Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3136362e302f32342d3234203d3e203538353139.roa
File:                     3134302e3234362e3136362e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier:          ORtT44jmARltzQlF0ZFtYlr5EbmHwr/e1sCG64XWmIw=
Subject key identifier:   AC:63:CD:BE:3C:BE:53:63:B7:DC:54:3B:B2:7D:9C:8B:07:F0:8D:17
Certificate issuer:       /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial:       3B038BC99C288AF6978CE8E112E8EBA8E24EDD46
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3136362e302f32342d3234203d3e203538353139.roa
Signing time:             Wed 03 Jun 2026 16:53:21 +0000
ROA not before:           Wed 03 Jun 2026 16:48:21 +0000
ROA not after:            Wed 02 Jun 2027 16:53:21 +0000
asID:                     58519
IP address blocks:        140.246.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:03:8b:c9:9c:28:8a:f6:97:8c:e8:e1:12:e8:eb:a8:e2:4e:dd:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
        Validity
            Not Before: Jun  3 16:48:21 2026 GMT
            Not After : Jun  2 16:53:21 2027 GMT
        Subject: CN=AC63CDBE3CBE5363B7DC543BB27D9C8B07F08D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:82:74:b7:75:17:1a:a5:a3:c4:4b:8e:11:14:
                    3d:1f:1d:38:3d:1c:0f:a7:5f:b3:ed:38:68:06:fd:
                    15:8c:1d:cf:9e:14:0d:2e:c9:2e:65:87:0f:08:ae:
                    c1:ab:f8:26:ec:ec:04:bb:ab:1d:5c:41:d0:74:07:
                    77:23:5e:2b:6a:88:27:ab:83:83:39:9e:fc:00:bf:
                    b3:26:1c:70:57:f6:5d:80:92:3f:c1:50:d4:54:df:
                    45:17:c2:e8:4c:83:33:46:38:49:b0:6c:fb:61:50:
                    68:b8:ac:4b:87:da:b1:1f:16:e7:c4:21:8c:a7:4b:
                    96:35:26:9b:41:9a:c6:14:85:cb:bb:13:2b:2b:6c:
                    ed:f6:da:d2:0e:40:2e:a4:47:4b:87:bf:99:a8:84:
                    84:be:b9:63:4b:b1:d1:14:6c:b1:9b:70:d3:76:92:
                    c9:56:e8:90:2d:cc:85:c1:6f:ad:b8:99:f8:c5:db:
                    48:82:10:5a:5a:c3:42:1c:6f:b2:c4:94:26:c1:8f:
                    6f:3f:4a:ed:33:ef:99:d4:e7:02:b3:5a:5b:f8:5a:
                    35:39:95:bb:b6:03:8b:98:2a:2d:68:d9:a4:7a:b9:
                    30:1e:f1:ba:7e:66:6d:f8:24:8d:86:97:e9:a3:a0:
                    ca:c7:b3:4a:dd:78:f2:6e:e9:40:c8:98:4f:1f:7e:
                    33:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:63:CD:BE:3C:BE:53:63:B7:DC:54:3B:B2:7D:9C:8B:07:F0:8D:17
            X509v3 Authority Key Identifier:
                keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3136362e302f32342d3234203d3e203538353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.246.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:2d:1d:97:82:82:4c:4b:c5:8d:1a:1e:c0:6d:bb:5a:7f:6c:
         5e:97:bb:d5:25:e7:b7:09:79:61:e0:c9:e2:5d:c7:9e:15:77:
         f5:7d:47:f7:79:6f:1c:5a:ce:e9:d2:da:0e:8a:89:c2:bc:bf:
         f0:aa:1b:71:ff:32:e7:2c:1a:d2:bf:f3:27:f5:1e:41:7a:5d:
         6a:9b:d0:11:68:3d:f9:5a:42:5e:af:cb:f5:29:62:06:19:59:
         fe:ec:01:d9:f9:09:b5:10:f2:9d:20:e4:38:2b:f8:96:a8:b4:
         4b:5d:22:ee:93:d4:9d:56:84:8e:04:e8:3d:57:5a:a0:a1:d2:
         2e:0f:05:62:e6:ed:a5:58:ee:dc:5b:36:dc:3b:7d:6e:57:6b:
         b5:71:e6:40:d5:79:7b:7d:02:ce:86:71:1f:c3:7d:c6:22:1b:
         14:de:e5:5b:d6:47:de:05:05:6c:67:17:14:ad:cf:4d:27:39:
         cc:7c:09:e2:9d:cb:01:93:d2:dd:19:11:dc:6b:cc:ea:57:39:
         1f:c3:92:a9:4f:5b:c0:1e:26:a2:9e:33:2f:11:df:39:7f:ac:
         4e:f0:bc:78:2d:65:55:e9:a9:54:c3:1d:44:53:ce:0b:a7:c4:
         38:4d:26:70:14:03:28:82:92:3a:a2:2e:43:e6:70:e0:58:43:
         10:26:f5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:44 2026 by rpki-client