Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3231332e302f32342d3234203d3e203538353139.roa
File:                     3134302e3234362e3231332e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier:          MBG0O6dqaBPLseexLcdy4qRM70OE5hNOT0m+d+wzzGs=
Subject key identifier:   24:E4:63:15:48:5C:C8:00:76:EC:8F:4B:69:D1:E8:64:16:26:FE:FD
Certificate issuer:       /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial:       58FE15FBD5BCA44EA5A8366D45DADCB277DD351F
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3231332e302f32342d3234203d3e203538353139.roa
Signing time:             Wed 03 Jun 2026 16:53:19 +0000
ROA not before:           Wed 03 Jun 2026 16:48:19 +0000
ROA not after:            Wed 02 Jun 2027 16:53:19 +0000
asID:                     58519
IP address blocks:        140.246.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:fe:15:fb:d5:bc:a4:4e:a5:a8:36:6d:45:da:dc:b2:77:dd:35:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
        Validity
            Not Before: Jun  3 16:48:19 2026 GMT
            Not After : Jun  2 16:53:19 2027 GMT
        Subject: CN=24E46315485CC80076EC8F4B69D1E8641626FEFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a8:c6:68:c7:7b:d0:2a:f4:34:1c:fa:8f:33:
                    3a:80:29:b6:e2:82:e8:c3:eb:a1:1e:9c:1d:15:81:
                    b9:8f:a7:75:52:13:e9:51:b2:97:e6:81:18:2a:87:
                    d4:c3:7a:75:7b:40:10:7e:e8:62:c6:21:01:0c:d7:
                    30:e8:34:36:76:3a:44:25:2a:49:34:17:ce:76:0a:
                    35:cc:f1:c9:53:69:0d:44:8f:d3:26:26:26:09:25:
                    c3:a3:9b:c7:83:01:7c:a6:b0:08:aa:2d:b3:b0:e7:
                    f6:e8:f9:69:82:dc:97:8d:9b:25:27:79:a4:cc:5c:
                    98:78:37:8b:cc:ef:d2:84:ff:7b:5e:4f:8b:f9:a8:
                    94:b8:18:ce:30:92:7d:7d:ad:b6:48:31:f6:45:95:
                    38:59:14:42:87:3f:5e:77:55:95:7f:11:37:43:9d:
                    f0:c8:17:b1:c1:c6:4d:9e:ee:02:ec:00:17:00:6a:
                    0f:fe:7f:cd:23:f0:31:6c:fd:1d:58:92:89:ff:2f:
                    31:83:96:e6:0a:6e:64:25:75:f5:16:5b:93:c3:78:
                    cb:c0:42:b7:c0:22:4f:32:a8:3a:7f:c7:b4:f3:64:
                    56:a0:f5:cb:51:c6:e9:a2:64:71:8a:eb:7c:0e:38:
                    27:04:ed:e6:f1:1b:41:2c:50:23:66:a2:21:37:6d:
                    b0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E4:63:15:48:5C:C8:00:76:EC:8F:4B:69:D1:E8:64:16:26:FE:FD
            X509v3 Authority Key Identifier:
                keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3231332e302f32342d3234203d3e203538353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.246.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:e0:a0:92:98:47:5f:01:a7:b1:f2:ab:65:fc:c4:08:65:02:
         e6:83:f3:6a:d3:91:dc:dc:60:45:1b:95:bb:68:cf:29:5b:af:
         1b:4e:92:6a:a4:40:20:b2:2e:4b:fa:41:11:68:f9:c7:40:a1:
         30:bc:c0:b7:12:1f:27:59:14:7d:a0:58:ae:01:ca:a2:ed:95:
         d8:0d:14:de:2a:8b:97:ff:e2:98:ac:b3:6c:5f:83:c9:e4:a5:
         4d:b9:a7:d1:d4:26:78:95:94:33:9f:bc:70:24:95:43:ad:bd:
         0e:5e:26:62:05:b7:8d:f1:fb:4a:ca:78:40:1c:37:4d:15:2b:
         b3:cd:1c:ae:79:f9:d0:6c:68:e4:77:de:a1:c5:f2:37:c6:86:
         a6:c6:e0:1a:1f:84:43:3b:d6:65:5c:be:bc:45:0c:9a:0d:02:
         55:03:65:3d:9b:79:2f:96:ea:0c:fe:d4:04:8f:ae:08:73:48:
         68:70:86:09:ec:97:d7:2d:c0:ea:46:ba:66:1b:d8:dc:c2:5f:
         9f:6e:50:ca:9e:9f:7f:08:57:5f:e1:92:57:6a:cb:6b:ea:b2:
         d4:b5:22:3e:47:f3:93:b3:f3:6a:97:1a:ed:75:5f:70:26:1f:
         0f:56:78:52:7d:93:10:20:e9:43:f2:43:82:94:cb:cf:7b:b9:
         7d:df:20:3e
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUWP4V+9W8pE6lqDZtRdrcsnfdNR8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1
M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDYwMzE2NDgxOVoX
DTI3MDYwMjE2NTMxOVowMzExMC8GA1UEAxMoMjRFNDYzMTU0ODVDQzgwMDc2RUM4
RjRCNjlEMUU4NjQxNjI2RkVGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK+oxmjHe9Aq9DQc+o8zOoAptuKC6MProR6cHRWBuY+ndVIT6VGyl+aBGCqH
1MN6dXtAEH7oYsYhAQzXMOg0NnY6RCUqSTQXznYKNczxyVNpDUSP0yYmJgklw6Ob
x4MBfKawCKots7Dn9uj5aYLcl42bJSd5pMxcmHg3i8zv0oT/e15Pi/molLgYzjCS
fX2ttkgx9kWVOFkUQoc/XndVlX8RN0Od8MgXscHGTZ7uAuwAFwBqD/5/zSPwMWz9
HViSif8vMYOW5gpuZCV19RZbk8N4y8BCt8AiTzKoOn/HtPNkVqD1y1HG6aJkcYrr
fA44JwTt5vEbQSxQI2aiITdtsOkCAwEAAaOCAhcwggITMB0GA1UdDgQWBBQk5GMV
SFzIAHbsj0tp0ehkFib+/TAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf
sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1
RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v
c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBkAYIKwYBBQUHAQsEgYMwgYAwfgYIKwYB
BQUHMAuGcnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQw
MjkwNTk3NjgzNS8wLzMxMzQzMDJlMzIzNDM2MmUzMjMxMzMyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNTM4MzUzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPbVMA0GCSqGSIb3DQEB
CwUAA4IBAQCq4KCSmEdfAaex8qtl/MQIZQLmg/Nq05Hc3GBFG5W7aM8pW68bTpJq
pEAgsi5L+kERaPnHQKEwvMC3Eh8nWRR9oFiuAcqi7ZXYDRTeKouX/+KYrLNsX4PJ
5KVNuafR1CZ4lZQzn7xwJJVDrb0OXiZiBbeN8ftKynhAHDdNFSuzzRyuefnQbGjk
d96hxfI3xoamxuAaH4RDO9ZlXL68RQyaDQJVA2U9m3kvluoM/tQEj64Ic0hocIYJ
7JfXLcDqRrpmG9jcwl+fblDKnp9/CFdf4ZJXastr6rLUtSI+R/OTs/NqlxrtdV9w
Jh8PVnhSfZMQIOlD8kOClMvPe7l93yA+
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:03 2026 by rpki-client