Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32342e302f32342d3234203d3e203536303436.roa
File:                     3134302e3231302e32342e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          6J4cWkIKyL6J/8jYbqzVFC7+9rZoe2tTz1LY59VYxLU=
Subject key identifier:   B1:2D:5E:C1:46:A0:1D:2C:1B:78:63:AA:92:2A:05:F3:97:2F:E2:98
Certificate issuer:       /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial:       64DAB3785AB3D8DA7FD6E7C5954CBF761CB4E7B7
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32342e302f32342d3234203d3e203536303436.roa
Signing time:             Wed 22 Apr 2026 05:16:28 +0000
ROA not before:           Wed 22 Apr 2026 05:11:28 +0000
ROA not after:            Wed 21 Apr 2027 05:16:28 +0000
asID:                     56046
IP address blocks:        140.210.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:da:b3:78:5a:b3:d8:da:7f:d6:e7:c5:95:4c:bf:76:1c:b4:e7:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
        Validity
            Not Before: Apr 22 05:11:28 2026 GMT
            Not After : Apr 21 05:16:28 2027 GMT
        Subject: CN=B12D5EC146A01D2C1B7863AA922A05F3972FE298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bb:5f:da:f6:7f:16:e2:61:f3:76:c3:66:63:
                    ed:a0:ae:29:21:60:db:95:a2:cb:77:5a:90:df:b0:
                    b3:5d:01:6b:99:ca:95:93:80:48:e0:c2:0a:d2:4c:
                    70:89:4b:20:f1:4a:81:e7:97:28:9e:f0:63:c6:80:
                    d1:2b:92:e5:46:f3:57:95:bc:03:67:f3:fb:27:86:
                    ab:60:a0:c4:aa:eb:dd:59:ae:32:21:3b:0d:f4:71:
                    2d:b7:03:57:19:64:7a:1a:8b:4d:89:c5:14:9a:6a:
                    d8:94:61:b3:10:d7:53:0b:a8:1c:27:75:b0:4a:f9:
                    a4:a9:11:c3:84:5b:ac:3b:fb:0b:8f:1d:1a:d7:d6:
                    35:26:2c:16:60:77:ca:1e:e1:9e:e3:05:6d:97:d0:
                    6f:2e:db:85:14:ad:b4:66:43:5c:f3:f3:18:b2:c7:
                    31:15:0e:c8:7f:fd:c4:b0:65:4e:3a:4b:23:e2:43:
                    ed:fb:ef:6b:ac:e5:d8:16:af:56:7f:fe:a2:87:8b:
                    a0:14:bc:2d:90:81:d9:9d:7c:32:fd:2d:24:a4:b3:
                    41:6a:c7:48:ac:de:08:c4:a3:e4:e4:f9:d8:f5:99:
                    da:79:64:c7:2f:0d:b2:39:db:68:d3:04:8d:1b:6b:
                    5d:56:07:bb:e3:f7:6d:1e:7f:69:d2:93:4d:0c:65:
                    bd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2D:5E:C1:46:A0:1D:2C:1B:78:63:AA:92:2A:05:F3:97:2F:E2:98
            X509v3 Authority Key Identifier:
                keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32342e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:8c:df:d3:ea:51:b3:7c:1b:be:f4:4b:24:ce:dc:1d:99:00:
         4c:de:e6:62:4b:38:28:ef:5a:1d:6e:78:f0:e3:de:8d:ee:81:
         e6:5c:fc:df:cf:91:f9:14:9e:d8:44:95:83:fb:c5:25:c4:13:
         9f:fb:0d:c2:35:03:b2:39:d0:33:a2:36:06:5c:fc:ca:ea:e3:
         17:39:6e:8f:40:35:b0:61:25:32:f2:95:7c:b4:e8:2d:15:f1:
         10:7c:70:aa:9d:f2:57:6c:4a:e1:b6:13:c2:f9:37:54:f8:eb:
         a6:d6:b9:54:3d:cc:3d:21:68:1c:4b:a6:c8:e2:1f:55:92:0f:
         ef:ec:d9:6c:05:36:e2:5d:14:6a:1e:9d:ea:ba:ab:e0:97:d8:
         23:fa:95:fc:0c:d0:b2:84:bd:3a:ff:ea:2b:54:79:12:16:81:
         42:72:fe:81:84:38:49:fa:5a:58:44:b2:e1:66:ed:f4:c6:83:
         2c:d2:83:97:cd:47:12:e0:ac:27:26:4d:96:9f:30:af:73:d7:
         2b:09:03:aa:92:13:1b:a2:a2:28:41:b9:94:b9:30:e8:26:87:
         1e:56:a1:bf:f7:24:5a:b1:be:bb:25:73:79:91:77:39:1b:1c:
         4f:77:cf:44:e2:86:7e:9c:36:84:b2:63:b6:9f:e6:ca:4e:d1:
         29:67:4d:7f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 06:58:20 2026 by rpki-client