Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3133342e302f32332d3233203d3e203435303930.roa
File:                     3135342e382e3133342e302f32332d3233203d3e203435303930.roa (raw, json)
Hash identifier:          AS6DMdcu3X9ATA3nP93cGiSkoIDo6M7D8LKgXjmJWgk=
Subject key identifier:   7F:06:A4:16:40:F9:3F:E3:1E:E6:70:C1:4E:A5:8C:2E:46:CE:7E:3C
Certificate issuer:       /CN=A91209740000/serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC
Certificate serial:       4FE1C3EC7989EEEE8287D349435DE981EF93B9D1
Authority key identifier: 39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3133342e302f32332d3233203d3e203435303930.roa
Signing time:             Tue 30 Jun 2026 10:39:35 +0000
ROA not before:           Tue 30 Jun 2026 10:34:35 +0000
ROA not after:            Tue 29 Jun 2027 10:39:35 +0000
asID:                     45090
IP address blocks:        154.8.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Jul 2026 01:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e1:c3:ec:79:89:ee:ee:82:87:d3:49:43:5d:e9:81:ef:93:b9:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91209740000, serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC
        Validity
            Not Before: Jun 30 10:34:35 2026 GMT
            Not After : Jun 29 10:39:35 2027 GMT
        Subject: CN=7F06A41640F93FE31EE670C14EA58C2E46CE7E3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:be:8f:c3:7a:ba:b8:7c:b5:8e:fb:b5:4e:b0:
                    19:f6:2c:39:51:c8:98:cf:48:1f:15:48:ec:6d:a5:
                    91:0f:6c:87:30:53:89:90:5c:d5:05:45:68:37:30:
                    b0:60:72:7c:55:15:de:e4:86:5b:19:f4:2b:59:d6:
                    eb:6f:f4:29:b1:a0:2b:db:3d:22:3b:1c:69:5f:aa:
                    ad:69:6c:ca:28:0a:90:a1:e9:f7:03:8f:47:b7:f9:
                    76:92:c4:d5:f8:0b:13:a8:91:39:1a:85:36:5a:03:
                    e7:0a:2b:df:9d:58:ea:21:c5:5b:0e:ba:1f:57:7e:
                    ac:94:da:db:33:b0:48:93:83:b9:fc:c7:a6:d0:e7:
                    44:be:b3:46:51:6b:61:e0:02:51:e4:72:3f:d4:69:
                    45:66:cc:34:57:81:a2:f5:38:c6:1e:df:38:17:66:
                    82:42:a9:a1:3e:30:51:c0:0d:99:e0:3e:51:05:a1:
                    97:df:7b:41:5a:ad:27:44:7a:3a:35:3c:a6:30:13:
                    56:61:8c:16:f8:12:ea:7d:b4:08:47:45:0b:21:87:
                    15:7a:18:45:94:a2:bb:9d:89:48:e1:37:1b:86:fb:
                    3c:c2:9c:f9:77:3b:b5:3d:23:e3:d4:bd:90:51:e9:
                    c9:2d:3f:c2:fe:e0:af:65:a6:8e:51:ef:b5:b5:54:
                    8d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:06:A4:16:40:F9:3F:E3:1E:E6:70:C1:4E:A5:8C:2E:46:CE:7E:3C
            X509v3 Authority Key Identifier:
                keyid:39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3133342e302f32332d3233203d3e203435303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.8.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:c0:37:82:1d:d6:95:33:90:16:dd:b6:ec:f9:79:85:29:48:
         78:9e:8d:c6:c5:41:e2:e3:bd:c9:44:3d:d2:ef:38:da:d4:bb:
         8a:26:1d:1b:3c:c6:bb:6b:13:36:5b:4d:ae:8a:33:dd:26:1a:
         71:07:b5:cd:d8:da:55:e9:69:ed:86:a7:f4:67:47:bd:71:55:
         c4:c5:f9:e7:d1:8b:98:c4:19:4f:2d:04:fd:08:f9:15:a6:30:
         82:d7:de:86:b7:ec:54:45:3b:c5:2f:80:82:52:f0:26:f0:b9:
         73:70:5f:b7:8d:69:a8:51:fd:99:3d:88:41:91:01:51:92:55:
         aa:b8:2d:21:22:5f:38:c4:39:e6:95:d6:f7:a0:8f:f9:8b:c4:
         7b:2b:d5:35:0a:07:86:a9:7d:1d:62:07:70:1c:97:48:7a:3f:
         93:04:1e:bf:8f:49:3b:d7:02:34:c2:0b:ce:9b:3a:c8:7a:d5:
         c9:21:f3:8b:0c:87:bc:49:7a:5e:d6:0c:fc:f4:35:52:c9:54:
         5c:29:fc:00:1b:6d:22:62:80:ce:8f:b1:e2:2f:13:3b:5a:37:
         07:e2:e9:ff:80:dc:54:76:81:4d:ea:68:4b:83:b2:b9:0f:77:
         d6:ec:a9:31:11:7d:c3:de:c6:18:2a:ed:67:42:bc:c5:39:ae:
         8d:3c:e2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:08:41 2026 by rpki-client