Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e38332e302f32342d3234203d3e203538353139.roa
File:                     3134302e3234362e38332e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier:          Vp3PoYunBFLU2+nckzQjX+FYWCOD4MfDiV5y3VoSC3g=
Subject key identifier:   70:02:2F:C4:BE:B5:61:A7:44:0D:4D:11:64:3A:30:00:1B:34:6B:22
Certificate issuer:       /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial:       0C96FF3FB7FA05B846022C5381A146CD73322B6C
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e38332e302f32342d3234203d3e203538353139.roa
Signing time:             Wed 03 Jun 2026 16:53:19 +0000
ROA not before:           Wed 03 Jun 2026 16:48:19 +0000
ROA not after:            Wed 02 Jun 2027 16:53:19 +0000
asID:                     58519
IP address blocks:        140.246.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:96:ff:3f:b7:fa:05:b8:46:02:2c:53:81:a1:46:cd:73:32:2b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
        Validity
            Not Before: Jun  3 16:48:19 2026 GMT
            Not After : Jun  2 16:53:19 2027 GMT
        Subject: CN=70022FC4BEB561A7440D4D11643A30001B346B22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b4:f2:46:4c:21:58:bc:c8:82:91:af:24:c1:
                    2d:ba:db:76:fb:81:f2:d1:ea:f5:bd:79:16:94:94:
                    d9:3d:02:49:de:93:3f:28:2a:de:db:9f:b0:b2:3b:
                    a6:95:62:bc:be:61:a2:cf:7a:0c:f7:f8:00:ee:83:
                    ef:5d:0f:44:ab:45:6d:05:45:43:ba:db:53:50:ee:
                    e6:66:d9:38:fe:a6:39:19:9c:ac:06:94:64:47:aa:
                    7d:69:ce:7c:9c:f5:17:09:8b:30:46:78:46:00:62:
                    e6:4d:00:04:eb:c8:3d:e0:60:c2:86:14:f2:3c:86:
                    58:8b:ce:50:93:65:c6:4e:99:66:e4:f6:7a:db:a6:
                    7b:0a:3a:f3:b9:24:24:22:bd:63:50:53:1d:6b:c7:
                    d8:51:71:d2:41:29:5d:ee:ab:9b:96:9a:52:4a:c7:
                    80:86:86:68:35:97:ca:38:b3:91:41:7a:fd:f4:51:
                    f4:66:b4:56:47:f7:46:8a:12:75:42:5c:68:b9:73:
                    8f:5b:03:a4:08:2f:0a:3e:15:bc:ad:1d:cd:f1:c5:
                    02:3f:36:e9:2d:8c:32:c7:8e:99:6a:c3:57:8d:5a:
                    be:04:11:6d:c3:a7:ab:a1:74:bc:0e:7d:ff:17:0a:
                    12:76:44:26:99:d4:95:96:9e:7e:ac:2d:9c:f6:4d:
                    b3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:02:2F:C4:BE:B5:61:A7:44:0D:4D:11:64:3A:30:00:1B:34:6B:22
            X509v3 Authority Key Identifier:
                keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e38332e302f32342d3234203d3e203538353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.246.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:17:f6:10:6e:ac:8d:8a:5c:10:bd:26:21:b5:f9:ae:79:f5:
         61:21:2e:ea:99:4a:68:47:40:5a:b9:02:3f:c8:9f:bb:a4:1b:
         9e:bb:b3:fe:8e:b9:de:89:d7:1e:39:da:fc:1b:16:44:e1:a3:
         ed:4c:86:7b:c9:59:ac:ca:59:2e:c7:6f:1c:8c:a9:1b:e8:49:
         e6:8a:3a:bd:d0:e7:8a:23:0a:55:cf:4f:ce:df:c1:c8:a0:96:
         dd:5e:29:d6:9e:53:29:76:ef:67:39:1a:79:95:ee:2d:bb:a6:
         1c:e6:00:20:8a:23:93:12:d5:39:2f:ab:19:44:33:78:81:1f:
         e5:58:02:01:8b:25:e4:51:b3:40:b4:ff:1d:bf:26:02:07:9f:
         ba:74:9a:fa:a3:8c:68:ed:f3:8b:55:37:dd:5d:25:6e:f7:27:
         c3:a4:f6:86:70:b9:23:68:51:84:65:47:46:32:f0:64:78:b5:
         70:d2:c1:56:b7:f9:c1:bb:6d:45:e5:55:45:4a:ef:ff:a7:a4:
         cc:bf:26:90:25:51:0c:68:46:81:0f:4d:f4:b3:e5:2d:0e:0c:
         e4:52:a2:c2:0b:63:fd:74:11:2b:5b:69:18:78:8b:f9:75:88:
         21:37:e8:e4:2e:01:33:4a:34:23:94:e4:5d:3b:b4:9b:f8:74:
         7f:cc:69:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:05 2026 by rpki-client