Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e31392e302f32342d3234203d3e203536303436.roa
File:                     3134302e3231302e31392e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          UXFk4wWTjHH3u21DSpm4bYhClt4TzwYbA8fG9WK956M=
Subject key identifier:   78:E3:42:A8:A4:39:05:A3:A1:9E:D1:07:3B:9F:3E:B4:EC:4D:76:6F
Certificate issuer:       /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial:       634ADEAF166318DA9EA01604DADE746DE22849DE
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e31392e302f32342d3234203d3e203536303436.roa
Signing time:             Fri 08 May 2026 01:38:52 +0000
ROA not before:           Fri 08 May 2026 01:33:52 +0000
ROA not after:            Fri 07 May 2027 01:38:52 +0000
asID:                     56046
IP address blocks:        140.210.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:4a:de:af:16:63:18:da:9e:a0:16:04:da:de:74:6d:e2:28:49:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
        Validity
            Not Before: May  8 01:33:52 2026 GMT
            Not After : May  7 01:38:52 2027 GMT
        Subject: CN=78E342A8A43905A3A19ED1073B9F3EB4EC4D766F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:04:50:3d:f4:bf:2c:9e:e8:b7:b8:5d:7b:30:
                    60:7e:2b:b9:1b:4c:ea:c7:01:d8:2b:5a:d5:6a:7c:
                    eb:4e:53:58:5e:4d:09:a1:4e:ff:03:70:ad:ba:b2:
                    25:d3:20:fa:00:7f:4e:60:b6:ff:aa:ad:e5:3d:cb:
                    7b:9b:90:cc:4e:9f:58:58:64:36:6a:74:2e:54:b2:
                    23:d7:f0:fc:f9:bf:b1:85:73:d2:62:83:a3:3b:72:
                    bb:cd:f0:46:23:6a:f9:ce:3f:0b:b6:63:41:07:b0:
                    cc:82:f2:56:2f:10:f1:32:00:7a:08:79:b6:d2:df:
                    a7:55:6a:96:b6:18:48:81:f0:3c:df:49:ed:b2:4d:
                    11:ea:0f:c4:d0:45:39:64:45:9a:1b:5b:c9:b5:7b:
                    81:ed:ba:6a:b4:82:75:5b:77:d0:e1:55:60:c1:a0:
                    81:ab:59:8f:fa:a8:05:f4:a0:cd:e0:89:b7:cd:68:
                    37:88:e3:12:d5:00:1c:5e:51:8e:55:9b:ca:f7:f5:
                    a1:a1:07:4a:2d:0e:7c:d7:cc:bd:8a:74:fd:c5:5c:
                    f9:a8:38:65:68:87:0f:35:8f:dc:79:b6:40:ec:fb:
                    29:43:9d:67:a4:1a:7f:f4:4e:b5:71:11:5f:c4:df:
                    30:39:09:2c:d9:2a:ca:62:61:7d:6f:94:b8:a1:d0:
                    19:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E3:42:A8:A4:39:05:A3:A1:9E:D1:07:3B:9F:3E:B4:EC:4D:76:6F
            X509v3 Authority Key Identifier:
                keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e31392e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:83:2f:bd:c5:08:a9:2a:00:f8:5f:d1:8e:31:c7:23:03:db:
         9c:e2:79:cc:d5:7c:1b:97:6a:7d:e8:76:ec:74:aa:97:3e:08:
         19:28:b4:b4:d7:d2:25:da:7d:7a:38:77:d1:46:0f:c0:0e:8b:
         09:d1:ed:ca:c3:b9:16:c6:71:33:c8:94:22:68:ca:46:d3:17:
         61:f8:bb:98:3a:c9:7c:fb:87:59:7d:9e:ff:88:4c:a0:72:aa:
         68:8d:d5:80:af:e8:ad:c8:23:6f:47:6c:bd:5e:8b:cf:2b:6b:
         bc:89:b6:40:c5:58:86:3a:1a:62:56:20:62:cb:96:81:8b:f6:
         2f:2a:e4:ef:5d:7d:ec:df:23:ae:cb:be:77:8c:c7:1f:c1:55:
         9e:d1:77:0d:96:3a:6e:da:8c:b0:9d:17:39:70:d2:af:12:b5:
         e1:ee:9d:3f:ac:f3:d4:fb:47:75:90:91:13:72:f8:35:8a:3f:
         e7:ad:49:0c:6e:6c:89:56:5b:cf:44:db:0c:f6:4f:cd:5b:47:
         4e:d9:c5:87:75:08:30:e8:dc:93:ea:55:c5:ee:51:67:04:9a:
         d3:20:1f:e8:f9:a6:72:55:4f:c9:c5:d0:94:66:fb:71:38:67:
         66:f4:aa:44:44:31:ae:5e:86:4b:b4:20:33:5c:4c:a1:6f:f9:
         fb:5d:7d:f8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 12:47:02 2026 by rpki-client