Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e372e39392e302f32342d3234203d3e20313336313937.roa
File:                     3134342e372e39392e302f32342d3234203d3e20313336313937.roa (raw, json)
Hash identifier:          iE/hv/u0OLnXv6cqO5JKt/YeVzP63HLXtL3z/RXOiig=
Subject key identifier:   02:9C:EF:2A:41:9C:41:DF:E4:6D:A5:06:5B:95:B8:67:50:36:C6:BF
Certificate issuer:       /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial:       54A589EC2BA0CA9F42D2500C8D3E979CE4EBF627
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e372e39392e302f32342d3234203d3e20313336313937.roa
Signing time:             Mon 25 May 2026 16:05:49 +0000
ROA not before:           Mon 25 May 2026 16:00:49 +0000
ROA not after:            Mon 24 May 2027 16:05:49 +0000
asID:                     136197
IP address blocks:        144.7.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 19:46:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a5:89:ec:2b:a0:ca:9f:42:d2:50:0c:8d:3e:97:9c:e4:eb:f6:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
        Validity
            Not Before: May 25 16:00:49 2026 GMT
            Not After : May 24 16:05:49 2027 GMT
        Subject: CN=029CEF2A419C41DFE46DA5065B95B8675036C6BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4f:be:59:75:ee:b6:75:76:ff:24:94:e4:5d:
                    11:64:72:09:32:a1:fc:72:10:a6:81:6f:3f:55:4a:
                    cc:ae:2f:64:6c:92:82:96:de:45:89:fd:44:65:05:
                    c2:30:77:e9:c7:19:a1:a3:c4:b5:6a:0e:03:b4:ce:
                    1f:1d:f7:ba:6c:51:3a:cf:5b:37:bc:7b:bc:a9:bb:
                    8f:0e:47:85:03:0c:38:0b:50:eb:cd:57:a6:2f:85:
                    f5:d4:76:d8:49:eb:b0:c5:e7:c6:45:07:fb:7a:9e:
                    17:17:65:e7:fd:5e:39:5e:50:d6:69:b7:21:f9:18:
                    f3:89:c4:4e:5b:fe:99:0f:8c:62:a6:e0:22:fa:60:
                    8a:3e:21:2d:3e:31:d0:7d:57:29:be:2d:04:97:0a:
                    e3:02:ea:44:75:ab:e8:be:b5:4a:20:7d:ae:06:9a:
                    d6:94:ae:d5:6d:82:39:7c:86:bd:fc:31:df:94:77:
                    8e:e0:c5:a7:1a:09:98:58:09:28:14:56:b9:c4:35:
                    e1:a2:26:75:c4:5b:e8:1b:91:4b:83:93:93:c8:91:
                    56:7a:ca:93:1e:2c:cf:cb:39:e0:42:03:2a:67:c3:
                    e8:4c:ad:62:d8:7d:c8:33:b9:09:11:aa:f0:0a:7d:
                    68:df:47:3f:68:3d:9e:db:35:1f:8b:68:ff:3b:b8:
                    82:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9C:EF:2A:41:9C:41:DF:E4:6D:A5:06:5B:95:B8:67:50:36:C6:BF
            X509v3 Authority Key Identifier:
                keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e372e39392e302f32342d3234203d3e20313336313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.7.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:d4:95:1e:1c:73:45:5d:a3:c9:d7:fa:c0:91:31:74:a3:88:
         ab:7e:e9:b6:13:2d:c0:43:14:3a:ce:da:26:c1:42:bf:9d:bb:
         b8:7a:ed:bc:88:bd:f2:a7:24:5e:3b:f0:7a:4a:d1:c1:20:5b:
         e8:3c:18:00:95:24:95:be:aa:5c:49:1b:ff:e0:4d:78:c9:e4:
         bb:f8:2f:b7:e2:7d:57:f0:71:45:91:d7:c7:5d:78:fb:75:65:
         c5:a4:07:9c:61:7d:fc:bf:32:4d:6e:a3:36:13:a1:cc:42:23:
         45:bb:23:ab:68:48:36:c8:fb:c2:22:0d:a9:c1:48:88:72:c6:
         b0:d5:16:a0:9a:38:fb:de:80:f5:b8:83:8e:3d:69:b6:f7:53:
         d8:80:b4:7d:28:dd:1a:fa:83:b5:2c:cb:2a:f8:35:d7:bd:f5:
         51:e0:af:55:2c:ca:22:61:ef:0d:25:46:74:51:67:63:62:d3:
         ee:fe:3b:76:00:fc:98:5e:0c:17:13:55:9c:89:82:a9:3d:e1:
         cd:4e:78:b3:c7:b1:55:30:da:f5:10:1f:9d:cb:bc:80:1e:f3:
         ea:db:3e:ba:2c:cf:df:22:87:bc:75:23:c9:54:d7:99:6e:f0:
         22:e0:1c:04:31:2e:e8:34:fd:43:94:ae:fd:03:9c:47:41:f9:
         e5:6e:1d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 02:40:34 2026 by rpki-client