Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e31332e302f32342d3234203d3e203538353139.roa
File:                     3134302e3234362e31332e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier:          5y12Wce9fklbj0afXd8g6CzAxFWcul0pB5amq76xMhc=
Subject key identifier:   AA:EE:60:4B:67:7C:78:30:1B:44:F9:96:45:15:39:7A:B8:46:BE:E9
Certificate issuer:       /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial:       2591AE54E2215C52E125A49D8D46922168DE1CFC
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e31332e302f32342d3234203d3e203538353139.roa
Signing time:             Wed 03 Jun 2026 16:53:21 +0000
ROA not before:           Wed 03 Jun 2026 16:48:21 +0000
ROA not after:            Wed 02 Jun 2027 16:53:21 +0000
asID:                     58519
IP address blocks:        140.246.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:91:ae:54:e2:21:5c:52:e1:25:a4:9d:8d:46:92:21:68:de:1c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
        Validity
            Not Before: Jun  3 16:48:21 2026 GMT
            Not After : Jun  2 16:53:21 2027 GMT
        Subject: CN=AAEE604B677C78301B44F9964515397AB846BEE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b8:f7:76:73:aa:c4:35:26:21:3e:4d:3b:bb:
                    8d:4a:da:08:f2:53:27:75:ab:1d:24:15:86:10:ab:
                    a2:cf:1f:89:bc:58:01:5b:c0:88:46:7f:49:3f:eb:
                    ab:fe:cb:ea:e6:c4:63:b4:87:3f:b6:97:bd:58:07:
                    97:33:3e:f0:23:bd:22:bb:df:eb:53:0c:28:05:7f:
                    75:a1:b1:bb:7d:f7:58:02:68:40:99:82:06:8a:ce:
                    f1:dc:a8:e6:57:73:48:a2:91:7e:89:d1:b7:31:71:
                    be:a8:94:47:96:ac:36:ab:f1:b1:d7:70:0a:d3:3e:
                    fe:b5:04:fe:27:81:6d:b6:1a:62:43:1c:71:95:71:
                    92:51:18:b9:9b:0c:4c:e2:65:4f:94:b6:51:64:11:
                    4a:9f:3c:77:d3:21:ec:f1:35:c8:67:d0:02:7a:42:
                    86:97:b7:24:02:0e:3c:96:2a:35:3f:bf:a4:ee:89:
                    bc:3b:9a:ac:30:7e:ed:12:31:0b:2d:8f:b8:d8:4c:
                    f2:5d:e3:4e:61:49:a8:56:e2:de:99:fe:c2:2f:d8:
                    5d:60:75:a7:3a:f0:10:d8:5f:23:5b:87:1e:75:16:
                    8a:b3:de:e6:74:21:eb:f3:ff:24:6b:13:e3:45:8a:
                    f4:84:13:5d:8e:0e:03:97:2d:ae:17:27:71:e7:40:
                    c2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EE:60:4B:67:7C:78:30:1B:44:F9:96:45:15:39:7A:B8:46:BE:E9
            X509v3 Authority Key Identifier:
                keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e31332e302f32342d3234203d3e203538353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.246.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:20:87:93:f5:08:44:75:15:87:39:18:0b:a6:c2:ee:c8:db:
         ea:c2:a9:29:cf:23:7a:36:07:15:fb:72:1d:33:25:16:80:b9:
         4a:81:08:b6:8a:17:f2:1d:54:44:8c:c5:e0:d1:cd:7d:0b:61:
         1d:2d:fb:d3:42:15:5f:a3:22:72:c0:28:00:80:8b:6e:e1:69:
         e3:32:5b:ff:fb:71:82:bc:b4:ee:fc:80:0b:2f:38:55:6c:66:
         4c:c1:5f:4b:9c:fb:c7:e5:23:a6:de:65:04:6a:b4:f4:3d:48:
         bc:6f:f6:67:38:59:5d:6c:a1:e4:82:3b:b4:42:1b:12:8e:8e:
         a0:11:f4:d5:d5:86:09:23:55:70:8d:42:47:fc:9e:0f:1d:a2:
         b4:0b:35:a4:1f:d4:ef:cb:1c:a5:bf:90:77:70:9e:c3:a8:f6:
         50:1b:6a:61:74:db:c5:95:98:09:15:c0:4f:39:87:9c:b6:e3:
         af:ed:4c:04:72:73:31:41:4f:e5:d9:bb:52:a4:45:2e:b7:57:
         02:7d:c0:31:81:86:60:df:ad:5a:02:38:e4:87:de:8a:2f:d4:
         3f:fc:a0:48:dc:f2:2a:87:e8:c1:a5:e2:8b:82:9f:ac:b1:08:
         d2:c0:65:13:82:0c:82:8b:cd:ed:b2:72:f1:19:67:b0:60:b5:
         51:d0:1d:0e
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUJZGuVOIhXFLhJaSdjUaSIWjeHPwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1
M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDYwMzE2NDgyMVoX
DTI3MDYwMjE2NTMyMVowMzExMC8GA1UEAxMoQUFFRTYwNEI2NzdDNzgzMDFCNDRG
OTk2NDUxNTM5N0FCODQ2QkVFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKW493ZzqsQ1JiE+TTu7jUraCPJTJ3WrHSQVhhCros8fibxYAVvAiEZ/ST/r
q/7L6ubEY7SHP7aXvVgHlzM+8CO9Irvf61MMKAV/daGxu333WAJoQJmCBorO8dyo
5ldzSKKRfonRtzFxvqiUR5asNqvxsddwCtM+/rUE/ieBbbYaYkMccZVxklEYuZsM
TOJlT5S2UWQRSp88d9Mh7PE1yGfQAnpChpe3JAIOPJYqNT+/pO6JvDuarDB+7RIx
Cy2PuNhM8l3jTmFJqFbi3pn+wi/YXWB1pzrwENhfI1uHHnUWirPe5nQh6/P/JGsT
40WK9IQTXY4OA5ctrhcncedAwrsCAwEAAaOCAhQwggIQMB0GA1UdDgQWBBSq7mBL
Z3x4MBtE+ZZFFTl6uEa+6TAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf
sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1
RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v
c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBjQYIKwYBBQUHAQsEgYAwfjB8BggrBgEF
BQcwC4ZwcnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAy
OTA1OTc2ODM1LzAvMzEzNDMwMmUzMjM0MzYyZTMxMzMyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzNTM4MzUzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPYNMA0GCSqGSIb3DQEBCwUA
A4IBAQCCIIeT9QhEdRWHORgLpsLuyNvqwqkpzyN6NgcV+3IdMyUWgLlKgQi2ihfy
HVREjMXg0c19C2EdLfvTQhVfoyJywCgAgItu4WnjMlv/+3GCvLTu/IALLzhVbGZM
wV9LnPvH5SOm3mUEarT0PUi8b/ZnOFldbKHkgju0QhsSjo6gEfTV1YYJI1VwjUJH
/J4PHaK0CzWkH9Tvyxylv5B3cJ7DqPZQG2phdNvFlZgJFcBPOYectuOv7UwEcnMx
QU/l2btSpEUut1cCfcAxgYZg361aAjjkh96KL9Q//KBI3PIqh+jBpeKLgp+ssQjS
wGUTggyCi83tsnLxGWewYLVR0B0O
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:06 2026 by rpki-client