Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3136332e302f32342d3234203d3e203538353139.roa
File:                     3134302e3234362e3136332e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier:          EyeW7GTq860nXP6nRYT6cDEHf88sXly92xOa2GtXpyU=
Subject key identifier:   C8:7F:8A:65:06:CB:5E:7E:EA:93:AC:5C:43:43:3B:27:38:8B:95:8F
Certificate issuer:       /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial:       49EC27E7E284F6178E8EE9DB29911D031484B1C0
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3136332e302f32342d3234203d3e203538353139.roa
Signing time:             Wed 03 Jun 2026 16:53:20 +0000
ROA not before:           Wed 03 Jun 2026 16:48:20 +0000
ROA not after:            Wed 02 Jun 2027 16:53:20 +0000
asID:                     58519
IP address blocks:        140.246.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ec:27:e7:e2:84:f6:17:8e:8e:e9:db:29:91:1d:03:14:84:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
        Validity
            Not Before: Jun  3 16:48:20 2026 GMT
            Not After : Jun  2 16:53:20 2027 GMT
        Subject: CN=C87F8A6506CB5E7EEA93AC5C43433B27388B958F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:76:3a:4c:3d:19:30:32:ce:a4:ec:62:f0:63:
                    f7:ae:01:9d:d3:9f:97:16:02:9c:52:9d:ce:0d:46:
                    5e:f7:a4:0d:27:fc:8a:bc:9b:6a:11:03:18:8a:38:
                    43:76:fc:14:8d:6d:ec:5f:c2:23:32:ea:99:bf:d1:
                    ee:3e:9a:f3:55:84:0d:80:c4:01:6a:6a:0a:ca:11:
                    2b:03:1c:97:82:73:af:0f:a9:eb:15:53:eb:24:6b:
                    63:39:73:a0:3b:19:09:7d:79:1c:26:16:c0:51:fa:
                    fd:f0:22:ee:f1:5e:2a:b6:4e:34:5b:ab:ca:c0:5b:
                    4f:5b:47:f2:da:62:e1:3d:17:78:66:85:07:61:83:
                    26:87:56:9c:06:4c:4d:91:20:35:01:cf:b2:94:f7:
                    b0:69:3b:c3:6c:61:f5:56:31:26:bc:fc:dc:5c:29:
                    f4:b1:0a:c7:36:42:60:43:34:a2:12:35:41:59:fc:
                    a1:bb:66:a0:ce:c1:60:49:d1:41:3a:f2:13:3a:c8:
                    7f:9d:2f:7c:28:6b:80:9e:0e:fa:70:2b:72:32:99:
                    0e:37:0c:46:93:d6:c2:f5:72:3c:90:ff:6d:fb:a9:
                    e8:4a:c2:8a:4b:23:43:e4:e3:20:0c:d9:05:5e:71:
                    66:22:49:91:34:e9:89:26:a4:e1:f6:54:ff:51:bf:
                    79:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7F:8A:65:06:CB:5E:7E:EA:93:AC:5C:43:43:3B:27:38:8B:95:8F
            X509v3 Authority Key Identifier:
                keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3136332e302f32342d3234203d3e203538353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.246.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:e1:ad:28:3f:fc:10:96:cc:b2:fb:94:78:b2:6f:da:c0:b5:
         73:bd:c6:d0:66:87:f7:79:71:58:2a:8a:9c:2f:1d:f1:f9:50:
         f4:f9:0a:b1:14:11:9e:35:b9:4f:ee:be:cd:e9:d2:62:a3:be:
         b0:69:b2:af:e9:34:58:f1:a6:57:7e:fa:36:0e:a8:e2:4c:d8:
         e2:2f:ab:1d:69:5b:06:3e:84:1b:31:c8:15:e6:88:36:62:08:
         cf:b8:5d:2f:0e:1c:24:03:62:93:37:19:1b:78:37:09:4f:29:
         6b:9a:59:66:d0:d6:f2:97:5a:6e:e2:5e:dc:2a:c6:ee:5e:fe:
         a1:90:63:67:68:6d:6a:96:04:b9:21:5e:69:bf:cd:83:a9:27:
         cc:e8:64:b9:69:c7:08:55:c6:0d:e2:4a:f7:f8:bf:f0:87:16:
         26:75:af:d8:ac:ba:12:e6:95:39:7e:8e:82:78:1a:9e:95:67:
         78:03:92:24:f9:ff:b5:90:88:b6:9c:f4:60:82:44:83:e8:a0:
         92:bb:b8:80:a3:d8:73:1e:96:13:2b:4d:1b:6a:d7:1c:42:a8:
         4d:74:13:59:c8:7c:ca:72:36:a2:d9:62:3f:5c:6f:2d:cc:0b:
         b8:04:0d:0b:7c:28:c0:60:67:73:79:a7:5c:6a:07:f6:2e:88:
         01:48:c4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:44 2026 by rpki-client