Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e372e39372e302f32342d3234203d3e20313336313937.roa
File:                     3134342e372e39372e302f32342d3234203d3e20313336313937.roa (raw, json)
Hash identifier:          ePsOxFgLY1IdB9ylI0t+/B1QFOoI/O2BTZFUsJGpG38=
Subject key identifier:   2F:37:19:B1:1E:C3:A9:B3:AA:A3:30:92:A2:09:C9:86:62:CC:FA:97
Certificate issuer:       /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial:       09B35D1EB78BC9DE4894F078AC7D2F7124D33324
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e372e39372e302f32342d3234203d3e20313336313937.roa
Signing time:             Mon 25 May 2026 16:05:49 +0000
ROA not before:           Mon 25 May 2026 16:00:49 +0000
ROA not after:            Mon 24 May 2027 16:05:49 +0000
asID:                     136197
IP address blocks:        144.7.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 19:46:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b3:5d:1e:b7:8b:c9:de:48:94:f0:78:ac:7d:2f:71:24:d3:33:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
        Validity
            Not Before: May 25 16:00:49 2026 GMT
            Not After : May 24 16:05:49 2027 GMT
        Subject: CN=2F3719B11EC3A9B3AAA33092A209C98662CCFA97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c3:49:3c:b1:8d:7c:d0:64:49:d8:5b:7f:9d:
                    6a:89:f5:6d:f9:d8:4c:5b:2a:09:3e:70:78:50:97:
                    83:19:db:e9:43:d3:ac:6b:5f:aa:64:db:79:bf:b6:
                    0b:f8:66:4a:17:68:84:ff:60:d6:41:9f:a3:62:d6:
                    4c:7f:30:68:e2:b9:15:39:0b:5c:cb:7d:e6:ba:b1:
                    cf:ea:59:a1:93:dd:87:2d:68:52:3a:36:23:75:c0:
                    de:0b:26:48:27:15:f4:68:1c:42:67:9f:bb:f8:86:
                    74:f0:b0:42:5f:02:28:f7:b2:4b:92:ee:ec:29:fd:
                    70:59:c2:c1:5c:8d:23:ae:c9:e6:09:b3:65:87:96:
                    5c:10:ae:6b:f6:4e:38:e5:0c:93:c9:46:cb:4e:7a:
                    8d:94:83:b4:93:7a:2a:61:3b:01:e3:cb:11:56:e9:
                    3d:c9:db:7c:ef:2a:8c:7a:1b:f8:ce:a1:1d:9a:cc:
                    a3:45:b9:63:9a:f2:10:f3:c6:87:ed:99:8e:3d:9c:
                    f6:85:fd:94:62:54:d2:b5:ff:61:ca:fd:7c:4c:0c:
                    c7:0c:b5:02:1b:2a:66:dd:b7:c6:45:3f:91:f5:5e:
                    d3:fa:5d:ae:f7:89:e1:b0:aa:e9:84:3a:0f:b2:df:
                    c9:21:1d:99:fc:18:d9:62:51:c7:59:bf:5e:85:20:
                    9f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:37:19:B1:1E:C3:A9:B3:AA:A3:30:92:A2:09:C9:86:62:CC:FA:97
            X509v3 Authority Key Identifier:
                keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e372e39372e302f32342d3234203d3e20313336313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.7.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:c6:a5:50:d6:e2:6e:e2:30:43:81:82:24:4e:a1:6b:07:7f:
         3a:9d:16:d6:78:2e:53:46:a4:d5:24:e8:08:f1:17:95:56:e9:
         c7:49:52:02:7f:18:66:62:98:b9:c5:d5:06:6b:ec:9c:1f:7d:
         95:70:56:71:d5:0f:a6:9b:17:7f:4f:68:ef:9b:02:68:11:c3:
         79:d2:40:eb:2f:9c:b6:f9:48:6a:93:e4:80:b4:35:e0:fb:ba:
         00:de:d8:17:82:0b:00:d9:80:95:b6:41:8c:6f:df:ae:a9:0f:
         2c:aa:1e:15:34:c8:89:4c:7d:23:bb:3e:98:69:86:8a:c1:91:
         79:af:8f:21:96:13:3c:8c:cc:7e:85:ac:62:8d:36:f0:89:e0:
         e9:45:2e:9d:10:7d:1b:04:88:53:fa:fd:51:91:88:e0:02:6b:
         ad:83:80:0e:ca:c4:bd:07:c7:1c:e0:30:21:61:7c:39:35:7d:
         b0:2e:af:3b:05:6a:54:41:c1:24:c3:b3:07:b8:01:37:1a:ca:
         36:21:bc:cc:4b:d9:2c:7e:1a:8c:51:87:e1:14:4a:39:7b:6e:
         51:9e:30:db:c7:b5:f0:c4:b9:20:0c:06:33:85:1f:2f:d9:4a:
         98:8a:b3:ce:db:af:cf:54:21:15:0c:23:c7:72:79:e0:b9:50:
         65:e1:e2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 02:40:08 2026 by rpki-client