Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3132382e302f31392d3139203d3e20313338343231.roa
File:                     3134302e3231302e3132382e302f31392d3139203d3e20313338343231.roa (raw, json)
Hash identifier:          ehe45ImFWknrg3mV7dKkb+oOeo9TXanIooFz5AvG8lU=
Subject key identifier:   A9:2E:23:4B:DF:0E:BD:94:ED:08:04:5B:AB:4A:86:4F:82:3D:16:87
Certificate issuer:       /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial:       244CBCCD349EDBC396B4CE609E65E3B7EC1A97C6
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3132382e302f31392d3139203d3e20313338343231.roa
Signing time:             Tue 16 Jun 2026 14:57:16 +0000
ROA not before:           Tue 16 Jun 2026 14:52:16 +0000
ROA not after:            Tue 15 Jun 2027 14:57:16 +0000
asID:                     138421
IP address blocks:        140.210.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 21:18:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:4c:bc:cd:34:9e:db:c3:96:b4:ce:60:9e:65:e3:b7:ec:1a:97:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
        Validity
            Not Before: Jun 16 14:52:16 2026 GMT
            Not After : Jun 15 14:57:16 2027 GMT
        Subject: CN=A92E234BDF0EBD94ED08045BAB4A864F823D1687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:5a:98:02:63:39:4e:52:64:f4:80:b6:90:
                    35:55:2e:22:db:cc:61:09:04:f2:8d:f9:e3:15:9b:
                    cb:f9:1e:33:e3:b2:dc:dc:fe:f8:43:cb:3f:87:b5:
                    e7:64:d6:23:59:34:cc:f3:15:28:a9:f6:22:b1:0d:
                    6f:bd:1c:0f:63:5f:99:64:d5:f3:3f:a3:ff:be:9f:
                    89:be:d1:f0:b9:22:58:30:0b:e3:ea:9c:01:58:3b:
                    18:f2:fa:8e:2a:bd:9b:40:05:f5:07:62:71:69:05:
                    73:79:1e:1a:16:81:fe:c7:a5:7e:d8:1d:2d:5f:82:
                    d0:0c:e3:15:2d:62:28:4a:1a:61:b9:e1:9b:c3:d3:
                    2c:be:ec:18:8c:16:38:b3:6d:18:6c:95:1c:8a:37:
                    12:f0:51:5e:6b:12:e8:db:a8:0d:7e:20:3e:02:1d:
                    ba:36:b6:85:8d:3c:3e:27:47:a4:8b:15:e9:01:cf:
                    79:0b:34:51:41:28:e8:c4:ab:20:ea:d1:1a:7f:f6:
                    61:d1:a0:e2:d7:a1:50:d0:05:80:dd:93:bc:94:62:
                    4c:ab:be:af:ed:ed:29:55:02:60:11:e1:ff:11:cb:
                    2a:0e:8c:73:17:c8:ec:ae:f1:dc:85:0c:9a:ac:fe:
                    61:59:9b:3e:69:40:be:27:b1:b4:fd:6d:3f:49:8d:
                    cb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2E:23:4B:DF:0E:BD:94:ED:08:04:5B:AB:4A:86:4F:82:3D:16:87
            X509v3 Authority Key Identifier:
                keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3132382e302f31392d3139203d3e20313338343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d1:c7:24:65:51:d0:79:f5:ce:36:71:32:bd:27:fe:a1:89:6f:
         f9:1d:3f:20:d3:89:4a:bb:4d:99:4c:ec:02:a4:20:e7:b1:85:
         96:8c:e3:0e:0f:eb:e4:b7:46:e3:4a:99:3c:f9:61:c0:8a:22:
         7c:39:d1:0d:47:bc:1c:c6:8d:fd:5f:cc:29:90:59:fb:31:0f:
         7f:4f:83:47:b4:6b:a4:b9:4d:9a:70:21:ae:7e:07:5d:c8:21:
         b8:31:ae:b2:7b:d0:c9:74:48:01:1f:e0:5d:ee:49:65:d6:9f:
         52:fb:a4:06:23:4c:f5:af:b5:1f:87:42:bf:f5:85:40:5e:d5:
         64:4b:e1:8f:9f:49:3a:53:d0:a1:bd:ec:fa:de:bc:41:15:ff:
         3d:d8:ac:4e:f6:ce:95:b3:19:3c:26:af:dd:59:a8:b6:bb:74:
         93:61:7c:7e:2d:89:7b:ed:6f:96:84:1c:c6:b2:c8:e2:01:43:
         86:cb:0f:75:3a:1b:3c:66:91:92:4e:aa:4a:0b:54:f1:75:8f:
         e8:68:0d:5d:68:d3:e4:f8:ce:42:66:58:cd:6c:40:a0:38:0f:
         f9:e1:8d:0f:6c:0d:13:1c:3b:4f:da:c7:26:91:ea:48:59:6d:
         0e:e9:56:9e:01:a5:e2:74:4a:9d:9c:83:3d:08:c6:0e:92:62:
         e1:f3:39:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:37:32 2026 by rpki-client