Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e372e36342e302f31382d3138203d3e20313336313937.roa
File:                     3134342e372e36342e302f31382d3138203d3e20313336313937.roa (raw, json)
Hash identifier:          v+EGxcjO6AMDOOBYdFJHIOHFeNCUWMKOqzCfV31Yaes=
Subject key identifier:   D4:6D:A1:40:74:DF:B7:6B:D1:C0:2B:13:39:EB:2A:9B:1C:C1:93:6B
Certificate issuer:       /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial:       749FE8FDBE2DBD7FE547C3FEC2EDDB808DEE8DFA
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e372e36342e302f31382d3138203d3e20313336313937.roa
Signing time:             Fri 29 May 2026 16:04:10 +0000
ROA not before:           Fri 29 May 2026 15:59:10 +0000
ROA not after:            Fri 28 May 2027 16:04:10 +0000
asID:                     136197
IP address blocks:        144.7.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 19:46:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9f:e8:fd:be:2d:bd:7f:e5:47:c3:fe:c2:ed:db:80:8d:ee:8d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
        Validity
            Not Before: May 29 15:59:10 2026 GMT
            Not After : May 28 16:04:10 2027 GMT
        Subject: CN=D46DA14074DFB76BD1C02B1339EB2A9B1CC1936B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:43:89:df:64:d8:43:bd:4a:cc:b4:5a:94:c3:
                    09:21:dc:f6:5a:1d:cb:8a:c3:e8:90:c2:a6:3a:8e:
                    3b:06:6f:26:3f:85:a5:be:32:d4:b2:c1:dd:86:39:
                    6a:80:1c:71:1a:57:e1:0a:f5:87:cf:01:8c:f8:91:
                    6d:59:f3:bc:ab:4e:d7:29:dd:44:29:6f:36:74:0a:
                    23:77:22:8d:19:c4:dc:a9:d9:10:02:99:62:a8:2a:
                    5e:25:d0:52:9d:77:6a:bc:67:f6:74:88:5e:94:d6:
                    56:75:d3:c4:11:db:5f:fb:2e:e0:d5:53:e5:e6:e7:
                    7b:16:2d:f6:7d:4d:ee:09:a6:ff:69:05:c4:83:9e:
                    2a:b6:33:d7:76:3b:e3:fe:0b:0b:b6:df:b5:eb:a8:
                    f7:7c:8f:21:b7:e8:61:7c:a4:31:63:ac:4f:27:28:
                    b1:4c:4b:33:ab:a3:33:bb:14:50:12:a5:8f:fe:bb:
                    20:40:0e:3c:ae:8e:ba:25:de:65:ca:e1:53:d7:fd:
                    36:7e:65:25:91:5e:1b:42:62:e2:03:a4:6c:ad:50:
                    60:43:2a:42:3a:99:24:f5:82:d1:fd:11:a2:04:ce:
                    e4:1e:b9:23:a1:85:f5:a7:85:58:30:b6:86:a7:e0:
                    aa:c9:13:44:06:ef:7f:f0:fc:ae:55:c7:4b:f5:85:
                    22:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6D:A1:40:74:DF:B7:6B:D1:C0:2B:13:39:EB:2A:9B:1C:C1:93:6B
            X509v3 Authority Key Identifier:
                keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e372e36342e302f31382d3138203d3e20313336313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.7.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ba:8b:54:96:64:98:3e:6a:eb:5e:33:e4:5f:cb:81:5f:5c:b5:
         cd:6c:87:e8:5e:3c:fb:68:89:6d:e3:6e:66:7f:71:9e:1f:ce:
         8b:f3:32:17:ee:f9:98:14:9c:3a:41:ce:ff:10:38:27:64:f2:
         d0:f6:14:c4:b5:18:19:a7:3d:43:35:d7:ff:15:1b:ca:2f:57:
         50:78:37:eb:c9:53:61:5c:71:7b:8a:46:4c:a5:fc:e4:79:1f:
         66:fa:74:5e:0e:1a:fe:a6:6f:41:b7:69:a1:81:d7:fb:67:26:
         6d:5a:46:fb:b0:59:f2:72:5b:00:bf:e4:88:a3:18:99:6d:86:
         94:af:c9:79:c9:7d:95:ec:28:55:83:b0:23:74:90:45:39:28:
         54:8f:31:93:a0:4f:05:5a:84:0e:31:b5:a5:28:e7:60:b0:06:
         1a:b9:55:62:03:b6:1e:eb:c1:a5:51:38:c1:8d:b4:73:40:d4:
         6e:06:0b:e8:35:3f:66:86:c1:cd:6e:c6:9d:76:9a:05:a1:06:
         36:2a:95:6a:44:4b:22:f6:52:3c:bb:07:f4:84:81:e1:eb:7c:
         f9:fd:3e:97:87:f0:c0:06:b6:4b:42:41:c9:a3:8e:50:7a:1d:
         b4:1c:36:88:a6:bf:1e:d9:81:21:ed:13:f2:b6:c3:a7:eb:d1:
         3e:1d:e4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 02:40:07 2026 by rpki-client