Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3138312e302f32342d3234203d3e203538353139.roa
File:                     3134302e3234362e3138312e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier:          APV7fPZHgYRm7W3QWWITzB6AE3DMZum++8pIGTKnRnQ=
Subject key identifier:   24:F3:BA:6D:5F:98:04:0A:61:4F:A3:75:72:E9:45:11:96:A0:1A:B8
Certificate issuer:       /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial:       32A8F442B3D77709389C6CB11535FF1EBC6E1D04
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3138312e302f32342d3234203d3e203538353139.roa
Signing time:             Wed 03 Jun 2026 16:53:20 +0000
ROA not before:           Wed 03 Jun 2026 16:48:20 +0000
ROA not after:            Wed 02 Jun 2027 16:53:20 +0000
asID:                     58519
IP address blocks:        140.246.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a8:f4:42:b3:d7:77:09:38:9c:6c:b1:15:35:ff:1e:bc:6e:1d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
        Validity
            Not Before: Jun  3 16:48:20 2026 GMT
            Not After : Jun  2 16:53:20 2027 GMT
        Subject: CN=24F3BA6D5F98040A614FA37572E9451196A01AB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3b:7c:49:1a:09:89:22:5a:80:6f:78:7d:e7:
                    1f:ea:98:d7:22:94:9a:5d:af:09:a8:eb:bc:59:46:
                    4c:97:20:7e:8e:a6:e8:d1:49:f7:c8:f1:00:f8:51:
                    d4:d7:31:d3:00:df:cb:ce:8a:86:28:5d:7b:0f:f1:
                    43:30:49:e4:d4:5c:0e:cc:fc:64:21:61:22:59:30:
                    36:40:af:cd:67:22:3d:92:f4:a2:df:8f:87:fb:c1:
                    de:d7:b4:fd:a1:af:7b:75:7d:04:ac:17:0f:9f:44:
                    b6:b0:11:ab:35:bc:1a:b7:93:14:7b:f9:c4:4c:cb:
                    5d:60:5f:83:73:9f:b2:1c:7b:91:88:fd:5d:e0:ca:
                    d8:bb:1b:17:5d:29:61:9f:f9:33:b2:ae:c5:53:24:
                    ad:87:4f:81:6e:f2:50:58:18:7f:22:5a:2e:aa:4e:
                    6b:c2:c9:c4:32:65:3e:a0:7b:76:22:b1:87:43:e3:
                    3d:ce:e1:84:73:67:e5:cc:83:67:6b:51:33:1f:89:
                    6c:f0:56:ec:09:28:b3:75:4b:05:10:e7:ee:08:f7:
                    9f:cb:15:9e:32:ef:29:e8:94:e9:98:c4:fb:05:0f:
                    6f:3e:81:d5:17:de:89:85:7e:0d:b7:20:e8:d7:83:
                    e3:16:9a:b9:42:8d:ab:97:2d:d8:b8:fa:11:84:9d:
                    40:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F3:BA:6D:5F:98:04:0A:61:4F:A3:75:72:E9:45:11:96:A0:1A:B8
            X509v3 Authority Key Identifier:
                keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3138312e302f32342d3234203d3e203538353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.246.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:cc:e0:8b:5e:73:5a:85:4f:6d:b9:44:95:9b:9a:e4:55:57:
         3a:8a:f4:04:29:8f:54:fc:f1:dd:40:bd:7d:32:d7:47:c0:c3:
         45:04:e1:65:ae:56:5e:0a:d7:8d:51:cd:0c:23:24:ad:ea:0b:
         42:b5:36:d3:49:fe:cd:5b:73:1e:13:d4:e0:ed:1c:78:25:54:
         9f:84:b8:a0:18:6d:09:24:4d:21:23:ff:19:78:e2:5f:c2:eb:
         43:55:ba:ac:0a:70:85:1d:ad:df:3c:12:6e:4f:08:9c:0f:bf:
         a8:e9:2b:a2:cc:b9:80:f2:9e:57:65:b4:6a:ee:4c:05:ee:1d:
         2d:ee:01:8c:58:37:89:58:38:6d:5b:75:4f:de:6e:bb:77:9f:
         e7:49:82:f6:34:9e:57:58:58:d4:c9:92:d5:c4:2a:0a:6b:ad:
         66:fc:5f:e4:ba:a9:0b:21:85:9c:3f:70:d7:18:28:ae:fd:7e:
         2f:5d:57:ab:2e:e7:5d:6d:49:b8:17:57:e8:00:c1:e6:81:8c:
         cd:17:27:fd:57:40:34:1f:b6:d7:09:be:dc:1d:66:c5:5b:e6:
         65:95:e1:3a:af:a0:d7:f7:94:dc:95:90:50:28:36:a1:5b:92:
         37:81:5c:cb:3d:b6:e0:26:f7:d2:29:c2:ab:bb:39:ee:2e:57:
         14:5c:a8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:03 2026 by rpki-client