Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e39342e302f32342d3234203d3e203538353139.roa
File:                     3134302e3234362e39342e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier:          HrprVBqegv+OnEadRfDgmJhp8hrUM0qXzFRMx+H18fc=
Subject key identifier:   06:E4:4A:8A:03:EF:4F:F3:C7:E2:9C:81:91:E1:33:5B:47:D1:D2:AB
Certificate issuer:       /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial:       260CC45B4F7C8F94FD96C1ACA4D8F4647D1A0DCB
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e39342e302f32342d3234203d3e203538353139.roa
Signing time:             Wed 03 Jun 2026 16:53:20 +0000
ROA not before:           Wed 03 Jun 2026 16:48:20 +0000
ROA not after:            Wed 02 Jun 2027 16:53:20 +0000
asID:                     58519
IP address blocks:        140.246.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:0c:c4:5b:4f:7c:8f:94:fd:96:c1:ac:a4:d8:f4:64:7d:1a:0d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
        Validity
            Not Before: Jun  3 16:48:20 2026 GMT
            Not After : Jun  2 16:53:20 2027 GMT
        Subject: CN=06E44A8A03EF4FF3C7E29C8191E1335B47D1D2AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b0:e2:c0:54:c5:d6:83:37:25:b1:9b:bf:cc:
                    e3:5d:1c:13:47:02:89:21:01:a3:f1:51:41:cf:6e:
                    fd:0e:6b:d8:26:81:5d:e4:77:08:4e:3e:4f:f2:8d:
                    92:a4:62:00:ea:df:ac:2e:36:48:1e:8d:ea:ef:a3:
                    b8:7d:79:ea:5d:e6:d4:54:34:4f:77:a0:78:65:f4:
                    a4:c4:ee:72:2a:72:02:65:2c:51:fb:28:60:dd:4e:
                    1c:77:8b:48:df:bd:6e:ab:23:e5:98:a9:72:ac:69:
                    f1:4e:c2:e5:92:e2:68:5a:d6:84:02:ba:81:91:d9:
                    7e:ae:cb:2e:c9:04:5e:15:90:a2:3b:e6:64:5c:5e:
                    d1:98:f0:ae:38:0f:77:a8:99:20:e8:97:94:0f:83:
                    f3:67:ef:ac:7d:2a:e2:03:64:e5:e1:9f:65:a1:f6:
                    8f:a7:54:b0:61:fa:65:2b:75:bc:5e:40:77:8d:cc:
                    db:2f:0b:40:c4:14:14:99:59:75:07:8d:3f:63:ef:
                    8e:78:0f:31:05:20:80:5f:81:50:c0:be:f6:1e:51:
                    0c:61:18:8c:cb:13:d8:1f:ae:fb:37:99:18:8a:60:
                    98:3d:51:38:a3:f4:73:27:b8:e5:9f:6b:a7:ae:8c:
                    07:e5:df:05:45:32:cc:06:68:fe:2c:58:99:ec:c5:
                    73:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E4:4A:8A:03:EF:4F:F3:C7:E2:9C:81:91:E1:33:5B:47:D1:D2:AB
            X509v3 Authority Key Identifier:
                keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e39342e302f32342d3234203d3e203538353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.246.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         df:66:67:cc:b9:e9:d0:41:26:09:b8:e6:99:5c:a3:b3:69:80:
         a5:e2:e0:ff:1b:d3:d0:b5:d0:a9:3a:2e:98:ef:02:d8:10:99:
         96:e5:1e:00:54:1f:fa:ce:54:7d:f3:f1:61:0d:dc:39:f2:dd:
         d1:0c:38:63:bf:70:e7:1f:a5:40:ed:22:89:08:cf:50:fe:7b:
         26:97:3b:8b:2f:63:eb:b5:8d:33:19:bd:f3:0b:02:77:c7:2c:
         7c:6a:e5:d0:f4:aa:86:0e:31:b1:5b:9a:9a:42:a1:ac:c7:ac:
         90:77:6f:f8:3d:31:33:79:f7:a9:01:87:48:7a:0f:f4:b6:c1:
         e9:65:30:10:7a:4f:6c:d2:12:4f:76:20:77:61:8a:67:51:73:
         6a:8b:ef:2c:fd:b0:c1:c5:34:de:2c:78:54:c8:1c:01:e2:3e:
         5d:27:c5:5e:5c:26:cf:c5:a3:5b:c9:2a:e5:2b:f0:ca:7d:e3:
         76:70:e1:cb:a5:d6:32:5b:59:16:27:3a:2d:6a:f8:6c:a3:da:
         87:de:e6:06:40:33:f1:30:1d:b7:c4:98:6c:c8:25:19:9f:34:
         3b:93:5e:03:57:53:e3:76:45:c0:ea:ed:7d:89:00:91:c5:84:
         c0:49:1a:68:87:29:b6:c3:ee:f7:e2:f5:89:d2:47:40:2f:76:
         c9:fa:c3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:05 2026 by rpki-client