Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e36352e302f32342d3234203d3e203538353139.roa
File:                     3134302e3234362e36352e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier:          0d58KPuaiaKG+LsdcLKgif4Y0/BywQrcgVUCqLhTy00=
Subject key identifier:   CF:DD:71:4D:2F:BA:2D:95:F2:57:9C:EA:1C:01:1B:90:E3:62:17:FB
Certificate issuer:       /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial:       22530096C5317CE07C51E79A7007C86A260A315B
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e36352e302f32342d3234203d3e203538353139.roa
Signing time:             Wed 03 Jun 2026 16:53:20 +0000
ROA not before:           Wed 03 Jun 2026 16:48:20 +0000
ROA not after:            Wed 02 Jun 2027 16:53:20 +0000
asID:                     58519
IP address blocks:        140.246.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:53:00:96:c5:31:7c:e0:7c:51:e7:9a:70:07:c8:6a:26:0a:31:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
        Validity
            Not Before: Jun  3 16:48:20 2026 GMT
            Not After : Jun  2 16:53:20 2027 GMT
        Subject: CN=CFDD714D2FBA2D95F2579CEA1C011B90E36217FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c6:33:5c:46:39:b1:d8:0e:0a:0f:5c:14:c2:
                    5f:75:08:2e:e5:ab:13:86:d2:8f:53:89:66:b2:38:
                    94:90:8b:f7:fb:3c:79:f8:75:1a:64:19:ca:eb:7c:
                    13:9f:a2:1a:9f:06:f3:86:b9:95:05:0e:ec:39:38:
                    2a:ec:ee:05:63:d4:21:15:dc:c2:03:4c:dc:93:5f:
                    85:66:ff:19:95:b4:4c:82:3f:d9:89:82:20:e8:c1:
                    c1:69:16:de:7f:bc:3a:06:b5:11:35:fd:c7:a1:72:
                    14:5e:a7:be:58:d2:d5:26:c1:ec:44:de:e9:85:7f:
                    e4:f9:df:dc:5a:69:ce:6c:76:78:71:9e:6c:53:02:
                    57:cf:3d:3a:0a:0b:c1:bb:28:85:de:1c:3a:96:7c:
                    08:1f:e7:81:0f:4f:b9:50:07:42:56:62:68:0f:34:
                    90:2f:24:36:c5:19:fc:9b:87:10:5d:45:9c:be:5d:
                    9e:98:2e:b7:a7:5a:0b:0e:b0:75:fe:8e:56:52:bc:
                    3c:1e:81:7a:34:a2:f1:ad:c0:3e:cb:c2:58:d0:07:
                    18:0a:b2:aa:e5:cf:81:59:89:30:2f:37:43:45:f5:
                    ce:46:1f:59:42:8b:85:69:df:d6:8e:c0:cb:00:cc:
                    e5:74:71:ba:bb:40:08:da:c3:80:47:8c:e1:55:30:
                    39:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DD:71:4D:2F:BA:2D:95:F2:57:9C:EA:1C:01:1B:90:E3:62:17:FB
            X509v3 Authority Key Identifier:
                keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e36352e302f32342d3234203d3e203538353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.246.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:48:c4:06:70:f2:2a:e7:e1:fd:af:5b:6d:47:75:10:fe:a2:
         3e:b5:e9:15:f9:2e:64:57:15:6c:6c:98:7c:06:66:8d:e2:6e:
         1d:dc:98:d4:e2:4c:6a:76:e7:eb:d1:40:54:2a:69:5c:3e:1b:
         8c:d7:e5:bb:7f:fe:7b:bd:48:d9:0c:59:05:e7:58:df:4f:79:
         3d:22:86:93:ea:68:1c:51:99:6c:5f:f6:33:90:ae:66:7d:68:
         5e:b2:2b:b8:a1:d2:17:a0:d6:e3:d8:e5:79:43:ca:1f:d4:f5:
         9b:07:31:b8:ba:b0:00:b5:11:a1:f5:61:31:63:66:d7:e0:27:
         22:6e:d5:70:6b:15:c0:62:06:0b:df:e6:d7:ec:ea:4b:50:72:
         43:a4:6f:eb:2d:91:e1:8d:87:39:49:9b:ef:6a:29:e8:e0:21:
         78:79:17:70:52:5d:56:d2:0c:2b:e6:77:d2:35:40:ab:ae:58:
         80:1e:de:84:9d:f8:72:5a:77:97:27:92:4e:20:47:75:45:ab:
         8a:d7:6d:f1:16:71:93:cc:30:09:4e:f9:c0:10:b1:51:f6:5b:
         66:ad:ac:f9:0f:47:8b:81:2e:83:da:b7:62:a2:ca:ec:79:e1:
         b0:90:19:c4:ef:1d:bb:d3:5e:0a:30:6e:d8:88:39:f4:4c:44:
         3c:64:52:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:07 2026 by rpki-client