Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e33302e302f32342d3234203d3e203536303436.roa
File:                     3134302e3231302e33302e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          adihbYB1SKvPWAPmDzTVJwHF0ABgvc52Lt5PXBmzUaA=
Subject key identifier:   05:C2:4B:15:02:93:84:0D:88:6A:03:0A:7B:3A:57:1D:FD:09:02:0F
Certificate issuer:       /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial:       0BE23CF4F95269A176E8E7413B67A4A39777D643
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e33302e302f32342d3234203d3e203536303436.roa
Signing time:             Fri 18 Sep 2026 01:47:36 +0000
ROA not before:           Fri 18 Sep 2026 01:42:36 +0000
ROA not after:            Fri 17 Sep 2027 01:47:36 +0000
asID:                     56046
IP address blocks:        140.210.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 21:34:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e2:3c:f4:f9:52:69:a1:76:e8:e7:41:3b:67:a4:a3:97:77:d6:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
        Validity
            Not Before: Sep 18 01:42:36 2026 GMT
            Not After : Sep 17 01:47:36 2027 GMT
        Subject: CN=05C24B150293840D886A030A7B3A571DFD09020F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d3:2a:34:0a:8b:45:90:b5:58:78:cb:eb:63:
                    a8:1b:1b:68:21:83:b2:2d:f1:f7:f3:0b:c2:da:76:
                    ef:2a:ae:14:78:78:a9:c2:aa:25:00:14:e9:99:ca:
                    18:e0:72:ad:d1:03:72:9d:35:25:5c:86:52:55:02:
                    cb:59:00:be:34:d4:27:77:cd:ff:39:58:97:02:f2:
                    02:07:4d:a1:ff:f7:ef:65:dd:9e:b2:79:65:97:6e:
                    97:9d:f5:b0:ac:f0:6c:7b:07:5e:e0:4c:c2:21:b0:
                    45:79:4c:0b:69:81:44:b7:61:bb:6c:96:7d:c7:6f:
                    36:26:82:bd:4c:07:dd:04:71:76:33:c2:c6:e9:dd:
                    66:4d:ff:d3:e2:9f:d2:68:9d:d1:09:d6:10:d0:59:
                    e3:8e:1a:b3:98:d6:05:bd:2e:dd:15:81:c1:de:c6:
                    02:89:26:7b:5e:1f:95:b5:26:2e:16:ef:6b:d7:fe:
                    00:bd:42:ed:49:eb:4c:d4:64:92:59:ac:e1:05:f7:
                    39:86:35:98:57:f6:d5:b4:82:45:c0:e1:9d:e5:93:
                    32:27:9d:6f:7f:c0:1b:40:9e:f7:38:e4:46:53:c2:
                    7b:77:ff:26:88:b8:76:a6:80:99:ed:f2:d7:b2:85:
                    3b:21:ec:09:bf:0f:e1:60:8f:d8:48:a7:ff:be:13:
                    20:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C2:4B:15:02:93:84:0D:88:6A:03:0A:7B:3A:57:1D:FD:09:02:0F
            X509v3 Authority Key Identifier:
                keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e33302e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:89:28:18:3f:5a:53:07:a7:c1:9a:e6:63:12:89:12:1b:5b:
         16:14:22:0f:af:b5:07:1a:44:c0:ad:a5:e4:e1:fc:38:45:45:
         a9:09:9f:fa:0b:14:4c:c2:3a:a4:1b:f9:b9:3a:c8:56:40:ab:
         19:61:44:94:94:62:fc:05:ba:84:67:a1:ef:fa:80:2c:c0:4b:
         a8:57:6e:ae:82:0c:e8:37:54:4a:55:61:e4:ff:47:d6:86:74:
         30:a0:c6:a8:18:bd:f7:d9:4a:27:60:14:74:86:b9:20:90:6e:
         3a:bc:e4:e3:d6:39:d9:19:6c:14:01:6e:d7:90:85:64:72:15:
         09:c6:7e:94:b1:31:03:b0:30:6c:34:2d:1e:b4:e5:6f:32:fe:
         14:e0:8e:62:0a:f6:ca:f9:76:24:fd:85:c5:8c:f6:b0:6a:89:
         89:96:1b:5b:ca:fd:4b:61:9a:db:8f:cb:67:35:ea:24:2f:4a:
         9f:83:5c:e5:f3:e3:5d:f2:3e:1f:68:ef:b7:af:36:a8:68:5d:
         1a:d6:0f:07:c3:f7:43:c8:90:94:43:f0:7e:d4:f0:3e:0b:9d:
         89:4c:d7:fb:3c:43:b3:9e:68:c9:13:f1:4a:8f:4d:b6:25:97:
         b4:a4:f8:25:24:9f:58:c9:c2:5a:d7:fe:bf:c4:f8:d2:1b:ad:
         73:85:38:33
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUC+I89PlSaaF26OdBO2eko5d31kMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUwQzZENDBCODZCMkNDNURFRkVERjhFNDJGNkJBODQ1
MUM2RjA3NzAeFw0yNjA5MTgwMTQyMzZaFw0yNzA5MTcwMTQ3MzZaMDMxMTAvBgNV
BAMTKDA1QzI0QjE1MDI5Mzg0MEQ4ODZBMDMwQTdCM0E1NzFERkQwOTAyMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC60yo0CotFkLVYeMvrY6gbG2gh
g7It8ffzC8Ladu8qrhR4eKnCqiUAFOmZyhjgcq3RA3KdNSVchlJVAstZAL401Cd3
zf85WJcC8gIHTaH/9+9l3Z6yeWWXbped9bCs8Gx7B17gTMIhsEV5TAtpgUS3Ybts
ln3HbzYmgr1MB90EcXYzwsbp3WZN/9Pin9JondEJ1hDQWeOOGrOY1gW9Lt0VgcHe
xgKJJnteH5W1Ji4W72vX/gC9Qu1J60zUZJJZrOEF9zmGNZhX9tW0gkXA4Z3lkzIn
nW9/wBtAnvc45EZTwnt3/yaIuHamgJnt8teyhTsh7Am/D+Fgj9hIp/++EyCPAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUBcJLFQKThA2IagMKezpXHf0JAg8wHwYDVR0j
BBgwFoAUHgxtQLhrLMXe/t+OQva6hFHG8HcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDgxNTQ4OS8xLzFFMEM2RDQwQjg2QjJDQzVERUZFREY4RTQyRjZC
QTg0NTFDNkYwNzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMUUwQzZENDBCODZCMkNDNURFRkVERjhFNDJGNkJBODQ1MUM2RjA3Ny5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTc5NjcxNDgxNTQ4OS8xLzMxMzQzMDJlMzIz
MTMwMmUzMzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAIzSHjANBgkqhkiG9w0BAQsFAAOCAQEAbokoGD9aUwenwZrmYxKJEhtb
FhQiD6+1BxpEwK2l5OH8OEVFqQmf+gsUTMI6pBv5uTrIVkCrGWFElJRi/AW6hGeh
7/qALMBLqFduroIM6DdUSlVh5P9H1oZ0MKDGqBi999lKJ2AUdIa5IJBuOrzk49Y5
2RlsFAFu15CFZHIVCcZ+lLExA7AwbDQtHrTlbzL+FOCOYgr2yvl2JP2FxYz2sGqJ
iZYbW8r9S2Ga24/LZzXqJC9Kn4Nc5fPjXfI+H2jvt682qGhdGtYPB8P3Q8iQlEPw
ftTwPgudiUzX+zxDs55oyRPxSo9NtiWXtKT4JSSfWMnCWtf+v8T40hutc4U4Mw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 12:19:40 2026 by rpki-client