Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e37302e302f32342d3234203d3e2034383038.roa
File:                     3134302e3231302e37302e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          jaqsTYHyLMgK1sUrza6rWFGSdiaqUcL2ALxTPaznFlo=
Subject key identifier:   6C:F8:A7:D6:AA:73:A6:3D:3C:FF:37:D7:9A:51:B9:11:4A:3C:91:B7
Certificate issuer:       /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial:       162E45E6FD93177DCEC68EC15CC4CC7E7D643AC5
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e37302e302f32342d3234203d3e2034383038.roa
Signing time:             Wed 10 Jun 2026 17:49:27 +0000
ROA not before:           Wed 10 Jun 2026 17:44:27 +0000
ROA not after:            Wed 09 Jun 2027 17:49:27 +0000
asID:                     4808
IP address blocks:        140.210.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2e:45:e6:fd:93:17:7d:ce:c6:8e:c1:5c:c4:cc:7e:7d:64:3a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
        Validity
            Not Before: Jun 10 17:44:27 2026 GMT
            Not After : Jun  9 17:49:27 2027 GMT
        Subject: CN=6CF8A7D6AA73A63D3CFF37D79A51B9114A3C91B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:a6:f8:fb:f7:54:82:cd:6c:50:eb:04:5b:
                    c2:b8:5a:b3:60:d5:52:2f:7d:10:e3:a7:0f:a3:3a:
                    b0:98:e4:c7:aa:de:00:fb:f4:b9:0f:da:e1:a8:bf:
                    e3:b8:17:e2:ab:61:e9:b8:d7:08:f9:4c:f0:31:43:
                    ee:7d:63:13:0e:4d:0e:83:74:04:02:f5:aa:63:51:
                    eb:2a:c0:2d:56:9c:29:2f:b2:e1:c8:8d:e7:49:01:
                    67:5f:46:c7:05:4a:1a:e4:63:53:3a:32:93:11:be:
                    a9:f7:ee:46:02:f2:32:31:2e:79:d1:bb:6b:9d:cd:
                    74:9c:67:46:51:4e:78:bd:18:ca:34:71:aa:d2:db:
                    dc:76:0c:b3:8e:bc:a5:b7:77:32:42:d7:f0:86:62:
                    d3:bf:56:9c:b8:68:3e:69:e7:c6:3e:b6:66:44:92:
                    53:ac:d0:55:a1:f9:83:94:97:8e:fa:a9:66:0d:3f:
                    74:55:64:fd:f1:8c:62:6b:4f:47:a6:eb:d3:8a:f2:
                    cd:8f:d1:e0:8a:0b:c7:a2:93:06:16:ef:79:12:3b:
                    1b:34:b7:0a:2d:d2:23:ae:64:f7:f3:e6:e0:1b:fc:
                    f5:ce:fa:74:da:1e:bd:31:d5:39:d1:c7:16:1e:22:
                    ac:27:58:9b:1a:46:93:56:37:0a:7f:6a:db:92:4e:
                    db:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F8:A7:D6:AA:73:A6:3D:3C:FF:37:D7:9A:51:B9:11:4A:3C:91:B7
            X509v3 Authority Key Identifier:
                keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e37302e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:0b:84:6c:c7:3e:49:67:65:cc:31:8e:6b:86:9e:c9:67:b9:
         3b:e9:48:bf:58:88:6e:72:56:11:35:26:5e:2d:e6:dc:7f:f6:
         ba:1a:e6:12:11:7b:77:f8:50:75:c6:71:50:cb:e8:d7:39:16:
         3c:1c:b7:4b:fd:1d:83:c7:64:b3:03:8f:86:5c:55:19:b9:15:
         06:95:d5:c2:5a:ee:08:5b:4d:b3:f8:ce:65:11:7d:95:a1:66:
         c1:88:54:99:2c:ee:32:8e:a4:43:2e:1d:1f:c1:88:df:f5:bf:
         3c:aa:f4:30:18:cf:8d:58:47:b7:54:0e:e9:44:9f:03:bc:13:
         b2:c1:a5:86:20:49:62:23:79:86:4a:66:af:48:a1:2c:a3:04:
         bf:d1:ba:db:bc:76:a0:f5:22:c8:8b:d6:d0:ab:5a:a6:85:11:
         13:20:16:7b:8c:05:37:67:55:93:3e:01:89:63:e6:ff:54:19:
         0d:98:87:94:f1:20:51:e7:3a:66:97:e1:a9:44:ba:f5:d1:cb:
         2e:ff:75:5e:b3:ed:7b:89:4e:20:85:da:cb:88:7d:ec:16:ef:
         56:e9:ce:66:da:89:63:26:96:d4:f7:16:08:a9:3c:fc:0d:32:
         8f:88:1f:b3:39:6d:cc:12:1d:97:7d:aa:21:45:b6:96:78:6a:
         0a:29:a3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:07 2026 by rpki-client