Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e33332e302f32342d3234203d3e203538353139.roa
File:                     3134302e3234362e33332e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier:          RdKx+UFcsDbOGKolrBbVha7vqB6FU0ZmYo1SKyVD53E=
Subject key identifier:   35:98:AE:E2:FE:CA:48:99:68:8C:BB:B7:EB:C4:6C:31:3B:92:6E:0C
Certificate issuer:       /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial:       564AC1EDFEBE7907FDA7662B5A6148CE6D70CCEA
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e33332e302f32342d3234203d3e203538353139.roa
Signing time:             Wed 03 Jun 2026 16:53:21 +0000
ROA not before:           Wed 03 Jun 2026 16:48:21 +0000
ROA not after:            Wed 02 Jun 2027 16:53:21 +0000
asID:                     58519
IP address blocks:        140.246.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4a:c1:ed:fe:be:79:07:fd:a7:66:2b:5a:61:48:ce:6d:70:cc:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
        Validity
            Not Before: Jun  3 16:48:21 2026 GMT
            Not After : Jun  2 16:53:21 2027 GMT
        Subject: CN=3598AEE2FECA4899688CBBB7EBC46C313B926E0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:48:d7:d1:05:4c:16:60:71:b9:30:b6:83:
                    02:25:1b:04:a0:73:d3:7f:3f:0c:8a:5f:e9:92:b8:
                    f8:38:bf:7c:a9:13:5c:a9:bb:c2:99:3a:eb:b1:e8:
                    94:62:13:ec:7b:db:e0:22:b5:80:e6:d6:60:e7:47:
                    95:75:ad:a7:0e:d9:8f:6f:93:13:ce:ce:62:0c:ff:
                    55:b3:10:52:e9:b5:bb:44:3c:1d:d1:81:0c:71:8d:
                    35:9e:39:28:fa:19:16:27:eb:ee:66:37:eb:79:64:
                    f4:9f:16:89:a9:20:96:38:fd:84:0e:d1:d3:60:7e:
                    c0:df:61:ca:f8:bc:17:02:66:e9:9e:dc:33:b4:9d:
                    a0:6e:68:fb:d2:f8:44:0c:85:04:5f:da:a2:b7:32:
                    87:a3:41:70:e6:2c:26:1d:e2:ef:61:61:da:a1:f6:
                    6a:ae:a9:c3:dc:18:cf:06:47:f2:21:ec:58:29:eb:
                    89:b2:3d:75:35:9f:63:15:39:13:a9:d3:65:fd:ab:
                    91:85:77:be:9b:56:0f:93:84:f1:c8:59:f4:1e:ad:
                    28:62:f6:d8:cb:e9:cf:8b:db:88:86:37:30:6b:9e:
                    4b:52:0c:b1:57:1c:3a:09:2a:01:7c:c6:01:26:58:
                    68:7a:32:c9:88:25:64:e1:3e:36:68:93:3b:c3:27:
                    05:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:98:AE:E2:FE:CA:48:99:68:8C:BB:B7:EB:C4:6C:31:3B:92:6E:0C
            X509v3 Authority Key Identifier:
                keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e33332e302f32342d3234203d3e203538353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.246.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:d1:f2:68:a0:3b:87:1a:04:dc:e7:e3:97:5f:44:d8:f9:ff:
         0a:d6:83:2d:45:72:d8:dd:03:7e:01:23:d3:38:aa:c1:89:47:
         6b:53:f6:ad:a4:7d:36:2b:8b:d1:3a:96:ad:98:b7:cc:29:40:
         34:e5:cb:30:55:95:9c:0b:63:59:27:f8:43:29:c0:87:95:83:
         ef:ba:f2:e7:c2:f6:19:93:9b:c6:da:e2:5d:62:18:cb:b5:16:
         20:c9:f6:d4:d4:f4:bf:27:bb:91:f0:55:ae:ff:0a:23:2b:82:
         e2:2f:2a:28:ba:a2:a0:72:ae:ba:5e:05:a6:dd:f7:ec:7c:5c:
         33:4e:ee:19:12:f6:af:83:a0:f6:03:22:9c:cc:b2:d4:d7:fc:
         7e:4b:8c:c9:ac:cb:49:8c:02:5b:20:db:d0:b4:33:9a:91:4c:
         f4:02:a1:5b:1d:e0:c2:eb:e0:ce:33:02:d5:5c:f4:a0:58:36:
         93:e4:00:63:01:92:ac:83:0d:8b:ad:8e:6e:6f:a6:c6:42:0a:
         aa:9b:4a:a5:05:f8:3a:fe:e6:dc:98:60:fc:6f:6d:d7:c7:b5:
         aa:27:c0:a1:9e:a1:8c:ec:e6:f3:aa:3a:af:f3:cf:a1:2f:21:
         e4:29:a7:13:6e:f6:ec:62:e7:7c:40:8a:68:85:73:c6:eb:63:
         7b:46:18:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:05 2026 by rpki-client