Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/1/3135382e3134302e3235342e302f32342d3234203d3e203535393936.roa
File:                     3135382e3134302e3235342e302f32342d3234203d3e203535393936.roa (raw, json)
Hash identifier:          NLHSvBrFcQ4h0w0Js8XZIXTtt8u1SFZTuDSqPn5KlaU=
Subject key identifier:   B4:7B:DA:24:E9:E5:42:97:A9:6E:2A:8A:1E:1D:62:E5:07:78:A9:2F
Certificate issuer:       /CN=855381EC93CF009732540F616E4905D544D838C8
Certificate serial:       32F90EE3A8F8E6030828F0225E19A8A48C6EE4F0
Authority key identifier: 85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/3135382e3134302e3235342e302f32342d3234203d3e203535393936.roa
Signing time:             Thu 07 May 2026 15:59:00 +0000
ROA not before:           Thu 07 May 2026 15:54:00 +0000
ROA not after:            Thu 06 May 2027 15:59:00 +0000
asID:                     55996
IP address blocks:        158.140.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 12:20:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f9:0e:e3:a8:f8:e6:03:08:28:f0:22:5e:19:a8:a4:8c:6e:e4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=855381EC93CF009732540F616E4905D544D838C8
        Validity
            Not Before: May  7 15:54:00 2026 GMT
            Not After : May  6 15:59:00 2027 GMT
        Subject: CN=B47BDA24E9E54297A96E2A8A1E1D62E50778A92F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:67:58:ab:ff:03:91:7b:28:fe:42:3c:82:07:
                    cb:fd:fd:6e:e0:45:02:64:96:4f:aa:17:ba:56:ec:
                    c5:d3:c2:9d:ec:6e:49:c4:63:06:c2:ac:54:09:ad:
                    12:d8:ca:2c:f6:e1:c4:1b:57:4c:e7:dc:ac:34:e8:
                    b8:58:ba:6b:db:43:28:5f:eb:11:54:6d:64:1b:65:
                    ad:f1:06:7b:6e:df:8f:f6:92:4a:58:d3:98:60:87:
                    67:cf:d8:39:c4:4b:7c:16:68:a3:73:91:cf:d5:9a:
                    66:59:7c:9c:9b:62:b6:f5:e1:7c:d2:b5:5f:b6:91:
                    63:44:53:c6:5e:9b:4d:15:09:4e:15:9a:16:22:83:
                    75:3d:41:87:f5:dc:3e:d6:28:13:be:33:50:fa:7f:
                    75:a3:38:f3:d3:1f:e7:f7:b7:78:c3:2e:a5:1c:08:
                    d4:4c:b7:93:dc:54:f3:08:98:e2:dc:45:71:25:cb:
                    53:20:9f:15:4c:65:ff:62:a5:1b:e2:2c:2c:9e:73:
                    6d:1d:07:a8:53:b6:e1:57:13:6e:7b:8a:bf:3e:7c:
                    64:f5:49:b6:ee:69:1a:68:71:ed:03:4d:a7:25:26:
                    22:d3:9f:bf:ed:84:51:53:b2:ee:52:0f:02:d0:89:
                    7e:17:67:dd:5b:ff:74:ad:43:62:35:f6:6a:74:fa:
                    40:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7B:DA:24:E9:E5:42:97:A9:6E:2A:8A:1E:1D:62:E5:07:78:A9:2F
            X509v3 Authority Key Identifier:
                keyid:85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/3135382e3134302e3235342e302f32342d3234203d3e203535393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.140.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:2e:85:19:c6:fa:a2:4b:81:26:d3:78:4d:5a:09:5f:2d:69:
         78:79:34:cb:64:de:b7:cb:59:51:70:28:1c:ed:c2:a2:01:b5:
         c2:80:f3:c0:ae:80:00:57:8d:53:ed:8e:02:f3:90:02:bc:0e:
         31:18:6c:0b:79:ac:71:f6:31:af:a9:99:f8:e9:e3:49:1e:de:
         d6:39:60:7b:96:10:e8:e2:d5:ba:2e:94:9a:03:60:ae:0a:4f:
         f8:ea:53:ae:ee:7a:93:37:23:28:1d:e9:0b:ba:3b:f1:11:5b:
         7a:d5:41:ae:d1:ba:79:5e:69:46:49:a8:e4:3f:28:ac:de:18:
         f5:f7:f1:96:97:d1:f0:25:74:26:e4:72:8b:a9:f1:6e:49:37:
         09:1e:76:ac:8f:6f:67:3c:bb:3c:13:77:9c:40:a6:17:16:3c:
         8a:23:c6:c0:4f:c7:34:a4:31:4b:f3:b1:16:fc:d4:3c:1f:f1:
         a4:5a:af:b5:ac:b8:fe:7b:cf:a9:8b:de:ea:ea:28:31:dd:ba:
         e5:0f:fa:82:b9:0a:02:67:32:8e:b4:8a:a4:40:8a:01:05:7d:
         78:98:40:5f:08:12:b5:3b:e8:44:4a:ca:f1:ee:6d:40:2e:ec:
         e7:ed:d3:80:f1:45:84:f3:a7:cf:ed:de:74:8e:a3:59:45:19:
         17:3e:60:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:53:11 2026 by rpki-client