Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3139322e302f31392d3139203d3e20313338343037.roa
File:                     3134302e3231302e3139322e302f31392d3139203d3e20313338343037.roa (raw, json)
Hash identifier:          9FDATEDTu3b4lmf+Ad0akcVQ3xn5oZnFj6yCQhJ9ksc=
Subject key identifier:   73:4E:F5:03:40:7B:A0:80:8F:34:B4:E7:4A:3D:DF:2E:38:3F:E8:48
Certificate issuer:       /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial:       5E868342F16317106369016B12C5C656BCEFC314
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3139322e302f31392d3139203d3e20313338343037.roa
Signing time:             Thu 11 Jun 2026 16:02:06 +0000
ROA not before:           Thu 11 Jun 2026 15:57:06 +0000
ROA not after:            Thu 10 Jun 2027 16:02:06 +0000
asID:                     138407
IP address blocks:        140.210.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:86:83:42:f1:63:17:10:63:69:01:6b:12:c5:c6:56:bc:ef:c3:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
        Validity
            Not Before: Jun 11 15:57:06 2026 GMT
            Not After : Jun 10 16:02:06 2027 GMT
        Subject: CN=734EF503407BA0808F34B4E74A3DDF2E383FE848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7c:90:47:dd:b5:a5:90:35:ff:3a:f8:72:cf:
                    2f:d0:89:bb:ca:3f:5d:87:b9:0a:6f:6a:9f:83:f5:
                    5d:64:a1:c7:46:90:23:12:4d:d6:bc:dd:1a:ed:01:
                    4e:ea:ef:d1:32:02:db:dd:cb:8e:7d:7d:fd:1d:9e:
                    b0:fe:8e:03:ea:34:83:ec:67:88:17:af:ed:00:22:
                    04:f1:09:99:e9:6f:35:3a:20:4a:eb:9a:69:0b:e6:
                    a0:17:61:cb:a7:b5:d9:9a:c5:73:91:24:51:d3:71:
                    da:cc:5b:84:7b:50:cc:2e:9b:5f:5e:5f:a5:85:62:
                    9b:90:f8:c5:7c:05:20:98:5e:64:76:6c:df:16:8d:
                    0d:99:06:bb:c5:35:e7:77:58:5b:7d:bd:f5:08:de:
                    5e:ad:5d:75:cf:53:c1:20:ac:c2:6c:7f:98:a1:93:
                    eb:e3:95:a0:74:0e:d8:a9:35:08:46:67:99:9f:e0:
                    c1:fe:bc:7f:73:9b:54:bb:7c:78:3a:00:41:89:31:
                    4c:70:74:e0:96:77:3d:74:80:ee:cc:5b:9f:d8:d3:
                    3f:6a:17:c1:19:28:5c:e0:e9:06:20:b7:77:c9:ac:
                    82:1b:27:50:67:61:b7:6d:cf:b9:2c:7d:e8:26:75:
                    03:43:32:73:61:12:4c:67:ed:ae:b9:f1:1e:66:d8:
                    01:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4E:F5:03:40:7B:A0:80:8F:34:B4:E7:4A:3D:DF:2E:38:3F:E8:48
            X509v3 Authority Key Identifier:
                keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3139322e302f31392d3139203d3e20313338343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         37:8e:d5:15:07:82:e8:61:dc:67:4d:c4:7e:4a:cd:b4:d1:11:
         09:e9:de:8e:2d:78:0d:e4:b0:50:6d:6f:87:19:3d:cb:87:71:
         bb:0c:89:f2:b0:b6:80:38:47:a2:f2:be:cb:04:3c:e7:da:21:
         6a:da:c9:33:1a:17:7e:f2:3a:ff:bd:69:e3:86:59:9c:ee:bf:
         f6:ec:d8:19:48:00:dd:b1:96:38:66:b9:e5:e3:08:f2:20:bf:
         01:f5:7d:c9:17:60:83:6d:3e:54:2c:d7:76:9f:68:0d:a1:69:
         d5:70:aa:8e:59:96:3f:f3:4d:b4:07:42:37:05:2f:74:17:78:
         9b:48:24:94:de:c3:3a:d5:d8:ad:af:7d:d7:71:58:57:cc:cd:
         89:41:fc:fe:47:c6:c2:da:8f:ac:96:ac:86:fb:b9:fd:c4:41:
         f7:97:ca:65:33:85:1a:a1:27:b3:54:3d:3b:9c:ab:cb:92:12:
         af:99:95:7e:cd:27:4b:be:5f:71:fb:67:bd:73:47:45:10:d2:
         94:c4:ce:8c:f3:fb:63:27:70:9e:d2:48:4c:e9:fd:10:13:7e:
         7a:5c:99:20:8c:c3:6b:5a:cf:9e:af:69:9d:6c:5d:55:8b:b5:
         ee:f0:81:b0:75:3e:0e:f4:8e:b5:b3:6e:04:5f:eb:d4:e6:c1:
         3f:9c:21:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:47 2026 by rpki-client