Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/3133392e3230382e302e302f31332d3133203d3e2034383337.roa
File:                     3133392e3230382e302e302f31332d3133203d3e2034383337.roa (raw, json)
Hash identifier:          9jXHvGxcXWiyApRfeU+cjAjjDMmqmAVwR5NCeo63338=
Subject key identifier:   58:BC:33:C9:06:D9:63:40:D1:59:83:7C:FE:25:34:9C:EB:1A:22:60
Certificate issuer:       /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Certificate serial:       6809E14899A8AEDA06E58D4979561AEC3B81308A
Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/3133392e3230382e302e302f31332d3133203d3e2034383337.roa
Signing time:             Wed 27 May 2026 08:24:06 +0000
ROA not before:           Wed 27 May 2026 08:19:06 +0000
ROA not after:            Wed 26 May 2027 08:24:06 +0000
asID:                     4837
IP address blocks:        139.208.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 15:05:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:09:e1:48:99:a8:ae:da:06:e5:8d:49:79:56:1a:ec:3b:81:30:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
        Validity
            Not Before: May 27 08:19:06 2026 GMT
            Not After : May 26 08:24:06 2027 GMT
        Subject: CN=58BC33C906D96340D159837CFE25349CEB1A2260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bc:fc:32:84:5d:b7:d2:22:a2:2d:9b:31:38:
                    8e:db:59:c2:ae:82:39:72:77:42:b6:34:07:3d:cc:
                    ac:f4:28:55:a2:ec:d3:cb:a6:51:5f:bd:bf:41:3d:
                    04:66:07:fb:20:90:16:3e:21:60:eb:e7:65:e2:cf:
                    93:47:17:e7:28:4c:ee:b8:f7:a1:f5:c8:3c:f7:a3:
                    e3:c7:e5:a8:56:89:e3:14:fc:99:df:35:8a:c4:60:
                    de:1c:96:45:68:06:e3:14:e8:86:b2:98:76:88:37:
                    a0:fd:52:8a:4e:42:b9:36:59:57:de:3f:d3:cb:b4:
                    c9:2f:46:92:16:1b:5f:96:2f:a6:59:96:24:71:7d:
                    e4:79:90:e2:4c:5b:50:e9:8b:68:02:47:39:ef:49:
                    29:10:b7:c1:b7:45:33:87:a0:61:a4:9a:e1:a1:53:
                    71:ca:79:f3:ea:b5:2c:17:69:61:52:67:7a:0b:08:
                    11:de:c6:b0:77:3e:df:72:0c:bc:50:6d:4b:3e:ce:
                    a0:d7:e1:6a:a6:42:aa:aa:93:79:b4:79:49:08:2f:
                    ea:00:44:a2:9f:33:42:bb:5a:7f:81:16:28:87:98:
                    80:a4:ac:cb:85:d0:24:74:79:d1:bb:16:14:45:b4:
                    4d:bf:34:34:a0:72:70:94:ea:28:a9:b4:f0:3f:31:
                    07:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BC:33:C9:06:D9:63:40:D1:59:83:7C:FE:25:34:9C:EB:1A:22:60
            X509v3 Authority Key Identifier:
                keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/3133392e3230382e302e302f31332d3133203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.208.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         36:ef:c0:f6:24:79:5d:b8:2c:02:da:18:ad:dd:5b:e6:7a:9f:
         ca:52:5e:19:e7:2d:02:03:c6:42:13:d5:bd:9c:0d:4c:77:46:
         65:2a:95:ed:4d:35:e5:7f:54:9d:e8:1d:12:6a:e9:36:b0:9a:
         a7:39:4f:9b:c4:1c:98:65:fb:e6:60:f4:85:62:be:31:8f:df:
         82:41:49:60:70:0b:cb:1e:92:98:f7:7b:f1:1e:95:00:90:27:
         7f:a3:10:e3:77:f4:60:b2:bd:55:b9:14:e3:44:25:7e:e5:33:
         16:bb:76:69:54:b1:8e:05:39:64:d0:c7:07:36:e2:d2:f2:a5:
         cd:82:e6:2d:40:68:ed:75:fc:e3:12:9f:97:bc:e8:16:bd:1d:
         47:1e:db:86:84:10:8d:05:87:75:e9:e6:1a:dd:1f:0e:12:e0:
         7e:24:7f:3e:e1:8f:55:f3:03:8b:4c:07:5b:b7:89:f1:ac:8e:
         a3:0e:c8:2a:4a:ab:0f:27:5f:79:33:57:b4:ca:cb:4a:76:a8:
         19:45:af:d2:e4:1b:97:c8:0c:0b:e5:ab:37:ba:95:1b:7d:ae:
         27:38:4f:b0:49:2c:3e:f0:21:39:d8:f4:0d:0b:56:eb:ec:2b:
         69:59:c1:89:d5:11:fc:ec:8f:e2:5f:07:6f:a5:2f:f3:dc:c2:
         b8:bb:99:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:25:02 2026 by rpki-client