Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32332e302f32342d3234203d3e203536303436.roa
File:                     3134302e3231302e32332e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          kvgoH2jMNObinEuJoA1NwJakRuHGSo6bASBGl8xlgl0=
Subject key identifier:   47:F0:8E:42:56:F5:76:DA:80:43:A6:32:78:4F:2C:5E:36:45:D0:79
Certificate issuer:       /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial:       7ECAEAF4801C2595639A6C4A2C3BB110B0D6B401
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32332e302f32342d3234203d3e203536303436.roa
Signing time:             Fri 08 May 2026 01:38:52 +0000
ROA not before:           Fri 08 May 2026 01:33:52 +0000
ROA not after:            Fri 07 May 2027 01:38:52 +0000
asID:                     56046
IP address blocks:        140.210.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ca:ea:f4:80:1c:25:95:63:9a:6c:4a:2c:3b:b1:10:b0:d6:b4:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
        Validity
            Not Before: May  8 01:33:52 2026 GMT
            Not After : May  7 01:38:52 2027 GMT
        Subject: CN=47F08E4256F576DA8043A632784F2C5E3645D079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6a:f4:15:10:87:5c:3d:b2:3f:19:d3:b2:ae:
                    ec:00:86:1a:83:41:5c:71:5c:bb:e7:e0:29:13:76:
                    ee:20:ba:a4:ee:73:3c:f3:51:5f:01:8b:ee:28:65:
                    39:2d:30:9c:47:a7:17:a5:42:87:d6:94:cf:c6:56:
                    90:05:c2:2d:37:3f:db:57:8d:f9:29:95:f3:c5:e2:
                    06:fa:0b:b0:ca:d0:4e:93:ae:86:2e:c9:d5:04:94:
                    e6:ad:dd:d2:b2:df:22:75:78:05:68:7f:49:2e:67:
                    4e:0c:10:65:ae:8d:2c:7e:1e:56:6a:2c:8e:6d:3b:
                    4e:bb:d5:8d:5b:a9:a2:72:b5:e4:f2:69:28:dc:43:
                    f5:c5:36:85:3e:b4:4e:94:e8:f0:16:3f:8e:2c:b6:
                    d9:af:ef:dc:5e:15:5c:d6:01:1c:e2:c5:b5:11:f9:
                    44:54:c5:fa:29:50:1d:7a:b1:eb:0b:8a:99:6e:fa:
                    62:25:01:4d:8f:69:3e:4c:9d:9a:b7:44:63:39:ad:
                    68:5d:38:3c:81:d4:0d:66:73:14:62:9a:9c:e8:bc:
                    82:03:d4:f2:9b:a1:a9:7c:20:ba:6d:f3:95:a1:f3:
                    ce:6c:c6:cc:bd:4f:8c:13:c2:22:8e:47:f5:ec:33:
                    a9:8e:81:91:5c:da:e4:74:03:9b:82:3d:9c:a1:36:
                    ed:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F0:8E:42:56:F5:76:DA:80:43:A6:32:78:4F:2C:5E:36:45:D0:79
            X509v3 Authority Key Identifier:
                keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32332e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:08:68:cc:34:1d:23:b5:3a:54:71:31:6d:51:50:84:b4:1a:
         01:d6:75:b1:cc:1d:f7:cb:4a:1c:01:01:59:fb:77:b9:ad:14:
         13:d2:95:36:57:0d:b2:74:7c:77:5e:46:13:29:06:61:4e:29:
         d8:7f:5c:de:f9:fb:66:c1:20:f9:d2:8d:44:59:bb:23:66:13:
         71:86:52:bf:d4:9c:69:fd:2c:be:16:e2:b7:e8:39:8b:7f:ea:
         60:fc:5a:17:73:08:a5:23:b4:71:33:0e:ea:41:83:54:95:02:
         83:41:13:75:1b:a5:54:6e:9b:93:a0:6c:d4:95:5c:e6:c7:ec:
         e4:1c:73:16:f3:c8:90:7a:4a:fe:89:00:53:1e:d5:54:d4:48:
         dd:dc:9d:7a:f4:2a:1f:99:1b:26:78:d2:48:10:28:be:45:2d:
         d1:0a:8b:26:80:ec:28:16:91:c4:a5:25:f1:f6:cb:a4:1a:15:
         80:48:6c:aa:50:5f:54:db:73:17:50:af:ab:c0:88:09:45:ea:
         f2:de:d9:fd:e6:9e:b3:c8:78:b5:af:da:f6:d8:e1:b5:44:fb:
         71:82:02:bd:04:3e:53:16:84:8b:a1:f1:84:28:d8:78:42:5d:
         44:9a:4a:83:68:0a:93:50:30:86:bc:f9:80:68:7a:6a:5b:14:
         84:bc:5f:bc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 13:44:47 2026 by rpki-client