Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e31362e302f32302d3230203d3e20313337363937.roa
File:                     3134302e3231302e31362e302f32302d3230203d3e20313337363937.roa (raw, json)
Hash identifier:          ucM6Jxz5/EwvTfspvH6tvbds6be5PlWP5svisIpotV0=
Subject key identifier:   5C:80:5A:10:25:AB:B5:31:20:E1:CF:C5:39:69:F7:6F:89:7F:8C:0F
Certificate issuer:       /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial:       01A9BC6A56A8E10886ADE168DDD5A17E4DDA0965
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e31362e302f32302d3230203d3e20313337363937.roa
Signing time:             Mon 18 May 2026 01:38:59 +0000
ROA not before:           Mon 18 May 2026 01:33:59 +0000
ROA not after:            Mon 17 May 2027 01:38:59 +0000
asID:                     137697
IP address blocks:        140.210.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 07:25:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a9:bc:6a:56:a8:e1:08:86:ad:e1:68:dd:d5:a1:7e:4d:da:09:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
        Validity
            Not Before: May 18 01:33:59 2026 GMT
            Not After : May 17 01:38:59 2027 GMT
        Subject: CN=5C805A1025ABB53120E1CFC53969F76F897F8C0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f2:54:f6:65:20:45:5e:a2:92:db:bc:f7:9a:
                    86:37:87:88:08:6b:3e:af:27:8a:3c:20:dc:7d:a5:
                    52:e1:47:73:c2:78:e9:42:b8:64:23:4c:36:02:91:
                    06:d0:39:fa:85:55:47:d7:b8:61:d3:e3:6c:4d:d4:
                    51:dc:10:cc:77:1b:ea:c8:71:e4:17:59:5c:7b:19:
                    b4:9b:0a:39:58:54:df:55:4d:97:78:16:d4:a3:b2:
                    22:a9:f2:ec:27:89:83:0d:97:91:d1:81:a4:06:34:
                    c1:58:e3:dd:4f:a0:40:0e:24:85:0c:dd:b7:d4:ea:
                    5f:91:68:e2:5f:98:18:cb:33:e7:96:7f:45:cf:ad:
                    cf:23:fa:ee:8d:46:8f:79:ee:f8:15:74:0d:f5:63:
                    f0:8a:a4:42:23:ed:b8:9b:1f:4c:87:c8:99:74:41:
                    67:57:1c:9f:93:d5:16:f1:c1:ea:c9:bb:40:45:54:
                    6b:e3:b2:ad:d1:32:bd:b7:c0:94:73:26:f1:d2:13:
                    d6:2a:85:c9:49:9b:d5:2e:fb:8a:cb:7c:a3:a6:5d:
                    7f:3a:75:30:c1:39:65:be:38:4a:e7:30:91:cf:fa:
                    b5:00:f0:1c:28:c7:c0:d5:ea:e2:f4:0c:0a:8a:99:
                    11:90:53:ba:c4:fb:6d:f8:2a:af:e4:78:6a:7b:ae:
                    a9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:80:5A:10:25:AB:B5:31:20:E1:CF:C5:39:69:F7:6F:89:7F:8C:0F
            X509v3 Authority Key Identifier:
                keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e31362e302f32302d3230203d3e20313337363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:79:d2:76:98:d3:3b:75:6e:82:64:af:72:31:cf:05:89:96:
         eb:99:c0:e8:5a:34:7a:d2:bb:a0:59:41:76:68:2a:5f:3f:5f:
         a2:f9:89:a1:7d:d8:09:88:5a:6d:20:b1:d1:67:a2:76:0f:d2:
         c2:17:2b:c1:10:ed:8f:d3:6f:c2:0e:ed:4e:8d:cf:a7:1f:8e:
         f3:37:1e:c7:59:ee:98:fc:98:f7:15:e4:38:7d:e1:72:6f:1f:
         88:ab:77:6a:64:d9:a0:ae:cb:7b:d5:ae:d5:2d:d3:02:10:0c:
         45:a1:45:ab:e7:82:80:cb:a3:a4:8e:77:26:ba:8a:3f:07:06:
         16:65:e8:97:99:d2:2e:60:42:80:cb:f5:7b:91:4e:b9:50:65:
         4e:51:82:cb:a5:13:52:5c:37:8a:a8:e9:39:19:07:71:06:6a:
         0c:37:5a:16:b5:77:0b:49:f8:c8:af:c4:a8:19:48:52:d0:41:
         c9:c2:3a:9a:84:0f:ae:9d:c7:db:86:b8:e7:06:d7:29:14:89:
         df:34:43:4d:f0:f9:7c:c5:dd:19:1c:e7:93:81:7a:89:5e:18:
         cc:21:21:e6:ad:1c:3c:38:40:41:00:84:42:85:ec:80:fe:33:
         a0:c2:a5:6e:f9:2d:65:1d:04:6d:8d:79:71:50:ef:62:83:b5:
         76:2d:01:e5
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUAam8alao4QiGreFo3dWhfk3aCWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUwQzZENDBCODZCMkNDNURFRkVERjhFNDJGNkJBODQ1
MUM2RjA3NzAeFw0yNjA1MTgwMTMzNTlaFw0yNzA1MTcwMTM4NTlaMDMxMTAvBgNV
BAMTKDVDODA1QTEwMjVBQkI1MzEyMEUxQ0ZDNTM5NjlGNzZGODk3RjhDMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL8lT2ZSBFXqKS27z3moY3h4gI
az6vJ4o8INx9pVLhR3PCeOlCuGQjTDYCkQbQOfqFVUfXuGHT42xN1FHcEMx3G+rI
ceQXWVx7GbSbCjlYVN9VTZd4FtSjsiKp8uwniYMNl5HRgaQGNMFY491PoEAOJIUM
3bfU6l+RaOJfmBjLM+eWf0XPrc8j+u6NRo957vgVdA31Y/CKpEIj7bibH0yHyJl0
QWdXHJ+T1RbxwerJu0BFVGvjsq3RMr23wJRzJvHSE9YqhclJm9Uu+4rLfKOmXX86
dTDBOWW+OErnMJHP+rUA8Bwox8DV6uL0DAqKmRGQU7rE+234Kq/keGp7rqkRAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUXIBaECWrtTEg4c/FOWn3b4l/jA8wHwYDVR0j
BBgwFoAUHgxtQLhrLMXe/t+OQva6hFHG8HcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDgxNTQ4OS8xLzFFMEM2RDQwQjg2QjJDQzVERUZFREY4RTQyRjZC
QTg0NTFDNkYwNzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMUUwQzZENDBCODZCMkNDNURFRkVERjhFNDJGNkJBODQ1MUM2RjA3Ny5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ4MTU0ODkvMS8zMTM0MzAyZTMy
MzEzMDJlMzEzNjJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMxMzMzNzM2MzkzNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBIzSEDANBgkqhkiG9w0BAQsFAAOCAQEALXnSdpjTO3VugmSvcjHP
BYmW65nA6Fo0etK7oFlBdmgqXz9fovmJoX3YCYhabSCx0Weidg/SwhcrwRDtj9Nv
wg7tTo3Ppx+O8zcex1numPyY9xXkOH3hcm8fiKt3amTZoK7Le9Wu1S3TAhAMRaFF
q+eCgMujpI53JrqKPwcGFmXol5nSLmBCgMv1e5FOuVBlTlGCy6UTUlw3iqjpORkH
cQZqDDdaFrV3C0n4yK/EqBlIUtBBycI6moQPrp3H24a45wbXKRSJ3zRDTfD5fMXd
GRznk4F6iV4YzCEh5q0cPDhAQQCEQoXsgP4zoMKlbvktZR0EbY15cVDvYoO1di0B
5Q==
-----END CERTIFICATE-----
Generated at Sat May 30 00:58:08 2026 by rpki-client