Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e33312e302f32342d3234203d3e20313939373739.roa
File:                     3134302e3231302e33312e302f32342d3234203d3e20313939373739.roa (raw, json)
Hash identifier:          0PHw+E3prlMBPe/thDOq+xuk87qH95Kumj7g/IEyP+k=
Subject key identifier:   89:40:E6:D9:9D:17:3B:F2:81:67:D4:FC:73:E3:AD:24:85:73:62:46
Certificate issuer:       /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial:       5BC92487D810EDC1B942E9EF7A3A8E3DEA5B45B7
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e33312e302f32342d3234203d3e20313939373739.roa
Signing time:             Wed 19 Aug 2026 08:28:53 +0000
ROA not before:           Wed 19 Aug 2026 08:23:53 +0000
ROA not after:            Wed 18 Aug 2027 08:28:53 +0000
asID:                     199779
IP address blocks:        140.210.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 15:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c9:24:87:d8:10:ed:c1:b9:42:e9:ef:7a:3a:8e:3d:ea:5b:45:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
        Validity
            Not Before: Aug 19 08:23:53 2026 GMT
            Not After : Aug 18 08:28:53 2027 GMT
        Subject: CN=8940E6D99D173BF28167D4FC73E3AD2485736246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f6:ca:da:f8:45:aa:fc:56:4d:5c:9e:31:7d:
                    92:ab:0d:9c:05:2f:19:ec:28:84:bb:96:a0:50:62:
                    e4:0b:6b:7d:df:bc:fc:cb:cf:c0:90:53:d8:41:3f:
                    fc:5f:23:62:42:86:3a:f3:81:06:91:72:fe:cd:b1:
                    ba:6d:d9:f3:01:24:bd:f3:cd:f3:81:b1:fa:e3:cc:
                    6a:82:28:13:49:c2:12:e2:62:88:c3:a6:5f:2d:5c:
                    99:27:3d:c4:a3:77:5c:38:7c:5c:89:62:03:1e:24:
                    9e:ef:64:29:bd:fd:8e:66:c3:0f:53:39:e1:c4:3a:
                    59:f3:e8:ae:7a:18:4d:c4:d1:80:07:5c:b6:1d:7c:
                    da:22:73:52:ec:fb:44:4e:4b:d3:c3:1c:81:ee:8a:
                    71:c1:cc:42:a8:c5:81:10:d6:e2:50:6c:ce:77:fe:
                    93:78:72:96:59:ea:75:bb:5b:78:14:51:05:d7:2c:
                    99:fb:dd:7d:ed:ea:f7:af:f1:9a:11:df:c7:6b:1a:
                    95:6e:2d:54:d6:69:53:05:ab:a5:e8:57:02:3d:e1:
                    58:52:d2:93:6b:6e:b6:76:e4:c6:2c:b8:a9:79:b4:
                    37:fd:4a:a3:ab:f2:8c:fa:de:23:78:e8:a9:4c:4a:
                    5c:5d:1a:b2:db:9f:49:15:94:0f:7c:7b:97:57:e1:
                    df:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:40:E6:D9:9D:17:3B:F2:81:67:D4:FC:73:E3:AD:24:85:73:62:46
            X509v3 Authority Key Identifier:
                keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e33312e302f32342d3234203d3e20313939373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:0f:05:72:6d:d0:cb:94:74:bd:f8:55:33:58:0a:b7:4d:06:
         04:c4:04:c5:09:6c:fd:d0:a5:cc:2f:07:23:75:a8:c2:94:c1:
         1e:f8:c8:e6:29:ba:dc:d7:ac:18:3d:01:53:d2:fc:8f:3a:11:
         65:e0:25:8c:3e:5c:f4:3e:92:5b:b3:24:ba:53:b9:19:a9:97:
         bf:1c:44:5e:b7:c1:b8:46:13:ca:90:32:cd:15:35:70:44:2a:
         ff:fd:4a:96:ca:c8:37:33:38:a7:3b:4e:5c:65:6b:2e:97:e7:
         85:da:d6:02:7c:37:21:ac:58:67:c3:c7:7a:08:9b:c9:b9:f9:
         5b:87:e3:50:e7:a7:21:9c:d7:09:4b:b9:d2:7c:82:f4:92:bf:
         ba:0a:ad:6f:42:78:6c:15:ea:7e:7f:55:84:ea:f1:ad:8a:78:
         e4:6f:77:a5:d0:f0:db:40:0b:d0:ab:9b:6a:19:af:66:f6:cf:
         78:7a:bd:1b:c8:7e:d1:ae:b2:4b:98:22:c8:f6:cc:a2:53:6c:
         4b:f7:22:44:28:db:40:0a:84:59:b4:9d:fd:01:fe:38:75:0d:
         46:28:90:99:fd:e3:28:f9:08:8c:db:ce:80:4e:c7:8b:b3:67:
         d2:1c:ee:b2:26:2b:98:4c:12:4d:e1:cb:8e:a8:f0:62:07:83:
         6e:40:59:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:22:49 2026 by rpki-client