Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e37332e302f32342d3234203d3e203536303438.roa
File:                     3134302e3231302e37332e302f32342d3234203d3e203536303438.roa (raw, json)
Hash identifier:          o/EI74CrmSrtejdbtfYgmjR7/0p/uqgzhzG8tNYcWb0=
Subject key identifier:   82:83:72:B0:57:CB:5D:64:DE:26:2D:3B:92:83:1F:85:38:11:C3:F6
Certificate issuer:       /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial:       5E34325C139670CB76ADEC4F5F98C0C06F31AF5A
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e37332e302f32342d3234203d3e203536303438.roa
Signing time:             Wed 10 Jun 2026 17:49:27 +0000
ROA not before:           Wed 10 Jun 2026 17:44:27 +0000
ROA not after:            Wed 09 Jun 2027 17:49:27 +0000
asID:                     56048
IP address blocks:        140.210.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:34:32:5c:13:96:70:cb:76:ad:ec:4f:5f:98:c0:c0:6f:31:af:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
        Validity
            Not Before: Jun 10 17:44:27 2026 GMT
            Not After : Jun  9 17:49:27 2027 GMT
        Subject: CN=828372B057CB5D64DE262D3B92831F853811C3F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:43:b4:ae:cf:42:9e:e7:c9:39:cf:82:58:a2:
                    0f:fb:4f:b5:1f:54:79:b2:c1:95:31:8a:3d:f9:b8:
                    f2:23:6b:5d:92:ca:8f:71:ae:4c:2d:eb:67:3a:8c:
                    c8:e3:97:48:fc:ec:1a:3c:85:3e:8a:fd:cf:99:41:
                    8c:36:93:a3:10:37:54:8a:31:40:01:f2:c2:44:e8:
                    3a:24:a0:c9:b8:2c:c6:15:8d:34:32:0d:96:83:9c:
                    6b:95:c7:6b:8b:e2:e5:6a:4b:e5:64:fc:e9:11:2c:
                    56:a8:e3:05:7c:d4:3f:d7:dc:19:40:44:7e:ee:af:
                    74:9e:48:49:ce:13:4d:98:a2:2f:48:70:a6:45:ff:
                    69:49:94:43:a4:7e:c8:b0:68:c2:04:20:68:b8:bf:
                    8f:09:57:3d:72:f0:a9:a8:a0:f1:65:06:48:e8:21:
                    61:7e:89:9d:f1:40:ff:b9:a0:b4:5e:68:0b:a1:1e:
                    d9:a4:0c:85:6b:2f:4c:d7:2e:7a:2e:99:ab:c1:67:
                    96:fb:4b:74:b5:76:28:86:0d:0d:b0:0f:6c:e6:94:
                    d2:53:8d:e8:f7:be:72:fd:eb:3c:6c:a1:19:f5:8a:
                    a0:50:15:e4:f9:5d:b4:32:3c:d5:5f:58:16:55:0c:
                    65:03:08:70:38:4f:18:a0:a0:a3:75:08:cc:4a:44:
                    e9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:83:72:B0:57:CB:5D:64:DE:26:2D:3B:92:83:1F:85:38:11:C3:F6
            X509v3 Authority Key Identifier:
                keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e37332e302f32342d3234203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:72:cd:e9:c4:72:2a:d7:70:1d:de:dc:70:52:32:4b:44:0d:
         c6:27:8f:44:65:3c:3c:c8:bd:d0:e7:bd:aa:48:4d:01:56:6c:
         77:93:e5:84:cb:c7:23:9c:83:9f:51:7e:fe:c6:ec:d7:74:47:
         c6:77:df:64:4f:76:19:dd:2a:fb:6a:28:bb:ee:c7:33:a1:26:
         50:10:4d:0c:37:00:ba:2e:4a:fb:98:df:5d:96:aa:c7:f4:e6:
         4b:cf:8c:dc:aa:b4:61:17:b4:67:2d:98:75:66:1e:96:0a:40:
         95:ac:6e:60:46:76:b1:51:94:d8:bf:7b:7e:50:17:88:c0:32:
         69:73:03:aa:ea:68:d3:5a:c8:ef:d4:19:78:bc:df:b3:11:fd:
         6c:2f:f2:dc:68:23:37:57:a8:0a:a8:74:82:b6:68:5a:a2:95:
         db:3b:c7:19:60:11:70:a0:3f:2b:21:99:cd:d4:ce:a0:bf:88:
         ee:fc:6f:00:b0:d9:7b:20:39:df:11:e0:7b:0f:28:06:1b:24:
         a1:17:87:50:5f:2d:35:69:b8:72:1b:46:22:db:f5:d2:90:9e:
         66:33:53:b2:22:fa:65:96:08:aa:46:ed:01:43:b3:31:7f:09:
         21:08:db:0d:d5:eb:af:d4:e2:3a:66:94:a1:f2:49:60:36:cb:
         b8:00:d1:d7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:53 2026 by rpki-client