Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e36392e302f32342d3234203d3e203536303438.roa
File:                     3134302e3231302e36392e302f32342d3234203d3e203536303438.roa (raw, json)
Hash identifier:          iEVGd9PtL//2LJ/Z918dkYD9OLhTRIEfGPuF458jrQk=
Subject key identifier:   69:BA:80:43:B6:C6:55:BB:C5:D7:28:5E:79:01:E5:2B:6B:64:DF:0A
Certificate issuer:       /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial:       714235E3A0C5E553EAC05074CF6F5267421A3D76
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e36392e302f32342d3234203d3e203536303438.roa
Signing time:             Wed 10 Jun 2026 17:49:28 +0000
ROA not before:           Wed 10 Jun 2026 17:44:28 +0000
ROA not after:            Wed 09 Jun 2027 17:49:28 +0000
asID:                     56048
IP address blocks:        140.210.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:42:35:e3:a0:c5:e5:53:ea:c0:50:74:cf:6f:52:67:42:1a:3d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
        Validity
            Not Before: Jun 10 17:44:28 2026 GMT
            Not After : Jun  9 17:49:28 2027 GMT
        Subject: CN=69BA8043B6C655BBC5D7285E7901E52B6B64DF0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ef:f1:e0:9e:e2:51:6b:34:6b:50:0c:71:4f:
                    d3:49:0c:35:51:80:23:00:0a:47:a3:f2:94:23:44:
                    11:82:1a:c1:b5:a3:65:66:64:72:10:f6:5d:af:1b:
                    33:8e:4f:78:f9:6c:ba:e8:5a:0c:61:46:c7:9f:49:
                    65:92:e8:1a:bb:0f:1e:39:22:90:f6:ba:7c:3d:2b:
                    55:a3:d3:0b:36:56:4d:d0:f2:b5:b1:59:ab:de:cc:
                    bc:fa:f0:38:d0:0c:dc:2c:6e:af:25:f6:f5:ac:0c:
                    e6:42:09:9f:6b:bc:02:72:d4:b8:5f:c9:0d:76:4c:
                    7f:70:b7:0d:a9:97:8f:a8:4d:3d:d9:b4:bf:c2:10:
                    bd:05:83:52:cd:62:0c:e6:4e:06:1c:65:20:55:3a:
                    62:33:2c:79:f7:68:d3:62:26:42:64:26:5d:a6:04:
                    3b:0e:39:7a:55:af:da:03:bc:a0:4a:58:4d:86:48:
                    bd:50:97:28:af:c2:eb:7e:3f:83:20:88:df:a5:9c:
                    e4:33:aa:c4:f2:de:08:0d:b5:7a:94:7d:a7:16:db:
                    af:8b:71:4e:06:1f:81:62:d7:89:2e:f7:c6:97:23:
                    21:30:f8:13:c7:ff:b8:fa:f4:9e:0c:55:80:b9:4e:
                    9f:f7:f9:28:00:09:5d:01:e8:3b:b5:de:b0:b3:3a:
                    b3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BA:80:43:B6:C6:55:BB:C5:D7:28:5E:79:01:E5:2B:6B:64:DF:0A
            X509v3 Authority Key Identifier:
                keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e36392e302f32342d3234203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:ae:57:e1:09:85:5a:a4:13:b5:06:38:30:97:f0:95:99:e3:
         9d:a9:0d:7e:7f:bb:20:0e:f9:cb:e7:60:67:7c:88:99:8c:d3:
         54:93:d8:54:ef:e1:5e:d2:ec:dc:cb:c6:c1:91:79:43:da:51:
         ce:4b:73:ce:9f:a9:f4:b8:05:15:c8:94:6c:ac:9c:42:6c:15:
         4e:3b:5a:d3:e4:15:68:f3:90:aa:32:b9:43:8a:bc:1b:36:ab:
         2a:5b:2c:4f:fc:25:a5:a0:11:65:f6:e0:e1:2a:13:da:bb:8f:
         81:d4:3b:91:21:70:c5:5e:d8:01:7e:6e:a7:6f:b4:fd:27:51:
         6b:62:d6:e3:5e:1b:f7:13:6e:a6:0f:8f:f1:44:b5:2a:93:19:
         bd:32:33:ac:dd:51:87:15:93:a0:d5:97:95:a6:df:bf:5f:ac:
         be:6e:f8:08:3a:93:c9:18:e0:5d:27:05:63:47:ea:e0:9b:1d:
         24:ff:a6:a4:75:de:e1:c8:63:e4:61:a6:d8:02:ca:d5:10:d4:
         a6:57:d2:03:00:0b:a7:63:2f:ed:5c:54:58:de:4b:9a:2a:0b:
         9b:f4:2e:a5:b0:76:c8:5a:c8:4c:f8:8f:b1:57:10:94:b3:c5:
         4b:3c:72:df:61:e2:82:05:42:c5:e1:cf:53:61:fc:16:f5:08:
         17:92:e7:be
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUcUI146DF5VPqwFB0z29SZ0IaPXYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZE
RUYwMERCQTAeFw0yNjA2MTAxNzQ0MjhaFw0yNzA2MDkxNzQ5MjhaMDMxMTAvBgNV
BAMTKDY5QkE4MDQzQjZDNjU1QkJDNUQ3Mjg1RTc5MDFFNTJCNkI2NERGMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/7/HgnuJRazRrUAxxT9NJDDVR
gCMACkej8pQjRBGCGsG1o2VmZHIQ9l2vGzOOT3j5bLroWgxhRsefSWWS6Bq7Dx45
IpD2unw9K1Wj0ws2Vk3Q8rWxWavezLz68DjQDNwsbq8l9vWsDOZCCZ9rvAJy1Lhf
yQ12TH9wtw2pl4+oTT3ZtL/CEL0Fg1LNYgzmTgYcZSBVOmIzLHn3aNNiJkJkJl2m
BDsOOXpVr9oDvKBKWE2GSL1Qlyivwut+P4MgiN+lnOQzqsTy3ggNtXqUfacW26+L
cU4GH4Fi14ku98aXIyEw+BPH/7j69J4MVYC5Tp/3+SgACV0B6Du13rCzOrNTAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUabqAQ7bGVbvF1yheeQHlK2tk3wowHwYDVR0j
BBgwFoAUNNWKBis9mW2x6KK7J2QYj97wDbowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODE1NjkzMC8xLzM0RDU4QTA2MkIzRDk5NkRCMUU4QTJCQjI3NjQx
ODhGREVGMDBEQkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZERUYwMERCQS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4ODk5MzU0ODE1NjkzMC8xLzMxMzQzMDJlMzIz
MTMwMmUzNjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAIzSRTANBgkqhkiG9w0BAQsFAAOCAQEAnK5X4QmFWqQTtQY4MJfwlZnj
nakNfn+7IA75y+dgZ3yImYzTVJPYVO/hXtLs3MvGwZF5Q9pRzktzzp+p9LgFFciU
bKycQmwVTjta0+QVaPOQqjK5Q4q8GzarKlssT/wlpaARZfbg4SoT2ruPgdQ7kSFw
xV7YAX5up2+0/SdRa2LW414b9xNupg+P8US1KpMZvTIzrN1RhxWToNWXlabfv1+s
vm74CDqTyRjgXScFY0fq4JsdJP+mpHXe4chj5GGm2ALK1RDUplfSAwALp2Mv7VxU
WN5LmioLm/QupbB2yFrITPiPsVcQlLPFSzxy32HiggVCxeHPU2H8FvUIF5Lnvg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:51 2026 by rpki-client