Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e34342e302f32342d3234203d3e203538353139.roa
File:                     3134302e3234362e34342e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier:          KuaiNbIvAP+ca+wHPRQFgRII+kbYJF0TWR6WtKJXcX8=
Subject key identifier:   EA:D7:85:C1:1D:B8:7E:64:36:A3:01:42:21:D5:6A:86:0A:32:4F:23
Certificate issuer:       /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial:       5932AECB0B5FD54F4CCDF9D05D3285E185289A02
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e34342e302f32342d3234203d3e203538353139.roa
Signing time:             Wed 03 Jun 2026 16:53:20 +0000
ROA not before:           Wed 03 Jun 2026 16:48:20 +0000
ROA not after:            Wed 02 Jun 2027 16:53:20 +0000
asID:                     58519
IP address blocks:        140.246.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:32:ae:cb:0b:5f:d5:4f:4c:cd:f9:d0:5d:32:85:e1:85:28:9a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
        Validity
            Not Before: Jun  3 16:48:20 2026 GMT
            Not After : Jun  2 16:53:20 2027 GMT
        Subject: CN=EAD785C11DB87E6436A3014221D56A860A324F23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:60:9e:96:b3:d6:40:94:55:ac:af:64:a4:26:
                    0e:17:4b:6a:c7:dc:40:a9:c6:3d:8b:76:ef:ac:da:
                    12:1b:37:65:83:49:3f:38:a8:9e:08:77:7f:2e:50:
                    57:18:d3:f4:f8:0b:c7:62:fd:a7:c2:d2:17:3e:ed:
                    66:1b:7c:b7:0d:71:22:10:18:b9:c1:1e:0d:1d:eb:
                    f9:27:6d:f4:ac:de:65:ae:53:79:eb:b4:df:be:dc:
                    8f:2c:b4:59:e3:78:5a:10:d9:0e:52:c3:3c:b9:77:
                    58:e2:49:cc:8b:0b:14:bd:85:fa:cd:6f:4b:1f:d8:
                    96:c1:b2:5d:67:3f:d7:9c:db:0e:4d:4b:e9:18:11:
                    36:0d:a9:f9:65:5e:af:c0:a4:40:0e:9d:3a:c8:0f:
                    bf:6b:c4:6a:99:b2:d0:61:30:ca:1f:5f:2a:65:c3:
                    41:17:98:0e:f3:72:73:0e:77:eb:d6:49:e8:2d:76:
                    b5:5f:28:97:ff:48:d0:0e:0b:0a:5b:1a:ba:ca:b6:
                    bf:b5:11:84:a5:35:61:b5:77:f3:8b:7f:ef:10:a6:
                    d4:86:4b:92:46:ec:83:4e:47:77:bf:03:95:74:36:
                    26:8c:b2:2f:f0:4b:63:1c:13:0e:29:e7:63:a9:73:
                    8b:5f:df:74:99:88:75:a3:49:6c:5e:28:af:5c:3b:
                    6d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D7:85:C1:1D:B8:7E:64:36:A3:01:42:21:D5:6A:86:0A:32:4F:23
            X509v3 Authority Key Identifier:
                keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e34342e302f32342d3234203d3e203538353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.246.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:6c:0d:73:a0:e1:7f:1f:a8:a8:93:ca:f2:36:30:1a:68:ed:
         0e:bd:3d:bf:7c:08:2c:77:f7:64:e2:35:3d:e3:7d:07:fd:07:
         ee:8a:a2:2d:87:61:14:2f:bb:c1:a6:e9:28:09:95:d4:83:94:
         ee:cc:fb:ac:cd:95:30:2a:c0:66:6f:9d:85:22:3a:10:aa:31:
         51:7d:10:ef:99:1e:fd:46:b7:26:e4:af:56:a5:bc:cf:b0:e6:
         5a:93:7e:50:73:b8:e7:2e:1c:01:90:24:21:df:a1:c7:66:5b:
         9a:9c:ec:67:8e:5f:ce:83:54:93:f4:5f:4e:ce:50:38:58:81:
         59:ff:7c:45:bc:61:58:d6:c0:ec:da:6e:1c:0c:e2:d8:d5:ff:
         6f:43:e0:6e:47:36:96:71:d6:d3:d2:36:0d:b4:37:20:fa:c6:
         e9:c8:c3:37:db:cd:07:77:a4:95:31:8f:88:ac:3b:03:85:88:
         23:73:34:9c:4c:f8:c1:62:c3:b1:f9:95:8b:98:85:82:ca:65:
         bc:09:ef:1d:7d:08:68:65:e8:99:9d:78:04:74:11:2c:df:e2:
         b6:34:aa:bb:af:bf:45:ee:b1:9d:ce:f6:72:10:31:54:e8:ea:
         d5:c4:57:2d:41:c2:a1:18:7d:74:24:33:3e:3a:1b:81:08:e6:
         86:52:d7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:06 2026 by rpki-client