Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e32322e302f32342d3234203d3e203538353431.roa
File:                     3134302e3234392e32322e302f32342d3234203d3e203538353431.roa (raw, json)
Hash identifier:          R42EtYzCu6RB7/5UoHFCmjRMH7OfTdwa+aQxIH1eRcI=
Subject key identifier:   8B:DC:59:E9:9F:F0:07:42:47:C3:B6:E0:05:24:DE:37:D2:F8:CC:48
Certificate issuer:       /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial:       51EFAE6325AE8FB0EFACB92CAF98C339BCB8B24F
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e32322e302f32342d3234203d3e203538353431.roa
Signing time:             Mon 25 May 2026 16:08:31 +0000
ROA not before:           Mon 25 May 2026 16:03:31 +0000
ROA not after:            Mon 24 May 2027 16:08:31 +0000
asID:                     58541
IP address blocks:        140.249.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 19:46:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ef:ae:63:25:ae:8f:b0:ef:ac:b9:2c:af:98:c3:39:bc:b8:b2:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
        Validity
            Not Before: May 25 16:03:31 2026 GMT
            Not After : May 24 16:08:31 2027 GMT
        Subject: CN=8BDC59E99FF0074247C3B6E00524DE37D2F8CC48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c4:4f:b8:dc:f6:b3:75:5b:ea:8a:24:67:bc:
                    06:80:49:90:bb:ab:6e:40:d7:67:4e:f8:56:bd:80:
                    f3:23:aa:70:9c:61:de:4c:27:29:e1:7a:78:f8:3f:
                    5a:20:ba:fe:0d:8e:10:11:78:ab:8d:ec:24:97:b1:
                    d4:15:04:42:74:24:87:b2:80:bd:67:51:e1:8a:bd:
                    01:aa:ee:0f:73:cb:15:7c:77:91:da:35:e8:77:ad:
                    c3:db:95:92:57:f0:e1:70:3e:f7:d2:2b:1b:1b:7b:
                    0b:de:24:ea:ad:b5:44:20:70:f9:55:3f:66:fb:c6:
                    5a:9f:86:30:02:2a:77:cd:c1:06:2c:30:30:4d:08:
                    c3:88:e0:db:b9:75:ba:ae:9a:36:39:e3:59:c9:eb:
                    4f:fe:e9:94:20:f1:2f:7d:cd:2c:76:71:14:e7:be:
                    1b:eb:e5:bc:6a:e8:a9:f3:8b:a3:4a:b4:a9:1c:88:
                    98:f7:d4:d1:08:29:eb:3b:b9:7e:7b:75:6e:59:e6:
                    eb:40:a3:16:2d:9a:a0:4c:01:37:b9:85:5a:5b:f2:
                    94:dc:b9:9b:f1:b9:ff:ff:96:20:91:5b:40:b4:63:
                    dc:be:01:30:a4:08:c6:b6:2b:65:1b:52:85:ae:17:
                    ed:36:9a:6f:a9:bd:47:23:2f:84:4b:32:13:f9:08:
                    a5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DC:59:E9:9F:F0:07:42:47:C3:B6:E0:05:24:DE:37:D2:F8:CC:48
            X509v3 Authority Key Identifier:
                keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e32322e302f32342d3234203d3e203538353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.249.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:52:ac:2c:0c:0d:24:ff:9f:ab:0a:f1:70:2f:fb:84:55:ef:
         93:74:59:d5:a1:e8:4d:4b:84:0a:08:e0:04:95:4a:c9:c8:fa:
         99:e0:e7:70:b2:57:f1:8d:59:e0:45:8d:77:fb:e5:e1:c4:3b:
         11:70:1c:28:b5:86:a4:40:9d:f2:2e:3e:bd:77:31:57:51:b2:
         3e:27:6c:15:c6:13:ba:a9:d1:c2:6a:e3:ea:34:31:2a:b2:c2:
         a4:21:b6:46:48:99:80:71:72:eb:6a:c2:0c:48:e6:3e:95:08:
         1d:23:d6:46:1d:34:97:c9:b1:e4:4f:bb:84:b5:69:48:40:0b:
         be:84:da:d8:0a:03:51:00:bf:b9:1e:c3:ef:3b:28:31:88:8b:
         81:26:23:90:05:8f:f4:35:f7:7e:f7:a0:15:99:4d:4a:c6:9a:
         40:ae:8f:5b:7b:a1:f6:22:ae:d0:3d:a0:3e:12:6a:2f:b8:7b:
         6a:fa:49:99:60:6b:92:18:09:ca:b2:fb:23:a9:04:79:5c:0c:
         b2:14:f3:b4:ce:69:a4:25:08:54:d6:25:dd:78:2f:4b:ce:ca:
         6f:a6:38:b0:b7:f7:3c:9c:db:d9:ac:66:b8:ef:67:50:85:c7:
         36:f8:d3:4e:e9:1c:cb:76:80:54:41:fa:d4:ad:5d:d0:d5:9c:
         c7:50:0d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 02:41:16 2026 by rpki-client