Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32342e302f32312d3231203d3e203536303436.roa
File:                     3134302e3231302e32342e302f32312d3231203d3e203536303436.roa (raw, json)
Hash identifier:          HarN0BanI6tUTiksXBRgcjw9z6QN8sRSy76GCHTKjqo=
Subject key identifier:   66:07:F7:F6:60:AF:1E:07:E5:8D:C7:12:27:3B:5F:14:7C:D3:9D:F5
Certificate issuer:       /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial:       1606C54CE83D797C6427CAC940E2C24E131384E3
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32342e302f32312d3231203d3e203536303436.roa
Signing time:             Wed 23 Sep 2026 08:03:34 +0000
ROA not before:           Wed 23 Sep 2026 07:58:34 +0000
ROA not after:            Wed 22 Sep 2027 08:03:34 +0000
asID:                     56046
IP address blocks:        140.210.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 11:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:06:c5:4c:e8:3d:79:7c:64:27:ca:c9:40:e2:c2:4e:13:13:84:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
        Validity
            Not Before: Sep 23 07:58:34 2026 GMT
            Not After : Sep 22 08:03:34 2027 GMT
        Subject: CN=6607F7F660AF1E07E58DC712273B5F147CD39DF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0d:79:13:a3:ed:47:05:e3:b5:68:c8:91:e0:
                    7b:01:ef:80:f3:db:9d:b5:c7:fa:3b:19:d7:65:05:
                    e6:88:86:da:be:f0:62:52:5a:9c:9c:ad:a4:15:f6:
                    da:69:ff:ec:d5:6f:14:81:8e:42:c0:a4:68:3c:9f:
                    2a:b3:7e:4e:80:99:7d:03:23:8a:e4:12:9a:8c:da:
                    b7:3c:b3:8c:eb:e4:c4:92:6f:a6:26:a1:44:26:9b:
                    f4:d3:72:14:86:9f:51:69:3d:5f:f2:64:32:42:cd:
                    be:b7:0c:59:c8:4c:3a:ed:c3:cc:ee:0c:73:44:7d:
                    15:45:b9:f1:a7:94:65:7a:4b:c4:32:90:58:c4:61:
                    46:3a:ff:1c:53:c3:6c:ce:eb:5e:75:62:65:8a:7a:
                    99:cd:20:1a:98:a5:62:3d:c7:a7:ad:f2:5e:11:46:
                    78:d6:20:f7:8e:fa:74:f9:df:a4:93:27:93:b9:e9:
                    ab:06:96:ce:c9:3a:55:bc:09:0e:0a:6b:0d:13:c5:
                    63:5e:64:b4:f2:ca:91:87:58:40:3e:69:c5:bd:e5:
                    92:4e:4c:c7:5f:2f:c5:ee:78:4f:e5:a4:82:d7:96:
                    a9:4b:f6:3a:6d:cd:b8:c2:ad:38:93:b4:86:5f:fe:
                    71:cc:0b:ab:13:52:08:ca:04:56:95:ec:13:bc:93:
                    35:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:07:F7:F6:60:AF:1E:07:E5:8D:C7:12:27:3B:5F:14:7C:D3:9D:F5
            X509v3 Authority Key Identifier:
                keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32342e302f32312d3231203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0f:b2:37:a8:fd:f2:58:41:27:87:59:b4:c2:ff:d5:78:a6:34:
         0a:aa:5e:e1:af:5e:08:9e:5e:8e:6c:3f:2f:99:52:be:45:44:
         70:f8:c7:53:d8:37:36:3d:e9:7f:bc:b1:fd:c0:6d:2f:5f:1a:
         c9:3d:97:5f:dc:c9:f1:b9:71:f0:a9:18:f9:d0:e4:8a:e5:3f:
         75:8c:5d:52:e6:bb:02:69:55:2b:88:5b:18:c4:a5:cb:fc:ea:
         7e:84:75:c5:2f:26:53:2f:63:6e:80:eb:3e:58:3b:b4:45:51:
         a4:ed:ec:7e:3b:4c:de:a9:f7:79:78:c8:06:4e:3c:0e:a5:54:
         aa:a3:18:fc:ca:03:8b:2e:bd:db:fa:40:25:22:f9:81:82:c7:
         f9:ca:da:b9:12:eb:a9:23:87:54:81:69:1a:1d:55:4a:24:4c:
         e7:d9:f5:3d:7b:e2:f1:a3:b3:d0:ef:5a:87:40:03:91:b6:df:
         d5:3e:96:40:34:ac:1f:96:46:c0:6c:de:26:d0:7c:2a:0a:60:
         28:19:ca:67:2d:f5:9f:18:b2:7e:22:0c:61:15:75:12:ca:99:
         c9:a9:c8:66:46:8a:71:45:16:9a:0b:75:27:b2:28:a0:18:03:
         2c:3a:e8:19:99:96:5c:fe:77:35:b4:c8:17:6d:44:1a:31:a8:
         47:e2:f2:11
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:08:21 2026 by rpki-client