84:ec:
         86:d4:76:15:b6:cd:c2:ea:6a:d2:c6:72:1a:f4:1c:9f:ef:9f:
         08:eb:74:fd:6e:fc:82:e3:67:10:56:8e:e0:74:e4:c1:d0:55:
         60:c7:a6:3d:6d:98:a7:8f:43:1b:1a:94:e9:b6:84:6c:f7:e5:
         8d:fe:eb:77:b4:9c:a6:e7:d6:b2:9d:20:ff:8e:88:28:4b:9b:
         18:7a:67:1a:71:53:f1:b3:14:67:df:da:e6:fa:7a:58:0a:3e:
         5d:81:4c:b8
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUWKghpNaXQsM6/EVQBMp2Z6/MpbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5
NjFENzkzRDAeFw0yNjA2MTExNTU3MDdaFw0yNzA2MTAxNjAyMDdaMDMxMTAvBgNV
BAMTKDg4NTY2NTE1QzVEQUE3NUM5NThCOUVGN0VERDg0RkFCN0I5NTk3QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrrkdSKloxP/FmEJYWYnsbwkdc
cbaY0/bSZr4aDZWJ7Q46PDQHCfz0YVf1RZQHtllABRGqxHv+yzkXzlx7uZtN74Ai
vlUb3mGnpnk/USQNsClbLVkc0ijSYYSmFCpygXghBBuqTTMEy6OyYco7z0Ot2CTo
ngqMmfezUgFYwrpsyXUnpOLZa5hQl4V8BnKBOl5gWmAzQ8VampLIgRk0WlcHLwWw
j2e5TaY4OUffltMgoNAdtiN53dYIn4XXTi/Zqf2CiqdlxhLr6a66QsKt1kxz3tpQ
knpHDHRMLfr0DIS//uGa7suUsNug5AvXYHlHMO7rbMFLShClYzPhG9VQngoPAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUiFZlFcXap1yVi5737dhPq3uVl64wHwYDVR0j
BBgwFoAUrhQxzco8UkVrAUbEnV7uMpYdeT0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTM4OTI2NTIyMzY4MS8xL0FFMTQzMUNEQ0EzQzUyNDU2QjAxNDZDNDlENUVF
RTMyOTYxRDc5M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5NjFENzkzRC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4NTM4OTI2NTIyMzY4MS8xLzMxMzMzOTJlMzky
ZTMyMzQzMDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMxMzMzNDM1MzQzMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEA4sJ8DANBgkqhkiG9w0BAQsFAAOCAQEA2QXBloWvWWsBEKBZS2D5G35a
5a8UP3tH7HTQ01XAW5fsni9LdmZmKCIzpgZnaqIWJB4FAI4pGBU/VkcpVj3NkIiH
AWn7yIKkUP1iyHcPv8n0qUTkzrJq0rIY+JQx6cpheQ3GlHJ/it3ZnDsNt7fwyy6B
LAwnMywQn4CeHdLd8Yk83N762fIIKELmRVv1UHASG2nKfK//xgOtGMANNTWLy4Ts
htR2FbbNwupq0sZyGvQcn++fCOt0/W78guNnEFaO4HTkwdBVYMemPW2Yp49DGxqU
6baEbPfljf7rd7ScpufWsp0g/46IKEubGHpnGnFT8bMUZ9/a5vp6WAo+XYFMuA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:49 2026 by rpki-client