Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32362e302f32342d3234203d3e203536303436.roa
File:                     3134302e3231302e32362e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          n3VyU42Lfcy4g/56VeaDrZAbySZjpyCmGrkFpjFCa2M=
Subject key identifier:   5C:D4:8A:50:92:7F:D1:25:B5:8E:4E:95:A1:F8:0D:67:E7:17:A9:DF
Certificate issuer:       /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial:       7E6CBAE246E546A8CA3184AC6CC69B52E3B24F78
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32362e302f32342d3234203d3e203536303436.roa
Signing time:             Fri 08 May 2026 01:38:52 +0000
ROA not before:           Fri 08 May 2026 01:33:52 +0000
ROA not after:            Fri 07 May 2027 01:38:52 +0000
asID:                     56046
IP address blocks:        140.210.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:6c:ba:e2:46:e5:46:a8:ca:31:84:ac:6c:c6:9b:52:e3:b2:4f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
        Validity
            Not Before: May  8 01:33:52 2026 GMT
            Not After : May  7 01:38:52 2027 GMT
        Subject: CN=5CD48A50927FD125B58E4E95A1F80D67E717A9DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3e:39:7b:d6:bd:1b:ca:3b:a5:80:15:fa:6f:
                    cf:21:48:9f:a1:5a:af:a9:7f:90:e7:73:2f:82:b3:
                    46:63:e2:c4:f1:c9:a7:11:fe:f2:c2:0f:14:6f:ef:
                    09:e0:f6:49:e9:18:e2:c8:64:76:e3:ba:6e:66:31:
                    48:cd:f2:9d:e5:d7:72:57:8c:b0:52:4d:4e:82:ba:
                    e7:9a:60:53:60:e6:e7:95:dc:35:75:7e:ae:4b:61:
                    21:f1:52:47:06:a6:3f:21:3d:f5:5f:f2:6f:43:9d:
                    fa:64:f1:7f:1b:4b:3f:8f:2f:99:0b:c7:ee:1a:3f:
                    fc:62:52:e6:9c:9b:37:81:db:64:7d:fb:87:89:1d:
                    bb:c2:2e:0e:c3:e1:ab:f0:b7:78:7c:6f:63:0e:9a:
                    06:ce:dd:a0:ff:a6:4f:8d:67:29:8f:9f:8f:a4:90:
                    56:41:f2:d7:70:63:89:a4:d2:73:39:97:37:5b:69:
                    f3:05:66:c5:93:81:02:7b:c6:98:50:0e:08:c7:87:
                    43:a6:35:9f:e8:21:06:79:32:d9:dd:f8:1c:cb:98:
                    b5:5e:82:60:4f:cb:2e:19:34:25:b2:c1:7e:67:d7:
                    9a:dd:a6:38:b2:25:15:9b:58:82:cf:fa:8a:5e:9f:
                    a4:e7:18:d0:d9:62:57:47:4c:5c:d2:00:b9:5b:02:
                    b5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D4:8A:50:92:7F:D1:25:B5:8E:4E:95:A1:F8:0D:67:E7:17:A9:DF
            X509v3 Authority Key Identifier:
                keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32362e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:e7:4d:2e:5e:57:43:e1:8c:81:23:b4:c0:1e:93:d9:1c:1e:
         4f:ae:ee:3f:1a:36:b8:14:88:78:73:13:c6:26:3d:5f:4e:73:
         3f:bd:35:2b:b0:41:3f:fe:65:39:0e:43:31:22:3c:97:43:d9:
         c1:dc:4f:eb:e3:a1:9f:a8:b0:3d:76:d1:7a:19:19:e6:2c:56:
         31:b0:81:d9:e6:82:82:e3:f9:ee:d8:30:6c:f9:39:fe:8e:17:
         80:67:75:5a:35:36:29:5e:23:29:d5:c0:17:ed:71:f9:b3:84:
         fb:bf:91:56:02:98:42:cd:c7:01:f4:79:8f:5d:39:58:c0:7b:
         e7:41:ea:e3:82:11:67:33:73:18:2e:ed:3f:bd:df:bd:ed:27:
         20:df:68:bf:3e:6e:92:d6:4e:db:6e:5c:33:38:2a:b5:27:a1:
         67:22:f6:f1:ec:f9:90:3d:55:07:1b:f4:84:fb:ee:ba:d3:77:
         ac:ac:c7:99:c5:49:ed:2d:0d:0a:91:df:be:d7:84:af:ba:c5:
         09:69:b7:6e:3f:19:e1:df:25:95:c1:aa:72:43:9f:ed:d7:94:
         84:3e:c9:d8:73:d7:e0:ea:21:ce:ac:0a:f1:9b:a3:e8:a5:dd:
         46:cc:78:75:d7:6f:a9:35:ef:3b:92:d5:9b:5e:65:90:6b:0f:
         03:d3:8f:0f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 13:03:01 2026 by rpki-client