Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3139322e302f31392d3139203d3e20313334353432.roa
File:                     3134302e3231302e3139322e302f31392d3139203d3e20313334353432.roa (raw, json)
Hash identifier:          rlX15qzFvU60+ZZUfps3VZHuenrjIhvsbwypGw1jG28=
Subject key identifier:   67:48:3D:35:40:0B:10:99:81:6B:11:FD:34:5F:46:44:7D:92:C7:39
Certificate issuer:       /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial:       5407A2036E2CB04ECF6A7AF10764CC936EFEFD36
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3139322e302f31392d3139203d3e20313334353432.roa
Signing time:             Thu 11 Jun 2026 16:02:06 +0000
ROA not before:           Thu 11 Jun 2026 15:57:06 +0000
ROA not after:            Thu 10 Jun 2027 16:02:06 +0000
asID:                     134542
IP address blocks:        140.210.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:07:a2:03:6e:2c:b0:4e:cf:6a:7a:f1:07:64:cc:93:6e:fe:fd:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
        Validity
            Not Before: Jun 11 15:57:06 2026 GMT
            Not After : Jun 10 16:02:06 2027 GMT
        Subject: CN=67483D35400B1099816B11FD345F46447D92C739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:85:d2:b4:91:71:7b:bc:b8:9b:b9:fb:69:53:
                    d1:c3:f2:4c:90:e9:fe:e1:da:ab:0b:22:0e:53:42:
                    65:1b:87:4a:c5:78:3b:f6:e4:4a:da:e6:00:94:15:
                    11:87:76:73:ed:bf:66:0f:d5:e7:95:2e:5d:a9:40:
                    3a:55:ea:b7:c0:b4:8b:31:e6:d1:76:cd:1b:34:27:
                    20:fe:8e:6a:74:fa:ea:f5:21:b2:47:98:66:83:96:
                    23:73:84:8c:12:1d:10:65:48:82:76:03:cc:10:ba:
                    18:ae:ea:db:62:ec:8e:75:c4:27:db:77:8d:6c:aa:
                    ea:91:dc:45:94:77:07:95:ed:34:44:cd:fc:77:2a:
                    ee:eb:fd:0a:79:67:02:02:6d:21:65:99:75:17:87:
                    b4:17:5c:ab:b6:62:7c:af:a3:13:be:ac:81:cc:b2:
                    8d:a0:70:00:41:91:66:a0:76:34:5d:f5:de:ec:42:
                    2c:0c:19:b1:01:28:35:ca:21:dc:b8:b8:da:94:4e:
                    a3:60:51:0e:4e:82:c8:1b:1d:64:b1:aa:b6:d4:68:
                    48:d1:0a:f1:99:9a:72:3f:2a:43:f8:d6:7d:f2:77:
                    a7:42:dd:1e:a8:5e:d4:c8:e2:ae:7c:b2:fa:3c:38:
                    5e:be:45:ef:18:ec:d4:83:d0:42:dd:82:8f:26:90:
                    27:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:48:3D:35:40:0B:10:99:81:6B:11:FD:34:5F:46:44:7D:92:C7:39
            X509v3 Authority Key Identifier:
                keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3139322e302f31392d3139203d3e20313334353432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         90:c5:a5:59:92:db:51:61:da:84:69:a2:9e:0f:76:5d:5c:41:
         0d:38:2a:52:d3:fb:9b:8d:26:4e:a9:c1:03:b3:1c:0b:d8:56:
         ec:f5:f7:9f:ea:b5:9c:69:e5:69:62:5a:a2:a0:ef:3f:11:ff:
         94:75:55:34:29:e8:13:85:88:92:06:a6:1c:dd:28:7d:6c:7a:
         c9:d7:5e:b3:c7:c7:07:cd:ed:c3:e4:9d:d6:9c:fe:39:f3:99:
         a3:fd:b5:da:b7:c8:b2:81:e9:01:07:88:fc:7e:db:98:d9:6a:
         d7:84:bd:e0:8c:7d:66:49:b5:59:0c:c3:a4:31:b9:29:7c:77:
         bf:79:b9:78:70:b1:d6:73:5c:04:82:c9:46:c7:bd:24:5b:8a:
         3f:9e:6f:74:ca:e8:1b:b1:ac:41:ba:24:d5:a9:a2:fd:d8:f7:
         d9:b7:c5:24:07:9c:f2:10:2b:c2:9f:d2:c4:97:19:a1:35:cb:
         07:d0:88:fa:c5:a2:f0:ae:c2:4f:ab:4b:4b:71:42:97:10:da:
         2a:1e:8c:1a:19:ff:df:1d:a2:82:16:b9:1c:e6:5c:21:bf:ca:
         d9:d8:72:cb:56:c8:82:51:4c:c2:7d:f3:4a:32:fa:8a:9c:a6:
         41:9d:80:d8:22:25:3c:ff:5c:2c:9e:f5:05:46:1b:f7:27:98:
         09:e3:ad:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:48 2026 by rpki-client