Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e31362e302f32312d3231203d3e203536303436.roa
File:                     3134302e3231302e31362e302f32312d3231203d3e203536303436.roa (raw, json)
Hash identifier:          TpUFVgoWpXpfgHe7AAYOYmmkzoUmQXXaMz0ateupHEU=
Subject key identifier:   C7:A0:45:B7:DA:B6:C8:FE:B0:8B:B1:E7:82:2E:53:17:46:4A:1D:05
Certificate issuer:       /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial:       2BA883CF0CBC8E4105661A9FB793C76B448918D7
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e31362e302f32312d3231203d3e203536303436.roa
Signing time:             Wed 23 Sep 2026 08:03:35 +0000
ROA not before:           Wed 23 Sep 2026 07:58:35 +0000
ROA not after:            Wed 22 Sep 2027 08:03:35 +0000
asID:                     56046
IP address blocks:        140.210.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a8:83:cf:0c:bc:8e:41:05:66:1a:9f:b7:93:c7:6b:44:89:18:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
        Validity
            Not Before: Sep 23 07:58:35 2026 GMT
            Not After : Sep 22 08:03:35 2027 GMT
        Subject: CN=C7A045B7DAB6C8FEB08BB1E7822E5317464A1D05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f0:06:98:12:bc:fa:56:65:5e:c4:34:54:82:
                    e9:40:7f:79:63:f2:f7:7f:73:bd:6a:11:bd:03:f5:
                    eb:c6:ff:01:bb:c5:cf:93:6b:c9:ca:13:e2:4c:2e:
                    f4:ba:e0:8a:0c:e6:5b:f2:c2:53:54:9e:6e:c7:9b:
                    bc:3a:c8:ca:90:1a:18:4c:c3:41:d6:31:c8:cb:5b:
                    98:dc:cd:40:83:65:23:5c:89:46:02:ef:bf:fa:15:
                    09:4f:ea:e2:c2:4f:28:48:6e:61:85:f6:0e:16:4f:
                    2f:4b:6e:ec:e5:06:04:14:58:04:af:9e:84:56:72:
                    6a:30:e7:f7:20:ae:b0:13:fc:a0:ac:a2:4a:64:63:
                    07:04:e8:55:23:f6:20:6c:58:6f:2c:4c:6b:1d:ca:
                    85:7d:b5:29:e2:f3:f6:e9:4c:91:1a:0b:2f:7e:a1:
                    4b:83:cd:be:c5:f8:83:b7:fa:21:c9:e6:a1:70:22:
                    46:c7:03:a4:ad:ff:fa:7c:cc:c2:48:f4:bb:84:ce:
                    98:f4:cf:85:46:5d:c9:e2:d6:a4:90:88:1f:80:7f:
                    0e:1c:3e:32:48:b9:e8:e4:ed:ea:36:2d:1b:fe:e7:
                    16:03:5e:f7:ec:b5:61:4f:f1:d6:ea:5f:a3:75:99:
                    90:43:3e:eb:7a:3a:81:6b:12:bc:f5:6d:f0:a4:15:
                    86:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A0:45:B7:DA:B6:C8:FE:B0:8B:B1:E7:82:2E:53:17:46:4A:1D:05
            X509v3 Authority Key Identifier:
                keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e31362e302f32312d3231203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         80:0d:c6:2e:23:e1:eb:ab:b6:7c:85:a1:4c:9f:98:80:c7:53:
         52:2a:0f:17:af:3a:30:19:43:3f:5e:fe:da:4e:b3:03:21:e9:
         a6:bb:04:79:f6:92:10:91:a0:b8:37:d9:d5:2b:22:70:64:20:
         30:32:48:23:c3:01:21:81:5e:8c:59:ac:ed:bc:db:02:2b:46:
         cb:b3:59:8a:38:84:b4:56:a6:d8:36:f0:ee:70:a5:5b:8b:77:
         9a:1c:d1:53:25:ee:2f:46:60:db:43:3e:c0:89:c4:c9:af:7d:
         16:c6:92:de:7e:24:28:0d:c9:e6:2c:5e:d9:d4:cb:5f:48:a5:
         aa:c2:2c:3c:b3:fa:95:e2:1a:64:5f:9c:55:f4:34:0d:20:ca:
         27:65:f6:c0:c0:08:33:8d:7d:c4:2d:ed:74:ad:2f:60:f0:75:
         77:46:e1:dd:11:3e:24:6e:d0:ce:a7:0d:28:26:a4:0c:55:a7:
         56:dd:15:96:e0:6c:6f:68:97:ca:95:f1:de:06:13:ee:dc:a1:
         d5:f3:dd:fc:35:00:38:22:01:9b:e9:1f:d7:73:e8:3d:f7:34:
         12:92:35:60:95:c4:64:74:dd:9e:d5:68:78:0c:6c:5a:7e:bf:
         2d:83:d5:ae:6c:95:03:a3:ba:ae:d3:0a:e8:9c:cb:8f:69:88:
         9a:f1:dd:0b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Sep 28 22:22:23 2026 by rpki-client