Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3234382e302f32322d3232203d3e20313338343037.roa
File:                     3133392e392e3234382e302f32322d3232203d3e20313338343037.roa (raw, json)
Hash identifier:          brHZeRrEgNhw6FAbU82qZcBBw31Pf4doatUEvnQg2jo=
Subject key identifier:   72:AF:89:05:0A:76:F0:9D:39:72:B0:04:96:C3:D6:C4:DF:7C:1A:68
Certificate issuer:       /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial:       4141C546AAB76AD16A5E6886FF8872885F88CCA1
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3234382e302f32322d3232203d3e20313338343037.roa
Signing time:             Thu 11 Jun 2026 16:02:06 +0000
ROA not before:           Thu 11 Jun 2026 15:57:06 +0000
ROA not after:            Thu 10 Jun 2027 16:02:06 +0000
asID:                     138407
IP address blocks:        139.9.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:41:c5:46:aa:b7:6a:d1:6a:5e:68:86:ff:88:72:88:5f:88:cc:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
        Validity
            Not Before: Jun 11 15:57:06 2026 GMT
            Not After : Jun 10 16:02:06 2027 GMT
        Subject: CN=72AF89050A76F09D3972B00496C3D6C4DF7C1A68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5e:d0:9f:54:79:4c:50:9b:b7:ee:96:64:f0:
                    ab:95:ed:ef:af:ea:20:18:c0:03:3d:71:80:c4:7d:
                    66:7d:9c:22:f8:41:a8:18:74:f9:d6:4a:27:5a:66:
                    9f:61:0e:bd:5d:08:7d:63:33:e0:57:3f:6e:45:64:
                    fd:13:24:0a:50:ba:7c:f0:45:24:c2:f6:54:1a:df:
                    d9:96:00:b3:4c:1c:2a:29:bd:71:ad:30:13:85:d5:
                    a7:ce:e9:c3:a1:07:14:ad:0f:26:1f:3d:57:f3:3c:
                    a5:24:31:de:8f:8b:7b:3e:b7:c1:fd:b8:43:ca:ef:
                    1a:67:cd:1c:a4:85:39:77:a5:dd:04:25:6b:54:a5:
                    29:86:30:dd:3b:2a:8e:c8:66:ce:4a:18:79:4e:16:
                    cd:fc:33:4a:d9:84:05:4c:6f:08:26:b2:7c:cb:91:
                    5e:df:9b:e9:35:10:2b:3c:3c:de:9d:4b:f6:cd:36:
                    21:cb:27:d5:e4:59:05:dd:20:3c:7a:3a:e8:69:c5:
                    64:32:5e:d5:4e:36:bb:83:80:61:e4:09:eb:e8:7c:
                    46:9a:70:c4:06:5e:ac:a5:0c:c9:42:82:29:65:70:
                    12:7a:2b:50:0f:0b:ac:3a:bb:b9:98:9a:f9:de:b5:
                    a3:6d:14:78:e2:a4:e9:b4:c6:bc:c4:ea:23:f8:08:
                    df:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AF:89:05:0A:76:F0:9D:39:72:B0:04:96:C3:D6:C4:DF:7C:1A:68
            X509v3 Authority Key Identifier:
                keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3234382e302f32322d3232203d3e20313338343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.9.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:d2:14:48:26:08:72:b8:16:5a:0f:94:42:13:91:e0:be:c2:
         75:f3:31:b1:52:62:be:a1:7f:52:d0:4b:8e:65:41:67:72:db:
         73:17:d6:ca:92:ac:81:26:8a:1d:72:09:52:33:a8:7a:c5:0a:
         94:f6:ff:39:26:b0:5d:1f:e6:18:aa:e2:b2:37:ff:d4:d5:94:
         04:2c:eb:58:fd:20:ce:d3:43:94:03:b4:24:ee:4f:ce:8b:1c:
         72:a0:59:12:98:3e:e5:f8:14:87:ee:a9:b4:0e:c8:77:f9:f9:
         b9:3e:c0:95:0f:e6:82:46:eb:98:9d:7d:dc:85:25:48:89:a5:
         25:d4:54:58:cf:95:a3:6d:90:70:cc:44:93:9d:4c:c7:ef:8b:
         3e:74:fe:10:c2:57:3f:44:35:a2:25:69:d0:ae:c2:31:c4:18:
         42:4a:cb:64:73:57:c0:9c:e6:1d:46:ee:6b:96:08:80:24:2d:
         df:9b:04:0c:85:57:f0:d4:61:5c:07:86:3d:c3:48:c8:03:4e:
         17:46:3f:d3:fe:aa:0c:da:8e:99:40:6f:7c:45:9d:b0:be:e6:
         35:0e:e0:09:07:a2:56:db:76:a4:ac:dd:fb:5c:2c:5f:3c:1b:
         89:6e:bb:b1:5b:9a:47:07:40:e2:95:d2:b2:6a:35:a6:7d:80:
         61:fb:0d:f8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:47 2026 by rpki-client