Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32372e302f32342d3234203d3e203536303436.roa
File:                     3134302e3231302e32372e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          jUYEgZH0MXYqOeVlldpQVG4JGhPFcz1ChMn8LbjcIhs=
Subject key identifier:   13:94:C8:3C:D2:4F:8C:D1:86:CE:F2:55:E2:DA:A9:63:80:E2:A7:2E
Certificate issuer:       /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial:       2DE9C25664417AF9121669CFC4764607BD95B5EF
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32372e302f32342d3234203d3e203536303436.roa
Signing time:             Fri 08 May 2026 01:38:52 +0000
ROA not before:           Fri 08 May 2026 01:33:52 +0000
ROA not after:            Fri 07 May 2027 01:38:52 +0000
asID:                     56046
IP address blocks:        140.210.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e9:c2:56:64:41:7a:f9:12:16:69:cf:c4:76:46:07:bd:95:b5:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
        Validity
            Not Before: May  8 01:33:52 2026 GMT
            Not After : May  7 01:38:52 2027 GMT
        Subject: CN=1394C83CD24F8CD186CEF255E2DAA96380E2A72E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5e:3e:6c:49:dd:10:3f:96:14:9b:bc:94:53:
                    7d:2a:fe:42:c7:e8:16:7c:44:31:99:73:8f:78:26:
                    e2:25:bf:35:e9:56:5c:42:bb:d8:7e:fe:60:a6:2c:
                    1c:bd:f2:4b:4c:28:05:0a:1a:56:be:ae:6f:c7:07:
                    6a:6c:79:a2:30:44:d3:f7:48:8c:2c:56:c0:2b:34:
                    06:7f:8b:1e:3a:5f:82:a2:15:07:d9:44:78:40:d4:
                    88:f3:57:e9:fb:02:b1:72:46:b7:65:3c:6d:21:12:
                    c2:de:40:8a:85:e9:d6:0a:2a:42:49:f7:51:59:3d:
                    0b:8e:c7:7c:d9:2f:de:ca:f8:f5:66:02:56:93:26:
                    c1:f5:ac:1b:62:0c:9e:e9:1b:23:e0:a1:0a:42:a0:
                    da:11:ac:aa:4a:cf:a3:a6:8d:44:cd:f3:4f:19:54:
                    98:d0:0c:b5:49:02:47:c4:73:60:87:26:fa:8a:b3:
                    ac:f5:79:1c:d9:b6:b8:f3:c7:ae:82:60:5b:5b:1c:
                    63:f2:cc:ba:df:e0:62:53:38:c3:24:ff:28:4e:fc:
                    eb:03:b5:a9:bc:e3:83:d7:66:4a:50:4b:d3:2b:0d:
                    91:f2:c9:a5:52:3d:22:61:6c:d9:cd:02:0c:63:15:
                    83:93:7b:77:ca:27:f5:b9:89:21:87:ff:d8:31:57:
                    d2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:94:C8:3C:D2:4F:8C:D1:86:CE:F2:55:E2:DA:A9:63:80:E2:A7:2E
            X509v3 Authority Key Identifier:
                keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32372e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:d8:d0:1f:32:00:cb:fa:9a:d2:8f:bf:bc:f8:6f:52:50:15:
         d8:85:ad:77:83:15:10:0d:4c:ae:65:7c:76:26:01:d7:07:e6:
         d3:6d:ec:3a:3c:64:97:02:33:fb:7d:8a:f3:53:f1:58:b5:e9:
         9c:a6:a1:34:06:b6:ff:27:f4:d5:42:0b:9e:d4:49:c1:09:42:
         21:e6:89:78:12:7e:d6:85:ee:d3:c0:d5:f0:c5:a1:bb:c2:65:
         6d:5d:91:7a:c6:5b:aa:a7:6b:8f:6f:1f:76:a8:29:80:5d:83:
         cb:9f:e7:0c:6d:00:2c:fa:02:1f:d9:7f:43:93:ca:78:25:80:
         82:ec:8f:6c:00:6e:91:d1:02:28:7e:7f:21:85:c4:56:36:7e:
         1f:db:86:ec:12:92:56:d8:f1:29:85:49:6f:c9:47:3c:42:93:
         1b:eb:7a:7c:11:6d:e9:b6:a9:a7:ae:d6:64:8d:94:82:1b:10:
         e1:e2:04:1b:5e:b9:7b:b2:57:da:eb:9d:b8:fd:7c:26:07:b1:
         23:8f:03:b5:8d:d4:4a:5b:40:26:d5:86:29:93:b1:e6:b1:f0:
         57:2f:39:f4:1d:38:e8:e3:3c:82:d8:fc:34:9a:5f:79:f7:d8:
         e0:38:5b:42:d1:0b:f4:0f:58:a0:d2:d2:36:c0:ea:71:6b:ad:
         f9:61:95:55
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 13:34:21 2026 by rpki-client