Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3131342e302f32342d3234203d3e203538353139.roa
File:                     3134302e3234362e3131342e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier:          g8LAOqkK4AaoPqcp7GbuO+nnwhgq4CjGidVLO7oJqjk=
Subject key identifier:   CE:16:CE:73:2C:0E:9D:C7:59:CC:6C:AD:BF:69:96:75:7D:8C:66:D9
Certificate issuer:       /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial:       0F552BAE692BC2C6ED686963CF264DB636881542
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3131342e302f32342d3234203d3e203538353139.roa
Signing time:             Wed 03 Jun 2026 16:53:21 +0000
ROA not before:           Wed 03 Jun 2026 16:48:21 +0000
ROA not after:            Wed 02 Jun 2027 16:53:21 +0000
asID:                     58519
IP address blocks:        140.246.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:55:2b:ae:69:2b:c2:c6:ed:68:69:63:cf:26:4d:b6:36:88:15:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
        Validity
            Not Before: Jun  3 16:48:21 2026 GMT
            Not After : Jun  2 16:53:21 2027 GMT
        Subject: CN=CE16CE732C0E9DC759CC6CADBF6996757D8C66D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:61:2e:cd:27:a1:6a:03:c8:ef:cd:da:10:49:
                    46:67:b2:f3:46:84:d5:fe:8a:49:fa:a8:47:46:35:
                    99:0a:6f:9f:6a:42:3c:73:2a:d2:b3:6f:0c:12:46:
                    63:90:db:14:d0:6f:ee:55:a8:ad:f1:1b:20:a9:c3:
                    a7:59:92:0c:3a:e7:a0:e6:a3:d4:40:05:74:b9:a7:
                    b8:a8:5c:67:6a:11:1e:eb:bd:0b:9e:79:52:56:64:
                    b8:62:37:10:85:6d:b1:82:3b:aa:ab:2f:17:a1:bf:
                    29:f1:85:79:49:13:c9:ef:bc:47:19:cd:4e:76:ee:
                    be:f7:dd:68:40:9d:2b:a5:05:e8:2e:2b:5c:8d:be:
                    61:12:8c:74:71:f6:4b:18:73:68:3d:93:e1:54:c7:
                    30:25:d1:ca:ce:74:17:7d:b3:18:72:52:8d:c1:d9:
                    19:fd:f2:19:a2:5e:3d:14:a0:f0:08:2e:e7:d3:32:
                    eb:8b:44:5a:26:d4:a2:4b:06:e1:68:dc:79:cb:ec:
                    cc:8f:1f:2a:e8:be:2b:fe:8f:9b:8b:d4:f7:2d:72:
                    09:5e:5f:8c:5c:5d:91:67:71:a5:88:bb:8e:c8:cf:
                    3a:a0:9f:d1:84:aa:49:d9:ee:bd:40:8c:28:1c:8f:
                    fc:0f:b4:79:96:23:17:a7:6f:f5:e4:1b:9a:0c:16:
                    5b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:16:CE:73:2C:0E:9D:C7:59:CC:6C:AD:BF:69:96:75:7D:8C:66:D9
            X509v3 Authority Key Identifier:
                keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3131342e302f32342d3234203d3e203538353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.246.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:45:58:97:38:36:7a:ae:de:a6:c9:b9:49:74:16:1a:c6:b2:
         a1:47:2a:da:27:fb:5d:4a:9a:0f:7a:fa:68:61:1d:1e:e8:f2:
         69:f9:8f:2b:18:e2:9b:49:82:e7:72:73:b3:d1:24:aa:f8:5c:
         65:fa:65:fa:3d:0b:87:28:de:e3:84:d3:2b:72:ed:e3:2b:68:
         7a:cf:c8:2d:68:1d:be:b8:2d:dd:96:70:a6:e1:fa:f6:e7:ed:
         49:b6:d1:21:ed:52:1c:04:24:6f:c2:e4:f1:d0:4a:7a:7e:43:
         ad:3c:dd:59:b6:8c:c3:4a:af:8c:e7:b7:2f:d0:ee:28:32:f1:
         0a:53:29:cf:5f:60:11:ca:67:aa:cc:90:a8:99:be:69:e7:07:
         5c:51:3b:d4:3d:d7:09:e0:08:43:fa:a6:9b:f3:55:a0:77:00:
         73:3d:1b:0f:84:66:a8:15:03:61:7c:3e:4d:c7:89:29:fe:c8:
         43:a5:3d:75:45:25:1d:a0:a8:d3:89:6e:7a:87:c2:39:98:85:
         53:b6:b2:90:bb:e9:69:5f:b5:d5:a6:4c:69:39:7e:cf:c9:9a:
         53:2e:9f:a8:17:04:ad:19:36:40:62:d5:6e:36:b3:24:d4:4c:
         04:80:d1:60:77:1d:44:53:24:5d:5c:00:4a:c2:5f:d3:d8:c2:
         cd:b3:4f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:09 2026 by rpki-client