Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e31382e302f32342d3234203d3e203536303436.roa
File:                     3134302e3231302e31382e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          4XH4NW1fbHdXD4a8DFQmHzoxsWs6cHdsn9AL3hluo2Y=
Subject key identifier:   71:4F:0B:69:75:2A:7B:03:40:15:6B:42:12:65:22:C2:3C:5E:38:25
Certificate issuer:       /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial:       5FC2037B19103609FEC38A3B8BC0932C5EA801D0
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e31382e302f32342d3234203d3e203536303436.roa
Signing time:             Fri 08 May 2026 01:38:52 +0000
ROA not before:           Fri 08 May 2026 01:33:52 +0000
ROA not after:            Fri 07 May 2027 01:38:52 +0000
asID:                     56046
IP address blocks:        140.210.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c2:03:7b:19:10:36:09:fe:c3:8a:3b:8b:c0:93:2c:5e:a8:01:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
        Validity
            Not Before: May  8 01:33:52 2026 GMT
            Not After : May  7 01:38:52 2027 GMT
        Subject: CN=714F0B69752A7B0340156B42126522C23C5E3825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:14:e2:11:2d:fe:a9:10:b2:7f:dd:45:d8:5b:
                    09:c3:31:49:9c:d4:aa:91:aa:eb:b5:28:08:9c:b3:
                    51:b7:18:cb:bd:6c:c3:0b:a6:56:5a:38:0b:73:e4:
                    b7:60:7b:02:65:16:c2:81:a2:6b:5a:47:73:04:9f:
                    23:97:4b:84:f4:dc:c6:24:75:85:5d:f6:64:62:a7:
                    b1:ff:ed:7a:28:2a:2b:be:4e:cd:56:5f:21:a0:cc:
                    00:1a:60:71:1c:6f:76:75:4a:2c:79:0b:73:9d:e7:
                    03:fc:06:82:8e:e2:ba:2b:b1:77:e6:8f:5d:8e:a4:
                    68:c7:fb:9b:bf:9c:75:1f:b5:80:a2:43:7a:7d:44:
                    37:2c:68:04:44:9c:f5:86:6e:1a:63:1b:2c:4d:0e:
                    21:21:01:15:fc:ad:28:a2:cc:39:d6:1e:f1:20:c0:
                    d5:82:fc:5c:e6:5c:7f:b3:ee:26:ad:e7:64:7c:31:
                    b3:9e:ec:cc:c3:6d:0c:a7:a0:c2:ea:9c:13:c2:52:
                    a1:11:b0:a2:6d:25:a3:db:87:bc:49:de:00:e6:86:
                    51:f1:fa:e6:d7:a9:ad:63:30:84:14:40:54:3e:26:
                    0b:ac:01:e9:6b:99:a2:c4:64:d1:b1:d3:17:5e:d7:
                    51:65:6a:76:18:48:45:df:7f:ea:50:7d:5d:ef:ba:
                    b6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4F:0B:69:75:2A:7B:03:40:15:6B:42:12:65:22:C2:3C:5E:38:25
            X509v3 Authority Key Identifier:
                keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e31382e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:25:99:0f:0c:2f:7f:f7:bc:85:84:d9:96:1f:99:06:b1:0b:
         60:0f:c7:7f:39:34:0f:ee:6d:ef:ad:f6:24:4d:92:bc:be:72:
         0f:ce:92:1e:73:01:a1:5c:5a:d9:2e:17:c1:8f:40:d0:be:2e:
         19:e1:91:55:f1:7b:ec:f2:c6:bb:05:9d:5f:22:f3:23:db:ad:
         b8:af:fa:7a:ed:0a:47:1c:0d:3a:4b:4b:ad:77:2c:c8:d7:20:
         60:b6:a9:a7:63:30:e1:9a:f4:2e:c4:2a:f2:12:fc:06:10:ee:
         5c:db:7a:2a:d9:29:a7:84:93:b2:08:d9:a2:fe:62:5c:a3:0b:
         b6:2a:46:08:89:98:89:e2:41:2f:32:2b:21:ec:df:b4:9b:0d:
         b0:10:18:81:c6:5f:34:8a:2e:de:cc:7d:cf:97:5e:6c:52:45:
         2c:a0:61:ac:44:8d:c4:6b:c7:9b:51:4d:3b:dc:2a:7d:22:2e:
         84:6e:91:ec:f5:4c:d6:10:bb:04:e9:9a:98:37:f6:e7:02:47:
         f2:ec:e1:51:82:92:4e:e6:b1:46:ff:ca:18:bf:f5:75:da:3c:
         21:28:55:bc:d5:96:78:52:3c:2b:b1:ed:c3:e6:ae:84:54:d4:
         63:0a:76:41:e9:e7:cb:87:08:45:0b:a4:e2:09:c3:0c:95:f2:
         a2:7d:3e:30
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 12:46:15 2026 by rpki-client