Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3130362e302f32342d3234203d3e203538353139.roa
File:                     3134302e3234362e3130362e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier:          rOAaG7ilcou4FqJd999larI9U2GBedlC4Lnt/4fEwf0=
Subject key identifier:   A3:AF:CF:B6:0E:E3:FF:44:AC:1B:51:01:8F:C5:B8:34:C8:FF:12:FC
Certificate issuer:       /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial:       634F778DF2DE01F17817FE49962BB663E9437D77
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3130362e302f32342d3234203d3e203538353139.roa
Signing time:             Wed 03 Jun 2026 16:53:20 +0000
ROA not before:           Wed 03 Jun 2026 16:48:20 +0000
ROA not after:            Wed 02 Jun 2027 16:53:20 +0000
asID:                     58519
IP address blocks:        140.246.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:4f:77:8d:f2:de:01:f1:78:17:fe:49:96:2b:b6:63:e9:43:7d:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
        Validity
            Not Before: Jun  3 16:48:20 2026 GMT
            Not After : Jun  2 16:53:20 2027 GMT
        Subject: CN=A3AFCFB60EE3FF44AC1B51018FC5B834C8FF12FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d1:96:05:12:86:32:e4:70:f7:54:52:66:cb:
                    a0:e9:11:3e:34:df:30:47:f0:96:96:95:b7:1f:1c:
                    2d:3d:ec:55:60:65:de:9b:e4:a9:1d:9d:c0:64:eb:
                    e3:c8:2e:76:b9:d4:50:7e:91:28:cd:3c:be:ca:60:
                    b3:3b:57:d1:cb:e0:0e:91:fc:85:ed:11:23:81:54:
                    9c:df:ed:ee:0d:b0:65:93:72:8b:e4:8a:cb:b3:8a:
                    09:48:6a:94:41:85:b1:9d:4b:fa:df:f7:4a:cb:fd:
                    e8:d1:eb:9c:c8:b6:0a:58:06:b3:17:53:22:98:7a:
                    89:6e:bf:f1:7e:1a:65:a0:f6:c8:c3:1a:04:08:05:
                    6e:03:70:40:51:00:17:04:81:ef:12:40:3e:15:ad:
                    4b:4a:6e:ed:73:3c:18:ff:f8:7f:2b:37:ca:f1:a1:
                    9e:ce:9b:01:29:d6:1b:cd:84:50:d0:f2:5b:25:ea:
                    0e:f6:a9:02:77:6a:c9:44:2c:6d:98:47:e9:58:b4:
                    c0:6c:24:50:5b:6c:a8:72:2c:d3:88:b1:5f:10:3b:
                    74:dc:00:a4:66:c0:78:c1:cb:07:03:c9:6a:e9:63:
                    c2:35:b8:db:be:34:2b:5f:1e:44:86:5c:61:c7:cd:
                    59:1f:94:83:71:89:c8:55:26:2b:50:4a:ae:58:61:
                    84:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AF:CF:B6:0E:E3:FF:44:AC:1B:51:01:8F:C5:B8:34:C8:FF:12:FC
            X509v3 Authority Key Identifier:
                keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3130362e302f32342d3234203d3e203538353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.246.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:97:4d:f1:1f:23:d5:91:ed:ca:bb:e1:b2:cb:fa:a5:3c:80:
         0d:95:7d:f2:c9:aa:8d:b2:1e:9e:6f:32:dc:cc:03:18:0a:22:
         47:24:0c:52:84:b3:60:ec:de:50:0d:9f:78:31:cb:a9:35:85:
         64:7a:ed:7e:a0:91:b8:e5:f9:08:eb:1a:71:b3:50:85:7c:d0:
         60:66:d8:91:6f:2a:cf:f9:fd:ae:6e:1b:03:4e:41:97:7e:04:
         83:42:4e:d8:72:8c:fa:78:73:b6:56:fc:4d:b5:ae:b6:28:fa:
         f2:dc:ee:9c:f9:11:22:d5:80:68:dc:ea:93:03:36:0d:eb:81:
         81:84:a1:3d:b7:f5:da:cd:ee:71:1c:83:6c:82:87:cc:26:de:
         3e:84:f4:d7:2e:58:6d:85:07:70:a2:44:2b:9c:29:21:43:f1:
         13:49:2b:e6:78:0e:34:d2:64:4b:7a:f7:37:51:67:39:60:86:
         ec:0f:f5:4e:23:c8:ed:32:c5:9b:24:42:07:55:b8:0f:a7:64:
         3b:d9:89:1c:71:42:0c:08:0e:ae:25:f7:91:80:54:a9:45:2e:
         07:fa:89:1d:9e:8e:c8:2d:b9:7a:66:6f:36:9c:5e:2a:45:e6:
         04:99:66:a2:d2:b5:19:88:2e:dd:bb:5d:2b:f6:21:67:44:c4:
         7f:8d:cb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:04 2026 by rpki-client