Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e33302e302f32342d3234203d3e203536303436.roa
File:                     3134302e3231302e33302e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          JCib6eEHsmJfGLVHPcFSzMlPbRqgc/vpDrsCHl6GrZE=
Subject key identifier:   9F:71:47:25:17:18:3D:DE:71:77:7B:36:21:E1:40:01:F4:F5:29:57
Certificate issuer:       /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial:       2C734EA1FFC1FBA29CD0367968B01A53162CEC93
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e33302e302f32342d3234203d3e203536303436.roa
Signing time:             Tue 21 Apr 2026 09:06:41 +0000
ROA not before:           Tue 21 Apr 2026 09:01:41 +0000
ROA not after:            Tue 20 Apr 2027 09:06:41 +0000
asID:                     56046
IP address blocks:        140.210.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 11:42:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:73:4e:a1:ff:c1:fb:a2:9c:d0:36:79:68:b0:1a:53:16:2c:ec:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
        Validity
            Not Before: Apr 21 09:01:41 2026 GMT
            Not After : Apr 20 09:06:41 2027 GMT
        Subject: CN=9F71472517183DDE71777B3621E14001F4F52957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:eb:e4:92:76:07:c5:52:66:c3:3b:c1:37:7c:
                    5f:bf:90:2b:7f:28:5f:50:7a:27:c0:60:ea:6a:5d:
                    82:c6:5a:c7:36:33:80:bc:8e:80:5f:f5:f8:6a:a4:
                    0d:bd:94:e8:79:b7:01:64:f1:45:60:d6:15:bf:8a:
                    2e:9b:d0:08:22:f7:c8:09:b5:8c:16:74:c4:71:b5:
                    6c:92:f0:6c:6f:21:79:3f:d4:bd:a1:0f:59:3e:6b:
                    67:81:dc:e2:86:dc:00:72:22:d2:e5:0e:5d:36:b3:
                    22:45:df:2b:e7:c5:f7:b3:be:9e:60:88:b3:c7:d6:
                    92:62:8a:4d:62:c8:27:af:3e:69:b8:12:e2:35:d5:
                    46:8f:d1:5c:ca:dd:6d:7f:37:88:b2:09:cf:0d:22:
                    40:c9:2c:f8:69:54:67:7c:a0:86:07:43:6f:b3:d6:
                    52:3d:5b:80:3e:95:53:b5:c7:cf:84:94:2e:06:94:
                    16:61:2c:6c:dd:a5:9c:50:e3:e0:56:f9:2a:f5:66:
                    42:b3:3a:52:f5:5f:35:df:7a:87:b2:1b:df:d2:60:
                    bf:bb:16:02:85:57:13:4d:26:2d:df:cf:4c:e6:7e:
                    da:04:b5:62:d4:38:3b:06:9c:87:8d:ec:23:00:d2:
                    e8:ee:ce:2a:fc:f1:19:e8:26:ce:c4:96:c6:a1:11:
                    a3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:71:47:25:17:18:3D:DE:71:77:7B:36:21:E1:40:01:F4:F5:29:57
            X509v3 Authority Key Identifier:
                keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e33302e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:e1:5b:f9:b4:97:f5:16:82:41:a1:2d:30:2e:60:b2:bb:fa:
         40:e6:f2:3d:47:3f:3f:65:4c:8b:63:51:ba:01:1f:24:1b:73:
         76:2e:bf:4f:c7:c4:30:e4:15:f7:2f:3d:53:6e:b9:a9:87:f7:
         70:ca:f3:cd:1d:9f:b9:e6:3a:af:90:67:4f:4b:3b:95:f7:59:
         4c:e4:37:46:3e:2d:a5:a5:7a:9d:1f:f4:dd:b1:21:f0:e4:2b:
         99:6a:fc:04:69:26:2b:cc:a4:da:70:09:ed:2c:00:be:f0:7f:
         1d:dd:22:4d:52:fb:30:f5:26:f4:c6:59:45:1d:7e:39:dc:65:
         97:f2:0b:96:95:0f:36:19:33:26:28:7f:2a:01:5a:13:f7:24:
         48:c4:0a:39:83:8d:4a:82:50:08:bf:a6:47:95:6f:81:54:6b:
         50:37:a6:90:15:2d:6b:6c:11:4e:e7:f7:39:0d:1b:d5:a9:78:
         9e:69:25:bc:e5:8f:b7:ec:1f:e5:7e:d0:e2:27:8a:22:07:a1:
         69:86:9d:c8:57:bf:5d:41:8d:5e:21:e1:07:4b:f7:b0:cb:df:
         14:c2:a4:74:4d:2b:c8:92:e6:07:f9:e3:7d:f1:e3:9b:1e:09:
         c6:de:44:59:3a:14:08:0a:44:7b:ec:74:a7:ff:75:ad:4d:ad:
         e8:06:6d:ec
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIULHNOof/B+6Kc0DZ5aLAaUxYs7JMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUwQzZENDBCODZCMkNDNURFRkVERjhFNDJGNkJBODQ1
MUM2RjA3NzAeFw0yNjA0MjEwOTAxNDFaFw0yNzA0MjAwOTA2NDFaMDMxMTAvBgNV
BAMTKDlGNzE0NzI1MTcxODNEREU3MTc3N0IzNjIxRTE0MDAxRjRGNTI5NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS6+SSdgfFUmbDO8E3fF+/kCt/
KF9QeifAYOpqXYLGWsc2M4C8joBf9fhqpA29lOh5twFk8UVg1hW/ii6b0Agi98gJ
tYwWdMRxtWyS8GxvIXk/1L2hD1k+a2eB3OKG3AByItLlDl02syJF3yvnxfezvp5g
iLPH1pJiik1iyCevPmm4EuI11UaP0VzK3W1/N4iyCc8NIkDJLPhpVGd8oIYHQ2+z
1lI9W4A+lVO1x8+ElC4GlBZhLGzdpZxQ4+BW+Sr1ZkKzOlL1XzXfeoeyG9/SYL+7
FgKFVxNNJi3fz0zmftoEtWLUODsGnIeN7CMA0ujuzir88RnoJs7ElsahEaNtAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUn3FHJRcYPd5xd3s2IeFAAfT1KVcwHwYDVR0j
BBgwFoAUHgxtQLhrLMXe/t+OQva6hFHG8HcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDgxNTQ4OS8xLzFFMEM2RDQwQjg2QjJDQzVERUZFREY4RTQyRjZC
QTg0NTFDNkYwNzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMUUwQzZENDBCODZCMkNDNURFRkVERjhFNDJGNkJBODQ1MUM2RjA3Ny5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTc5NjcxNDgxNTQ4OS8xLzMxMzQzMDJlMzIz
MTMwMmUzMzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAIzSHjANBgkqhkiG9w0BAQsFAAOCAQEAOOFb+bSX9RaCQaEtMC5gsrv6
QObyPUc/P2VMi2NRugEfJBtzdi6/T8fEMOQV9y89U265qYf3cMrzzR2fueY6r5Bn
T0s7lfdZTOQ3Rj4tpaV6nR/03bEh8OQrmWr8BGkmK8yk2nAJ7SwAvvB/Hd0iTVL7
MPUm9MZZRR1+Odxll/ILlpUPNhkzJih/KgFaE/ckSMQKOYONSoJQCL+mR5VvgVRr
UDemkBUta2wRTuf3OQ0b1al4nmklvOWPt+wf5X7Q4ieKIgehaYadyFe/XUGNXiHh
B0v3sMvfFMKkdE0ryJLmB/njffHjmx4Jxt5EWToUCApEe+x0p/91rU2t6AZt7A==
-----END CERTIFICATE-----
Generated at Tue Apr 21 22:52:32 2026 by rpki-client