Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e36342e302f31392d3139203d3e203535393930.roa
File:                     3133392e392e36342e302f31392d3139203d3e203535393930.roa (raw, json)
Hash identifier:          YkmPo5xHeylO2h4ARJEGFugHoYwcK0y1lnuYmmgqAt8=
Subject key identifier:   9D:21:0C:2B:FE:96:4C:C1:E4:69:87:38:80:B9:5F:1F:3B:F0:06:21
Certificate issuer:       /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial:       59A6D7FA2855B394D6E5880E2F353F563B2C012E
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e36342e302f31392d3139203d3e203535393930.roa
Signing time:             Tue 02 Jun 2026 17:40:25 +0000
ROA not before:           Tue 02 Jun 2026 17:35:25 +0000
ROA not after:            Tue 01 Jun 2027 17:40:25 +0000
asID:                     55990
IP address blocks:        139.9.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a6:d7:fa:28:55:b3:94:d6:e5:88:0e:2f:35:3f:56:3b:2c:01:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
        Validity
            Not Before: Jun  2 17:35:25 2026 GMT
            Not After : Jun  1 17:40:25 2027 GMT
        Subject: CN=9D210C2BFE964CC1E469873880B95F1F3BF00621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f8:23:98:9e:b0:f4:9a:2c:e4:61:cb:e9:99:
                    bc:76:83:54:7a:23:d4:bf:da:78:85:7e:0c:04:a4:
                    0b:29:85:22:21:96:53:2d:0b:d7:37:d0:83:04:90:
                    34:d7:60:3f:8f:9a:2c:1a:2d:74:a9:4a:ae:b8:62:
                    a7:cf:86:1e:90:71:46:3f:2a:6f:9a:e1:8c:72:1e:
                    4c:76:84:8e:0d:c3:30:d5:22:f0:9c:8e:f5:45:5a:
                    b6:06:73:17:cc:63:7a:14:1d:33:00:27:9a:70:ab:
                    ba:0d:5d:0f:1b:fd:4e:ea:62:95:cf:e9:99:2a:0b:
                    d7:d9:31:51:63:8f:2a:f7:6a:5c:7d:c1:c8:82:df:
                    51:93:04:ff:d0:b0:bc:f9:0d:95:1b:dd:8b:be:2b:
                    e5:82:d7:3c:62:f6:e3:62:94:ad:c3:db:c3:04:69:
                    ed:4e:75:62:15:8f:39:75:44:f8:5c:86:ac:17:b9:
                    ee:3d:01:bd:5b:42:dc:b7:48:2e:81:e5:90:ad:35:
                    31:19:22:98:f2:75:d0:76:71:e7:53:32:d1:c5:29:
                    1a:46:2e:9f:58:16:fb:db:6f:94:f0:6f:3e:05:bc:
                    88:cb:6f:1b:9c:cf:ab:96:b5:f2:16:df:a2:f2:74:
                    16:79:9c:4a:9e:92:f1:27:d5:f9:49:92:e3:7f:d2:
                    9e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:21:0C:2B:FE:96:4C:C1:E4:69:87:38:80:B9:5F:1F:3B:F0:06:21
            X509v3 Authority Key Identifier:
                keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e36342e302f31392d3139203d3e203535393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.9.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         55:52:05:ea:ac:bb:c1:cb:5c:ea:15:45:35:26:27:9c:7c:15:
         ce:08:7a:ad:45:1e:a3:ff:17:19:81:f6:0c:60:95:de:bc:99:
         98:a8:b8:eb:63:46:9c:ce:b7:79:51:4c:97:1b:a7:c7:e8:29:
         83:85:a0:19:e8:fc:a4:ad:3c:ab:9b:61:1e:43:66:30:04:28:
         6d:8e:d8:a2:20:0a:4a:3a:78:5c:f0:c6:4a:f1:a3:6a:55:94:
         17:d6:09:a2:71:a9:51:ce:c9:da:1d:e6:a0:08:96:59:05:17:
         84:b4:da:0e:01:e7:da:c4:bb:0b:5c:ea:34:8d:c3:6f:7d:7c:
         cb:9d:9e:10:4a:c2:11:9b:f6:04:cd:07:9d:34:9f:4c:ba:90:
         82:bc:20:83:c7:af:24:73:73:dc:97:a6:93:4d:c9:57:40:57:
         43:e5:7f:fd:65:4f:fe:0f:89:f4:4f:c8:99:26:bf:be:de:30:
         2c:ba:29:91:5b:49:1d:7a:d6:5e:c7:95:b1:69:90:62:c3:7e:
         cc:1e:3c:18:79:b1:5c:e9:9d:ae:bc:cc:2e:90:b6:59:eb:5b:
         63:3d:b0:14:ef:ed:67:7d:77:a2:b2:2a:97:6e:6d:fa:65:2d:
         f1:19:13:4d:d8:72:a0:f2:8c:5e:69:14:5d:f0:d1:cf:09:2f:
         ea:e7:42:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:58 2026 by rpki-client