Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3231342e302f32342d3234203d3e203538353139.roa
File:                     3134302e3234362e3231342e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier:          aH1bFKR1Q8hhuMQOImBTAn3sYhueAUZYHotfutqhkjQ=
Subject key identifier:   31:EF:29:5E:96:15:03:1C:39:9F:65:A8:7D:39:FF:A5:3D:95:18:5A
Certificate issuer:       /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial:       6A7FC4558B635BFF63591D5274CEC014A4E20737
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3231342e302f32342d3234203d3e203538353139.roa
Signing time:             Wed 03 Jun 2026 16:53:22 +0000
ROA not before:           Wed 03 Jun 2026 16:48:22 +0000
ROA not after:            Wed 02 Jun 2027 16:53:22 +0000
asID:                     58519
IP address blocks:        140.246.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:7f:c4:55:8b:63:5b:ff:63:59:1d:52:74:ce:c0:14:a4:e2:07:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
        Validity
            Not Before: Jun  3 16:48:22 2026 GMT
            Not After : Jun  2 16:53:22 2027 GMT
        Subject: CN=31EF295E9615031C399F65A87D39FFA53D95185A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c9:05:e1:e6:17:66:df:55:ae:47:3a:00:c4:
                    c6:a9:50:27:fa:8d:c5:3f:67:58:b9:66:cf:9c:f2:
                    10:18:55:b1:de:3b:3b:70:13:29:cb:4f:a9:1f:17:
                    f2:14:a6:75:b3:32:f9:d6:f9:a4:fb:01:c4:04:9f:
                    7e:a2:f3:31:91:44:77:e5:46:d1:ab:41:51:5d:d8:
                    68:c4:13:81:29:fb:ad:a6:97:8a:37:3c:6c:89:a0:
                    09:61:ee:af:46:2e:82:d1:aa:b1:82:03:76:f3:35:
                    19:d3:82:22:6b:d8:85:d2:3e:fd:7c:31:7c:30:14:
                    25:ad:40:44:7d:31:ef:fd:f4:0c:40:42:0d:84:ce:
                    95:de:16:89:76:17:ed:39:95:f7:34:d2:75:72:23:
                    9c:55:ad:e8:0b:15:e5:91:ca:47:0f:12:7c:4b:e8:
                    96:90:b8:ac:6f:b7:0e:cc:4c:40:8d:d0:c5:6b:00:
                    14:39:b7:07:aa:da:33:79:2a:ab:5e:a3:7e:61:1f:
                    2e:d5:a7:bb:c8:dd:c8:1d:cd:67:f7:5a:22:a4:2f:
                    a2:58:c1:d8:c4:89:6a:99:e5:5d:2e:60:d0:b5:af:
                    95:f2:0c:48:07:48:bb:6e:a0:51:c0:35:0d:25:a0:
                    86:2f:65:34:6b:1a:8e:47:59:f1:39:64:f8:64:97:
                    a6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EF:29:5E:96:15:03:1C:39:9F:65:A8:7D:39:FF:A5:3D:95:18:5A
            X509v3 Authority Key Identifier:
                keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3231342e302f32342d3234203d3e203538353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.246.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:de:e8:ab:c8:96:1d:d8:df:63:7c:b5:9b:fb:fe:94:02:4e:
         3a:70:dc:b8:2f:94:d0:8c:b5:f9:10:62:86:77:16:55:87:6c:
         49:d7:97:96:9e:98:8c:5f:d1:ce:fe:aa:39:d2:c9:16:4e:18:
         0e:cf:97:72:92:c3:37:a9:52:6e:85:29:60:d2:19:03:c7:74:
         09:44:92:63:41:cd:ad:46:cd:9d:d0:8c:a5:b8:f5:ea:d2:e8:
         a0:fd:17:01:38:19:83:51:b5:b6:a6:f6:66:17:a1:0f:e1:72:
         ff:9b:79:35:0b:12:9d:0e:18:57:a6:f0:5f:af:35:fb:5c:08:
         53:62:21:51:e3:8e:6a:f1:07:51:06:83:01:5c:a4:7f:2e:8f:
         ca:b1:14:f7:5b:6d:13:3c:b9:0b:3f:e3:80:6e:70:4c:38:80:
         f1:98:ba:73:86:a9:5f:c4:37:81:00:85:83:df:1c:1a:6f:0d:
         71:19:24:e1:21:8c:fc:b9:b6:54:50:db:1e:02:5a:54:7d:c7:
         66:e7:b6:5b:5a:7f:b2:2a:ef:f0:d5:8f:2b:63:bf:5a:16:7e:
         5c:77:f2:e0:35:b4:1a:10:69:0c:8c:48:01:66:66:1e:af:14:
         dc:c8:41:76:de:b4:9b:1f:b8:9a:72:ef:9c:89:e3:de:77:6d:
         1f:e3:00:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:09 2026 by rpki-client