Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134764.roa
File:                     AS134764.roa (raw, json)
Hash identifier:          Y8qsvOM+5MvCihE5xjineTX39yRQ/LOzrF5Nf2zx//c=
Subject key identifier:   66:80:1A:3F:BB:21:09:17:9E:52:88:4D:13:59:C8:90:CA:97:9D:33
Certificate issuer:       /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial:       7E4EDC47BF9C9DE24F8F8BFAD4691F41E80801AE
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134764.roa
Signing time:             Tue 26 May 2026 17:07:59 +0000
ROA not before:           Tue 26 May 2026 17:02:59 +0000
ROA not after:            Tue 25 May 2027 17:07:59 +0000
asID:                     134764
IP address blocks:        240e:1f:d000::/36 maxlen: 36
                          240e:ff:a000::/36 maxlen: 36
                          240e:108:11e1::/48 maxlen: 48
                          240e:97d:2000::/36 maxlen: 36
                          240e:982:e100::/40 maxlen: 40
                          240e:983:1e01::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 18:29:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:4e:dc:47:bf:9c:9d:e2:4f:8f:8b:fa:d4:69:1f:41:e8:08:01:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
        Validity
            Not Before: May 26 17:02:59 2026 GMT
            Not After : May 25 17:07:59 2027 GMT
        Subject: CN=66801A3FBB2109179E52884D1359C890CA979D33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4a:da:3c:6f:f0:b8:5b:36:75:fb:f4:a3:1c:
                    3e:94:7c:ce:96:01:ca:a7:24:72:30:eb:2e:de:39:
                    28:54:11:14:06:5d:dd:0d:03:65:a0:4f:12:39:54:
                    ad:53:16:eb:1a:ef:72:32:57:7a:c8:21:94:01:1f:
                    5a:3b:bf:8d:02:63:f1:9f:7a:83:9e:d1:a4:ec:19:
                    ec:1a:fb:a0:ec:28:02:2c:70:7b:25:20:12:15:36:
                    6a:1e:44:a9:ed:1c:74:cd:98:19:70:96:fb:40:51:
                    0d:fc:f4:90:44:5d:23:e3:b3:76:60:3d:7a:c6:46:
                    80:a2:40:f4:5d:e6:03:7f:2d:16:4d:7c:b9:9e:3b:
                    8e:12:a7:a2:91:03:cc:ff:b8:3a:95:cb:41:34:81:
                    ee:51:33:52:8b:3b:f6:34:34:84:ed:7f:66:9b:76:
                    c0:a1:32:6e:3e:a9:00:4f:16:5e:e2:df:09:8e:55:
                    dc:10:aa:fd:a6:18:85:ce:8f:93:3d:f3:39:00:8c:
                    13:81:2d:83:71:24:f0:ff:4b:27:01:27:56:f2:98:
                    0e:c8:74:2a:b8:49:ce:22:3f:c4:0a:8d:91:13:e9:
                    a3:10:e5:55:e7:ed:e4:eb:bc:0b:62:22:11:17:38:
                    d1:36:4b:6d:80:ff:73:40:e5:58:50:07:31:48:1a:
                    dd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:80:1A:3F:BB:21:09:17:9E:52:88:4D:13:59:C8:90:CA:97:9D:33
            X509v3 Authority Key Identifier:
                keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134764.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240e:1f:d000::/36
                  240e:ff:a000::/36
                  240e:108:11e1::/48
                  240e:97d:2000::/36
                  240e:982:e100::/40
                  240e:983:1e01::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:99:38:20:03:b6:27:5d:4c:4f:17:5c:19:6a:5a:b6:b8:a7:
         3f:5e:b5:ea:85:ce:ea:75:d5:b3:19:37:15:df:97:2d:d6:b1:
         e9:f0:86:9d:57:97:97:cd:65:af:31:8a:61:d0:06:f2:07:8b:
         ec:a7:c4:4e:b4:64:ac:9c:c9:81:06:14:85:5d:94:0a:da:97:
         d5:f0:16:ac:89:98:09:93:14:ff:e6:04:0d:d1:5e:2d:1b:83:
         1d:9b:d4:62:e4:09:47:12:ac:93:6a:85:06:ee:0a:a8:b8:be:
         96:cd:1d:9f:65:0a:7f:a4:f6:ce:a1:4f:9c:cf:a7:d2:72:bc:
         3f:02:b0:3b:6b:0e:3d:6b:5e:6e:0d:bb:ba:ec:26:71:f9:4c:
         84:78:5b:54:d7:5f:59:b2:5a:5f:7e:31:8a:4c:fa:08:23:1e:
         0f:68:a3:72:53:a6:75:16:96:d2:e2:a1:e3:b4:32:40:a5:a8:
         02:4f:28:53:11:11:19:d7:56:95:a0:5e:b9:31:69:7d:92:a6:
         30:d1:f3:17:e6:d8:05:ab:69:f6:62:f7:b8:44:1f:ed:36:6f:
         bf:2e:24:69:46:1c:5a:c2:eb:46:90:f3:17:a4:38:b3:81:a7:
         46:f8:f8:f4:60:48:e8:88:ee:b9:22:30:c5:b0:8d:4c:e8:96:
         d3:43:9b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:43 2026 by rpki-client