Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/3134302e3137392e3232342e302f31392d3139203d3e2034383038.roa
File:                     3134302e3137392e3232342e302f31392d3139203d3e2034383038.roa (raw, json)
Hash identifier:          9u3bGEBw9lmN85HmCcoPpEG8sauF2JE6EGULkoF3EOo=
Subject key identifier:   27:85:12:DA:21:66:8D:63:AC:82:10:0E:3A:20:39:C7:3B:62:60:50
Certificate issuer:       /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial:       3B0544887B99FBB40363EF76A6899C850D4B2235
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/3134302e3137392e3232342e302f31392d3139203d3e2034383038.roa
Signing time:             Tue 19 May 2026 02:43:43 +0000
ROA not before:           Tue 19 May 2026 02:38:43 +0000
ROA not after:            Tue 18 May 2027 02:43:43 +0000
asID:                     4808
IP address blocks:        140.179.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:05:44:88:7b:99:fb:b4:03:63:ef:76:a6:89:9c:85:0d:4b:22:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
        Validity
            Not Before: May 19 02:38:43 2026 GMT
            Not After : May 18 02:43:43 2027 GMT
        Subject: CN=278512DA21668D63AC82100E3A2039C73B626050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:52:54:4c:49:d6:aa:06:a8:a1:17:a9:09:bc:
                    a4:ff:34:6d:5a:f3:5e:c1:b0:39:cf:9f:e2:ba:7e:
                    52:25:8b:47:a8:1d:71:0d:17:5f:d5:48:20:43:76:
                    9a:d0:a0:74:f6:9c:dd:91:46:a6:48:0e:06:dd:c8:
                    a3:7a:54:e7:62:cc:99:94:0c:da:ec:1e:3e:21:62:
                    59:34:68:7c:17:38:d4:71:57:bc:39:e2:23:78:3c:
                    fb:65:33:76:3c:72:18:2e:fd:74:c4:fb:0d:b4:65:
                    c2:2b:37:ac:77:ba:f5:02:25:9a:f2:0e:da:71:93:
                    86:cc:2f:5c:5c:8f:a5:19:f7:0d:4c:cf:2f:00:b5:
                    b9:69:58:49:75:32:47:c8:d4:49:0a:82:2e:5f:8d:
                    b6:f4:a6:90:78:8a:32:94:93:a4:e0:07:6c:e0:9d:
                    65:27:9a:72:33:84:c7:95:69:e8:95:2c:94:f5:92:
                    c5:88:62:17:2c:c4:82:57:fc:70:87:75:c2:ac:28:
                    14:be:38:99:be:99:8d:ee:59:e9:45:e1:6b:54:28:
                    68:56:f1:57:7c:5c:48:e3:bf:e5:8d:fc:75:27:5e:
                    4d:47:f6:45:ff:d0:72:65:53:ae:c7:5c:b4:5a:b8:
                    30:e5:f2:21:bb:34:b3:6a:4b:23:8a:f0:e4:94:0b:
                    af:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:85:12:DA:21:66:8D:63:AC:82:10:0E:3A:20:39:C7:3B:62:60:50
            X509v3 Authority Key Identifier:
                keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/3134302e3137392e3232342e302f31392d3139203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.179.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         49:1a:cc:db:28:51:e2:a1:c5:58:cc:7c:92:2d:b6:bb:5c:c8:
         a2:76:ce:00:f5:43:b5:6e:96:b8:ec:17:6a:0f:50:2b:de:6d:
         db:8b:9c:51:02:eb:f2:45:29:44:68:c0:f0:67:7a:5d:49:8b:
         f7:23:da:d9:b0:23:30:31:e6:79:33:50:47:dc:83:4a:d5:6e:
         fa:b0:2b:7a:92:9b:e5:f1:06:36:54:0f:bc:ab:69:8e:7a:92:
         02:76:7b:cf:1a:ce:b9:6d:52:c6:9b:fb:8c:a3:3a:65:79:57:
         23:6c:ca:aa:4b:68:d6:c0:3d:33:47:09:c1:d3:14:0b:7a:fe:
         c0:76:bd:ee:7e:ce:69:37:2a:63:f9:8c:52:b2:44:ec:3f:1e:
         a4:a5:ea:8d:a9:45:84:d0:89:34:8b:f9:66:0b:a7:8e:97:86:
         23:8c:0e:47:cc:d8:b2:10:53:1b:e1:bb:99:e5:45:42:8e:e5:
         2b:b5:08:b8:c3:24:11:b0:ba:ba:95:53:a6:92:be:e8:4c:d6:
         3a:3e:c7:43:06:d1:92:64:0d:3f:63:9f:9e:8b:d1:84:86:cd:
         4d:b6:02:08:b6:41:c5:d2:75:1a:6b:50:15:4a:35:96:79:0b:
         f3:79:8f:cd:a4:e0:c5:93:80:76:43:bd:6c:57:ba:58:bb:4b:
         8b:db:58:79
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 30 01:57:18 2026 by rpki-client