Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32352e302f32342d3234203d3e203536303436.roa
File:                     3134302e3231302e32352e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          4bSwFuNsKxLX2Mab+Wi1aimjfSTBRHXojh2stB7Opvc=
Subject key identifier:   AF:41:94:72:D5:FB:73:EF:BA:08:56:A9:CA:21:FD:DE:3E:72:2C:6C
Certificate issuer:       /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial:       27C169722679154343ACC1FFDD32505D875628DD
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32352e302f32342d3234203d3e203536303436.roa
Signing time:             Fri 08 May 2026 01:38:52 +0000
ROA not before:           Fri 08 May 2026 01:33:52 +0000
ROA not after:            Fri 07 May 2027 01:38:52 +0000
asID:                     56046
IP address blocks:        140.210.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c1:69:72:26:79:15:43:43:ac:c1:ff:dd:32:50:5d:87:56:28:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
        Validity
            Not Before: May  8 01:33:52 2026 GMT
            Not After : May  7 01:38:52 2027 GMT
        Subject: CN=AF419472D5FB73EFBA0856A9CA21FDDE3E722C6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:af:f5:4a:1a:16:93:16:01:60:6f:04:56:80:
                    53:fe:b5:df:7a:0a:fc:56:3b:6e:bd:32:d5:97:c8:
                    ae:90:fe:06:d0:de:d7:26:d9:40:7c:04:02:e7:d3:
                    6e:37:8f:d1:bd:49:64:02:10:79:d4:4c:3d:4b:7f:
                    3a:89:66:9d:e2:3d:6d:23:9d:a8:51:92:3d:9e:31:
                    c8:1d:da:85:d7:54:82:f3:93:27:0a:5d:68:2e:d0:
                    8c:66:d6:3d:69:39:60:dc:b6:4e:93:21:81:c8:4f:
                    3f:34:00:5d:81:62:ec:4d:82:21:0e:e1:22:f4:21:
                    3d:92:ec:eb:83:d3:11:49:76:a0:bf:70:8d:7d:74:
                    c2:f0:8a:d2:7e:5c:77:88:41:9d:d7:e1:72:72:49:
                    c3:77:ae:ce:82:ca:14:67:29:39:7c:47:64:40:f2:
                    df:60:7f:93:5e:3e:a0:20:10:a4:25:1e:6f:56:7b:
                    6d:27:64:50:e8:3b:82:f4:b1:9f:a0:e0:2c:a4:ac:
                    fc:f1:13:4c:85:ea:4b:c6:c7:f2:f9:08:c2:ae:84:
                    89:5f:90:2d:47:fd:f6:cf:cc:b8:86:8d:df:8a:af:
                    9f:59:3a:7f:de:49:11:40:92:b5:55:19:26:ec:e7:
                    a8:09:45:0f:fc:05:d3:45:ce:f2:2e:41:00:7e:e3:
                    0f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:41:94:72:D5:FB:73:EF:BA:08:56:A9:CA:21:FD:DE:3E:72:2C:6C
            X509v3 Authority Key Identifier:
                keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32352e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:39:07:44:64:f4:cb:66:67:02:00:0d:5a:f0:05:16:01:f3:
         75:1f:a4:20:2f:ce:49:63:63:cf:44:17:3d:c0:00:fe:c7:c6:
         79:2f:55:ba:69:ff:70:10:30:49:28:c1:7e:c3:73:9f:05:1b:
         0a:73:58:4a:58:a5:66:7b:d3:0e:00:0f:35:da:b3:ee:14:1d:
         a2:74:3e:0b:7e:6a:6b:20:a7:19:f2:94:7c:5f:66:e0:be:1c:
         a8:02:fc:94:4a:50:4a:ab:a5:4a:cf:c5:2f:a0:a5:a6:9b:6a:
         1b:bb:c4:42:05:15:35:27:40:eb:cc:b5:83:cf:6e:d7:87:3c:
         e0:e1:ed:70:e9:20:4e:99:ec:4d:43:89:b0:26:6b:91:66:12:
         1f:c0:bc:8b:d9:d1:28:39:e6:16:78:4e:90:0d:b9:3e:5c:3c:
         79:04:40:22:1b:bc:9e:e1:bc:65:4c:af:9f:d8:41:f5:66:c5:
         76:97:75:f0:14:bf:49:d3:f4:2c:37:16:2a:00:65:e0:af:c1:
         a9:b7:38:69:7c:20:52:24:4b:60:0e:0c:f4:0e:55:b0:0a:3b:
         11:42:9e:cf:e7:0d:5c:b4:d1:9c:9d:ca:39:e8:10:cf:98:d9:
         8a:73:ae:4d:11:ef:a1:12:95:f4:f4:05:2b:3d:5f:b7:d2:98:
         4d:b5:7a:48
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUJ8FpciZ5FUNDrMH/3TJQXYdWKN0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUwQzZENDBCODZCMkNDNURFRkVERjhFNDJGNkJBODQ1
MUM2RjA3NzAeFw0yNjA1MDgwMTMzNTJaFw0yNzA1MDcwMTM4NTJaMDMxMTAvBgNV
BAMTKEFGNDE5NDcyRDVGQjczRUZCQTA4NTZBOUNBMjFGRERFM0U3MjJDNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKr/VKGhaTFgFgbwRWgFP+td96
CvxWO269MtWXyK6Q/gbQ3tcm2UB8BALn0243j9G9SWQCEHnUTD1LfzqJZp3iPW0j
nahRkj2eMcgd2oXXVILzkycKXWgu0Ixm1j1pOWDctk6TIYHITz80AF2BYuxNgiEO
4SL0IT2S7OuD0xFJdqC/cI19dMLwitJ+XHeIQZ3X4XJyScN3rs6CyhRnKTl8R2RA
8t9gf5NePqAgEKQlHm9We20nZFDoO4L0sZ+g4CykrPzxE0yF6kvGx/L5CMKuhIlf
kC1H/fbPzLiGjd+Kr59ZOn/eSRFAkrVVGSbs56gJRQ/8BdNFzvIuQQB+4w9XAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUr0GUctX7c++6CFapyiH93j5yLGwwHwYDVR0j
BBgwFoAUHgxtQLhrLMXe/t+OQva6hFHG8HcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDgxNTQ4OS8xLzFFMEM2RDQwQjg2QjJDQzVERUZFREY4RTQyRjZC
QTg0NTFDNkYwNzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMUUwQzZENDBCODZCMkNDNURFRkVERjhFNDJGNkJBODQ1MUM2RjA3Ny5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTc5NjcxNDgxNTQ4OS8xLzMxMzQzMDJlMzIz
MTMwMmUzMjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAIzSGTANBgkqhkiG9w0BAQsFAAOCAQEAdDkHRGT0y2ZnAgANWvAFFgHz
dR+kIC/OSWNjz0QXPcAA/sfGeS9Vumn/cBAwSSjBfsNznwUbCnNYSlilZnvTDgAP
Ndqz7hQdonQ+C35qayCnGfKUfF9m4L4cqAL8lEpQSqulSs/FL6ClpptqG7vEQgUV
NSdA68y1g89u14c84OHtcOkgTpnsTUOJsCZrkWYSH8C8i9nRKDnmFnhOkA25Plw8
eQRAIhu8nuG8ZUyvn9hB9WbFdpd18BS/SdP0LDcWKgBl4K/Bqbc4aXwgUiRLYA4M
9A5VsAo7EUKez+cNXLTRnJ3KOegQz5jZinOuTRHvoRKV9PQFKz1ft9KYTbV6SA==
-----END CERTIFICATE-----
Generated at Wed May 13 14:03:55 2026 by rpki-client