Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e31382e302f32332d3233203d3e20313336313935.roa
File:                     3134302e3234392e31382e302f32332d3233203d3e20313336313935.roa (raw, json)
Hash identifier:          YqRRaLOctDfQ64q5aNzbVRHXnq7q/9Vi58b4sdivuo0=
Subject key identifier:   75:C7:34:1D:B9:86:E5:C7:93:0F:53:05:03:06:EB:74:3D:28:B5:D5
Certificate issuer:       /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial:       4C42CE596A2FF7CC68E8A8FE5E2A3EB204F42E2C
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e31382e302f32332d3233203d3e20313336313935.roa
Signing time:             Thu 28 May 2026 16:07:19 +0000
ROA not before:           Thu 28 May 2026 16:02:19 +0000
ROA not after:            Thu 27 May 2027 16:07:19 +0000
asID:                     136195
IP address blocks:        140.249.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 19:46:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:42:ce:59:6a:2f:f7:cc:68:e8:a8:fe:5e:2a:3e:b2:04:f4:2e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
        Validity
            Not Before: May 28 16:02:19 2026 GMT
            Not After : May 27 16:07:19 2027 GMT
        Subject: CN=75C7341DB986E5C7930F53050306EB743D28B5D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:95:df:a3:7c:dc:15:30:6d:9f:51:02:bc:10:
                    e3:eb:39:77:3e:d9:fa:b2:0a:04:53:1a:43:dd:00:
                    02:53:18:8e:20:f2:b7:30:a6:ed:0b:c9:ea:1a:e9:
                    87:de:50:bd:83:ff:9b:1a:9b:7e:d1:17:2e:0d:f0:
                    e3:80:54:94:8d:1b:ed:0f:05:b4:59:bb:db:11:81:
                    5c:3a:7d:aa:dd:0e:e3:c0:7e:dd:8e:8e:67:0c:3e:
                    69:6d:f5:65:4c:ee:af:49:42:5d:04:b5:4e:cc:88:
                    aa:be:26:76:04:79:e4:f3:d4:89:40:9b:a5:91:37:
                    b8:ec:9f:10:9e:4e:f8:55:14:b6:78:a1:67:1e:5f:
                    3d:ad:ac:bb:aa:08:79:b3:36:eb:aa:0b:bb:b0:c9:
                    40:41:8c:e2:c5:33:72:31:9c:ee:1b:f2:32:1d:1a:
                    f0:a5:c8:4f:be:a5:48:7f:7e:d8:8f:4a:a6:5b:8a:
                    d2:a9:3b:aa:36:75:f5:cd:03:bb:bb:30:66:36:52:
                    de:3b:3f:0f:21:39:a2:c4:96:e6:1a:25:82:75:92:
                    0b:fa:6b:d0:8d:87:81:34:c7:f9:7d:e8:c1:91:d9:
                    6c:09:a0:52:70:83:4d:57:0e:97:df:bc:59:6b:53:
                    8e:a9:3f:1c:bd:2f:a0:1d:ee:c8:e6:b4:fb:8b:a9:
                    af:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C7:34:1D:B9:86:E5:C7:93:0F:53:05:03:06:EB:74:3D:28:B5:D5
            X509v3 Authority Key Identifier:
                keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e31382e302f32332d3233203d3e20313336313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.249.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:f6:0e:01:9c:5f:36:96:f6:ef:77:82:67:f9:52:ea:2e:e1:
         10:eb:d9:95:83:e8:c3:a0:a2:c4:ce:d8:72:21:f7:be:fb:28:
         24:a8:e5:4f:18:cc:e4:d3:95:03:87:06:07:32:e7:9a:a4:bd:
         88:3e:21:28:35:9d:35:eb:89:16:35:07:f1:39:f8:ae:fd:8f:
         77:9a:a3:c4:63:af:40:1b:f0:47:d2:9d:e0:fd:d4:53:4c:48:
         75:6c:55:d6:28:10:38:e3:1b:31:b8:c3:75:7b:fb:ac:29:0b:
         49:8f:07:df:cc:31:34:c6:73:28:58:28:81:48:1d:7b:06:2a:
         b4:ec:44:ca:6a:27:9c:f6:3e:8f:07:cd:1c:d8:cb:34:dd:53:
         65:d5:f3:d4:03:af:69:06:62:4f:0b:f8:c1:92:be:7a:26:ff:
         d3:56:8b:5a:98:63:45:0e:40:12:2e:45:88:02:fb:3e:51:02:
         98:84:0b:e6:c8:85:1e:81:3f:d4:0f:6b:59:14:1a:3f:15:82:
         7e:8b:89:3a:12:61:ab:c1:a0:22:d5:7d:18:cb:bf:23:6b:af:
         08:3f:99:26:04:4b:c8:cd:91:3a:02:40:fe:26:df:99:76:5a:
         92:bf:d6:8a:8a:30:c8:ff:fb:1d:06:9b:aa:9b:1b:ae:1a:d3:
         60:01:88:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 02:40:38 2026 by rpki-client