Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS146838.roa
File:                     AS146838.roa (raw, json)
Hash identifier:          MTCngMPNWmRnisx5hTizNPX+K8oCQs2lVT5mdlPUUpI=
Subject key identifier:   F6:08:95:8A:32:3E:67:44:1F:D3:7E:82:59:12:A8:05:9F:E9:6E:92
Certificate issuer:       /CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Certificate serial:       07CDD091444FEA998C3007030500AA544DE825F1
Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS146838.roa
Signing time:             Thu 04 Jun 2026 02:16:25 +0000
ROA not before:           Thu 04 Jun 2026 02:11:25 +0000
ROA not after:            Thu 03 Jun 2027 02:16:25 +0000
asID:                     146838
IP address blocks:        240a:4093::/35 maxlen: 35
                          240a:41d6::/31 maxlen: 31
                          240a:4230::/31 maxlen: 31
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:cd:d0:91:44:4f:ea:99:8c:30:07:03:05:00:aa:54:4d:e8:25:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6
        Validity
            Not Before: Jun  4 02:11:25 2026 GMT
            Not After : Jun  3 02:16:25 2027 GMT
        Subject: CN=F608958A323E67441FD37E825912A8059FE96E92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6a:4d:12:38:8f:a7:dc:c6:24:60:d7:0c:ea:
                    76:51:6d:2a:e0:3e:03:d0:8d:3d:e7:e9:07:fd:8d:
                    2d:cd:90:c2:7d:0c:88:8d:de:da:f0:19:d4:5a:42:
                    1e:aa:9a:d7:20:2a:df:d2:18:27:bb:5a:09:31:0a:
                    2b:35:3e:bc:4a:53:1e:fc:9a:1d:90:e7:d1:8a:95:
                    de:10:58:f8:01:30:d4:ca:7f:88:31:bf:1c:85:f5:
                    8e:59:f4:9d:6b:9d:6b:9a:50:3c:d3:8d:25:ed:71:
                    45:a3:30:43:a4:52:43:11:9f:dc:7a:db:e3:9b:c8:
                    6d:5d:0f:b3:00:00:23:70:70:4d:89:ce:e3:eb:9b:
                    b2:93:a7:ab:b5:ef:dd:79:15:59:84:de:14:2b:f0:
                    0c:64:c9:f0:cc:de:8e:a2:74:b4:e5:e7:80:2f:4c:
                    6f:6c:45:0b:05:82:c7:42:17:9a:83:84:6c:b3:e1:
                    e7:ad:7d:fc:a6:c9:ce:c3:44:3f:c2:81:b5:ed:82:
                    53:fd:6a:77:9e:ae:93:78:dc:c4:e0:d2:d3:5e:4a:
                    86:25:82:60:48:16:37:83:8f:24:5f:af:ba:af:e6:
                    dc:f7:5a:5a:46:2b:a7:d4:7d:db:22:64:b7:07:c3:
                    0b:24:f0:6d:0e:ce:7d:c3:7f:b4:94:15:63:4c:17:
                    33:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:08:95:8A:32:3E:67:44:1F:D3:7E:82:59:12:A8:05:9F:E9:6E:92
            X509v3 Authority Key Identifier:
                keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS146838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:4093::/35
                  240a:41d6::/31
                  240a:4230::/31

    Signature Algorithm: sha256WithRSAEncryption
         60:2d:10:9e:bc:db:9c:78:26:a2:3f:7a:ad:e0:d9:a8:fd:b8:
         39:cb:a1:ff:0c:ba:bf:92:46:7a:33:36:09:e7:26:f9:c1:e9:
         4a:79:e2:6a:d3:97:33:8d:85:4d:30:7c:22:60:1d:a4:66:26:
         bf:7a:55:e5:d2:50:82:0b:58:5c:72:28:ec:03:d9:ff:43:16:
         b4:52:65:fd:ad:c6:cf:4b:54:44:32:8e:60:de:27:1e:f4:f4:
         77:70:bf:0f:61:45:3c:2a:a0:af:36:f0:64:b0:9f:28:53:b5:
         3a:be:ac:bd:ca:6f:33:fd:9d:3c:24:6b:1b:61:3c:5e:8d:5f:
         5d:19:33:2b:d3:ec:66:51:1e:01:fd:c1:2c:e1:ea:8e:23:d7:
         4a:3d:63:90:7b:31:ec:41:68:15:0d:6a:87:d4:3d:64:c5:06:
         be:2e:e1:92:10:00:ab:e1:bf:ca:02:1a:d9:33:e3:43:a1:76:
         3a:c4:7a:d9:dd:9d:5f:0c:8a:46:c8:9f:d3:2c:c1:0d:6c:84:
         12:5b:8a:6b:90:54:d9:26:32:f0:63:b7:3d:41:0a:ac:ef:0e:
         8a:3b:7a:bf:cb:53:c9:3e:5f:bc:bb:1e:ba:33:b2:9e:2c:cc:
         69:27:6a:58:6c:e6:13:8e:11:46:17:b4:7e:4c:d1:2d:d6:38:
         ef:6d:c8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:22:59 2026 by rpki-client