Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32322e302f32342d3234203d3e203536303436.roa
File:                     3134302e3231302e32322e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          KOUMTopFTFtdMp0MzGoR1D0CR819nWmuRX1CMIfQnNE=
Subject key identifier:   4C:CB:A1:42:AF:84:AB:2E:72:9A:05:81:B8:3F:30:9B:EC:9E:15:55
Certificate issuer:       /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial:       44109027CB252BD44E6DF9A0E749F3082AD55902
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32322e302f32342d3234203d3e203536303436.roa
Signing time:             Fri 08 May 2026 01:38:52 +0000
ROA not before:           Fri 08 May 2026 01:33:52 +0000
ROA not after:            Fri 07 May 2027 01:38:52 +0000
asID:                     56046
IP address blocks:        140.210.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:10:90:27:cb:25:2b:d4:4e:6d:f9:a0:e7:49:f3:08:2a:d5:59:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
        Validity
            Not Before: May  8 01:33:52 2026 GMT
            Not After : May  7 01:38:52 2027 GMT
        Subject: CN=4CCBA142AF84AB2E729A0581B83F309BEC9E1555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1c:5c:b1:1f:15:6a:3e:22:27:e1:ec:0f:45:
                    f1:99:a6:1d:84:4b:9f:26:35:e3:d7:0d:28:55:fd:
                    ff:45:6c:e1:72:19:da:3a:fd:3b:42:31:0e:e1:16:
                    70:1d:b1:f9:4a:1b:2f:30:3c:22:d1:2e:1c:58:59:
                    cf:9d:bc:53:8d:43:f9:41:9b:06:dd:8b:18:ea:3e:
                    ee:58:ad:7d:f9:78:97:88:7b:25:9d:8e:c7:b0:6b:
                    05:d4:73:4c:02:ed:21:8f:9e:53:e0:c6:2c:4d:f0:
                    a7:7b:49:ed:1a:d5:13:ae:3b:a3:b5:e5:94:8b:e6:
                    e6:22:fe:b3:f0:41:72:3d:7e:b0:08:2f:ac:0a:99:
                    9f:0d:ab:db:af:22:73:24:d5:15:ac:ff:72:ce:85:
                    5a:62:a4:24:ec:5f:d8:24:46:cc:e4:fd:6a:83:d3:
                    26:c0:ad:0b:e5:51:a2:b5:1f:63:15:60:f2:96:a1:
                    c4:49:a3:df:74:85:f4:ac:b2:a0:7e:54:79:07:89:
                    18:ac:a1:26:08:15:57:3c:7d:01:e4:75:78:21:c5:
                    15:65:2b:a7:ff:b1:49:be:d8:af:55:a4:13:98:fa:
                    ef:53:36:63:86:a2:6f:49:4b:e3:e0:93:ea:87:43:
                    4c:b8:fe:d4:ec:d3:0e:42:15:95:7f:b0:8c:96:49:
                    81:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CB:A1:42:AF:84:AB:2E:72:9A:05:81:B8:3F:30:9B:EC:9E:15:55
            X509v3 Authority Key Identifier:
                keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32322e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:9c:73:c6:7a:31:ac:54:1f:bf:f7:fb:7d:33:2c:5b:d5:58:
         4a:c2:06:65:c6:17:2a:7f:90:6f:d1:b7:61:d7:8a:4b:17:00:
         6d:ca:49:c9:e3:d4:70:cc:74:05:12:d8:5a:ea:94:85:4f:40:
         6d:3e:fb:47:a6:b5:0f:04:c0:06:d3:17:c9:dd:16:9c:d4:a5:
         6d:ed:37:d7:af:d3:66:32:3f:a4:ac:2f:72:38:56:b1:b8:0f:
         5a:c9:bb:43:ea:d4:b6:85:20:97:ae:50:48:68:bc:62:bb:39:
         61:7d:08:fa:86:3d:d2:63:1b:cb:a0:34:e7:67:8a:ac:3d:15:
         e6:a6:c5:87:d2:12:16:b6:aa:c5:9c:a9:7e:29:70:0f:46:98:
         1d:08:eb:be:7a:73:2e:a9:5a:c7:06:08:c7:21:81:eb:0d:17:
         57:40:b5:c8:32:c2:f3:28:6a:dc:0f:51:79:ef:c4:02:df:ff:
         6c:db:b3:93:a7:fd:e3:82:f2:63:6b:a8:c3:f8:d7:66:b1:37:
         5e:a9:08:59:31:2d:58:99:63:2f:ad:18:f1:92:82:0b:87:1e:
         02:74:fb:d9:eb:a7:6e:68:c8:85:7b:ce:8e:c1:14:b9:05:6b:
         9d:15:76:c2:aa:ca:06:69:5c:18:30:d3:22:4e:6e:8e:8f:b2:
         8a:db:f9:37
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 13:08:14 2026 by rpki-client