Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e31362e302f32342d3234203d3e203536303436.roa
File:                     3134302e3231302e31362e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          NAVE/Qr6QHMC4XtFqhb5OBdtmjnpHmKja8imwFdn/KQ=
Subject key identifier:   EB:86:CB:EB:75:69:50:84:38:A5:DE:2E:FB:B9:F6:3D:70:2C:15:76
Certificate issuer:       /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial:       5085C621E8B35698E67830BA2B5974E8C05E0FDC
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e31362e302f32342d3234203d3e203536303436.roa
Signing time:             Fri 08 May 2026 01:38:52 +0000
ROA not before:           Fri 08 May 2026 01:33:52 +0000
ROA not after:            Fri 07 May 2027 01:38:52 +0000
asID:                     56046
IP address blocks:        140.210.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:85:c6:21:e8:b3:56:98:e6:78:30:ba:2b:59:74:e8:c0:5e:0f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
        Validity
            Not Before: May  8 01:33:52 2026 GMT
            Not After : May  7 01:38:52 2027 GMT
        Subject: CN=EB86CBEB7569508438A5DE2EFBB9F63D702C1576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:87:c4:5b:b0:9d:4b:75:ae:65:db:e8:64:95:
                    64:12:a5:cb:45:33:8b:05:6f:0e:6b:43:3f:e1:eb:
                    fc:01:41:09:97:81:22:3e:c2:e8:1f:f5:17:48:e2:
                    72:95:60:f0:5b:17:07:9b:b5:38:53:e9:79:2a:25:
                    4c:5f:4e:bc:22:44:4e:9c:f5:26:96:a8:d0:59:5d:
                    95:55:e4:48:46:56:82:1e:24:4d:37:0e:d3:21:c9:
                    74:2f:1b:7a:76:bb:69:a3:b8:a9:bc:b7:fd:dc:f8:
                    f2:94:4f:4f:0b:3f:bf:1c:d5:a6:98:67:8f:67:44:
                    1f:85:1c:ff:09:63:3a:06:e2:65:c1:99:53:aa:86:
                    75:b3:5c:69:53:a5:6f:dd:90:fe:2e:7f:8a:60:d3:
                    c0:19:26:21:9a:24:02:23:e4:bc:1e:c9:ff:90:e0:
                    5d:e3:e1:ac:af:26:fa:f8:94:97:a0:e7:0a:8e:bd:
                    7e:e0:52:9c:7b:63:ef:bd:cf:89:9f:d0:4a:d1:9c:
                    b6:98:28:1f:ff:b4:24:f8:55:87:6a:73:c5:e0:c8:
                    7f:e1:e3:ef:3b:72:21:58:f0:f9:ed:42:af:7e:df:
                    80:6b:f3:93:56:58:fe:98:64:17:59:27:86:e1:93:
                    7a:d5:e4:3c:06:2a:cc:b2:4d:97:f4:85:a9:71:c5:
                    5f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:86:CB:EB:75:69:50:84:38:A5:DE:2E:FB:B9:F6:3D:70:2C:15:76
            X509v3 Authority Key Identifier:
                keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e31362e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:44:30:7e:11:c3:03:83:1e:72:48:ec:4a:5c:24:7e:71:44:
         dd:2d:f5:12:b5:a0:f3:81:74:3b:f0:4c:63:a1:20:77:12:f9:
         6c:95:e9:db:52:f7:dd:ca:bd:82:ac:28:a1:94:62:d3:d7:4b:
         87:b0:2c:57:60:6e:da:52:7f:34:71:34:8f:8e:1d:a5:00:52:
         8e:57:19:4c:3c:6a:8f:78:7d:38:76:ef:5e:60:54:ab:3a:5f:
         73:ca:e5:5d:a5:a2:d9:7f:44:b5:87:d0:30:e3:a4:46:79:0c:
         d3:52:72:0e:1f:66:e1:0a:67:39:17:d8:5b:2d:ed:e6:dd:18:
         7a:59:28:fd:2e:26:8f:a5:02:d4:26:47:67:0e:de:2c:c1:4c:
         e4:f2:9d:ec:50:68:67:3e:37:20:57:fb:3b:0f:24:c7:2c:95:
         e5:a3:06:08:6e:b4:62:fe:8c:53:d6:58:57:00:1a:69:c9:d8:
         bd:98:9a:32:d4:be:32:40:1e:06:98:6f:d4:0f:10:cd:29:fd:
         80:73:f3:48:22:f9:b8:81:95:1e:f3:57:00:8e:c0:f7:8c:b5:
         e6:f4:68:24:45:73:d6:10:e7:ae:f2:5a:ea:3c:0f:58:1c:70:
         70:e6:4d:68:32:4d:fa:95:5c:8a:e9:77:f5:7f:76:d9:7c:98:
         c2:75:5b:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:17:15 2026 by rpki-client