Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234302e302e302f31372d3137203d3e20313531303538.roa
File:                     3134302e3234302e302e302f31372d3137203d3e20313531303538.roa (raw, json)
Hash identifier:          2Am2gfuQLHUN7wkypc5YSVzG0e9vHkv3Tz87ui8eZrA=
Subject key identifier:   6D:20:6B:BC:C6:2A:B1:BF:2B:F5:44:13:5C:46:79:8B:43:40:42:A1
Certificate issuer:       /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial:       07BDB79EB6B6128E0C0A2ACF2A729B5603E61D04
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234302e302e302f31372d3137203d3e20313531303538.roa
Signing time:             Wed 03 Jun 2026 16:45:37 +0000
ROA not before:           Wed 03 Jun 2026 16:40:37 +0000
ROA not after:            Wed 02 Jun 2027 16:45:37 +0000
asID:                     151058
IP address blocks:        140.240.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:bd:b7:9e:b6:b6:12:8e:0c:0a:2a:cf:2a:72:9b:56:03:e6:1d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
        Validity
            Not Before: Jun  3 16:40:37 2026 GMT
            Not After : Jun  2 16:45:37 2027 GMT
        Subject: CN=6D206BBCC62AB1BF2BF544135C46798B434042A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b0:b6:d1:61:3b:72:d1:99:04:fb:30:a3:9c:
                    41:4e:e0:12:c2:1a:a5:a7:7d:7d:06:09:52:77:c5:
                    70:73:9c:f6:66:62:df:51:fa:49:83:8c:34:db:84:
                    7d:ec:d8:30:63:46:a9:5c:e8:bc:0d:c9:0c:94:3e:
                    7b:58:c3:b7:fc:94:83:1b:ae:4a:7a:6f:45:b4:8a:
                    3e:84:74:10:5e:5a:a3:d9:86:56:5d:9f:da:48:cd:
                    2d:be:52:56:33:0d:a7:66:fe:d0:1b:9d:3a:5a:6c:
                    4e:ee:f4:9f:1e:06:72:bf:b5:a7:b4:97:34:82:c6:
                    cc:02:4e:a5:26:19:a6:b2:72:ec:1d:bf:b7:d2:44:
                    70:cd:28:c5:90:c3:8a:cd:54:08:42:f8:25:11:97:
                    eb:fe:06:0c:6b:c9:08:c8:82:ff:5a:fd:6c:b9:73:
                    03:d7:2a:f0:13:aa:c1:ac:a8:e8:6c:7e:d8:10:06:
                    2c:b9:62:ea:fb:be:96:fd:d3:98:b1:b7:18:15:a2:
                    79:78:a4:98:f6:e2:73:2b:1c:2e:f5:56:e0:d4:12:
                    db:94:93:87:26:83:da:2d:88:3a:90:29:75:e7:c8:
                    37:34:6f:e3:aa:26:24:2a:4e:4f:2c:57:3d:9d:cb:
                    e6:45:6a:54:b8:15:28:f4:ab:9c:d6:55:43:6f:8f:
                    ad:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:20:6B:BC:C6:2A:B1:BF:2B:F5:44:13:5C:46:79:8B:43:40:42:A1
            X509v3 Authority Key Identifier:
                keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234302e302e302f31372d3137203d3e20313531303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.240.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6c:6f:50:c7:7b:1c:4f:76:2e:a0:41:6a:43:97:08:72:4e:f7:
         95:b5:f4:dd:a4:43:3d:db:06:66:d7:54:e8:75:9c:a9:86:b8:
         76:45:e5:46:1c:f1:a6:d5:96:1b:85:45:d1:62:e7:b3:a4:ba:
         c4:91:7c:2a:b4:cb:01:f5:ea:fd:d9:69:28:85:d6:51:90:d4:
         a1:dc:c3:31:8f:1b:32:76:0e:2b:ce:8d:3f:c4:af:b1:bd:44:
         92:22:54:e5:2c:1e:40:90:59:fc:ac:af:85:f0:af:cd:02:54:
         70:8d:ba:82:d2:4d:b8:28:55:ba:bc:c9:9f:c1:e8:e5:51:ed:
         87:c4:e4:67:7b:ec:16:c5:bd:4d:39:02:45:54:98:01:c0:a6:
         58:d5:f2:80:e4:6e:3c:72:4a:a4:ac:45:b7:0e:0c:da:fc:bc:
         60:d3:0c:e7:a9:76:73:51:96:7c:a3:70:04:f8:f4:7b:c8:3c:
         0d:2a:3f:6e:cb:05:e0:36:59:79:d5:22:68:61:85:10:9e:43:
         85:46:b9:52:4d:18:78:d2:a8:ea:f4:67:2f:f8:c4:fe:c7:a5:
         15:f5:1e:db:17:70:cc:75:11:a6:17:03:6e:18:74:e6:f2:87:
         7f:16:ee:fa:8c:b7:43:81:2c:73:34:d7:a9:24:11:6a:5b:fd:
         25:28:9d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:12 2026 by rpki-client