Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3232342e302f32302d3230203d3e20313338343037.roa
File:                     3134302e3231302e3232342e302f32302d3230203d3e20313338343037.roa (raw, json)
Hash identifier:          oHHm8NcaL/01AXqUYKmQaJHil+O5pI0bE5NwlVWo7js=
Subject key identifier:   8A:D2:3B:8C:A5:73:20:E2:6F:D5:E9:7D:09:70:39:B3:B2:52:CF:8A
Certificate issuer:       /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial:       13BDE8542D6132BE0AB7081F274144BF1DAF6F11
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3232342e302f32302d3230203d3e20313338343037.roa
Signing time:             Thu 11 Jun 2026 16:02:06 +0000
ROA not before:           Thu 11 Jun 2026 15:57:06 +0000
ROA not after:            Thu 10 Jun 2027 16:02:06 +0000
asID:                     138407
IP address blocks:        140.210.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:bd:e8:54:2d:61:32:be:0a:b7:08:1f:27:41:44:bf:1d:af:6f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
        Validity
            Not Before: Jun 11 15:57:06 2026 GMT
            Not After : Jun 10 16:02:06 2027 GMT
        Subject: CN=8AD23B8CA57320E26FD5E97D097039B3B252CF8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:eb:b1:40:ed:f0:39:1a:f7:23:c9:9c:cc:43:
                    03:d1:68:ec:26:7c:1a:79:df:a0:39:64:26:d3:bb:
                    89:d4:17:bc:12:ab:7f:1c:0a:3c:ef:8e:70:69:e2:
                    83:c0:f0:1b:0b:ec:23:a1:56:a7:ae:95:cc:92:fc:
                    ed:6d:60:87:a9:3a:c0:55:63:97:fa:d0:43:c4:89:
                    e7:dc:c9:d6:07:9c:94:a1:d0:cc:45:e0:08:9b:59:
                    70:0e:57:f8:00:e4:f8:98:26:00:f0:c1:c8:57:0d:
                    0f:eb:fd:2f:a1:3b:05:07:2b:d0:60:0b:b8:91:c8:
                    16:1e:6b:8c:22:28:0a:0d:86:dd:97:49:3f:d6:5c:
                    67:29:ed:d8:ce:a7:2a:3d:55:5f:00:e5:03:26:3c:
                    54:7b:69:8e:19:43:c0:6b:4f:eb:bf:cf:42:cb:9f:
                    02:11:a6:ff:2d:f5:a2:28:2d:f5:cb:9a:b4:fc:eb:
                    ed:2f:ef:db:d6:ad:14:0d:65:ac:a2:a0:da:a1:20:
                    56:3f:43:7f:15:8c:67:61:6a:57:0a:2a:bb:bd:bc:
                    0d:02:24:95:aa:95:f6:1a:70:2b:21:fc:68:c6:4c:
                    84:eb:7a:4a:5c:d8:27:47:5c:5e:37:dd:91:e0:b2:
                    c1:5e:53:07:d0:df:a2:b8:66:ed:62:5f:19:58:37:
                    e5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D2:3B:8C:A5:73:20:E2:6F:D5:E9:7D:09:70:39:B3:B2:52:CF:8A
            X509v3 Authority Key Identifier:
                keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3232342e302f32302d3230203d3e20313338343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a1:1f:6f:ba:9e:42:3b:9c:0b:01:9d:01:ad:b5:b8:b4:71:37:
         af:59:2a:d7:4e:e8:d1:3c:5b:c5:38:43:87:13:a8:9d:94:b2:
         6b:09:3a:93:29:47:de:9f:e7:8c:6d:c7:44:88:7e:02:42:76:
         61:be:57:8e:bf:0a:20:a1:49:55:42:b4:e5:4f:5f:fe:df:a6:
         22:8e:b9:fd:de:fa:2d:d5:0e:6e:33:8b:a0:00:a9:73:87:df:
         97:c7:01:be:d7:f8:55:51:13:b1:25:0e:82:79:20:03:cd:a0:
         d9:ea:08:28:69:b6:be:63:3c:e5:82:8b:d6:99:a9:bf:a7:40:
         31:a9:68:35:e3:0f:d1:ea:ef:8a:58:e4:30:3d:d3:3e:12:2c:
         9c:1f:70:14:8f:5d:a9:4f:25:e1:42:a4:24:89:ae:bb:f3:84:
         82:f8:32:09:99:83:32:a1:64:02:d0:c6:9b:69:8e:15:a0:af:
         23:32:df:59:b4:10:80:38:d6:94:08:27:40:73:6a:0b:79:43:
         af:e9:7d:2f:f0:c7:a8:22:5e:0a:2d:2c:12:2b:87:22:cc:bb:
         ff:93:32:55:dd:80:5b:7f:04:7d:74:61:26:53:e4:98:4c:54:
         d2:72:34:af:92:f0:bc:76:e0:1b:66:22:3d:70:df:4e:f7:c9:
         0d:71:8c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:59 2026 by rpki-client