Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e37372e302f32342d3234203d3e2034383038.roa
File:                     3134302e3231302e37372e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          82xg9Yjjc1YtMzd9t9oOXcHYP5VpgHYBmOyM7vhlaWI=
Subject key identifier:   03:97:40:BF:D8:7C:73:59:7E:B0:F5:9F:D2:65:F5:5B:92:6B:D4:3F
Certificate issuer:       /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial:       5878C77A40696665F621F55321B6B3D358D92029
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e37372e302f32342d3234203d3e2034383038.roa
Signing time:             Wed 10 Jun 2026 17:54:20 +0000
ROA not before:           Wed 10 Jun 2026 17:49:20 +0000
ROA not after:            Wed 09 Jun 2027 17:54:20 +0000
asID:                     4808
IP address blocks:        140.210.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:78:c7:7a:40:69:66:65:f6:21:f5:53:21:b6:b3:d3:58:d9:20:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
        Validity
            Not Before: Jun 10 17:49:20 2026 GMT
            Not After : Jun  9 17:54:20 2027 GMT
        Subject: CN=039740BFD87C73597EB0F59FD265F55B926BD43F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:89:ef:f8:19:5f:f7:7f:5b:df:11:80:1d:16:
                    8c:71:64:73:db:7d:3d:ba:3d:e7:0e:51:c5:72:85:
                    f1:27:bd:68:e5:79:63:f0:35:a2:85:57:11:f7:7a:
                    1a:14:97:31:52:c7:1f:4f:6d:de:d6:cf:b5:2f:6d:
                    06:22:b5:ea:47:1e:75:04:28:6c:aa:17:24:b1:da:
                    c8:2a:ae:c1:28:e4:fb:c1:35:ae:6c:8e:92:fb:66:
                    b4:16:3b:40:c4:74:f1:3b:07:b5:49:65:fd:e1:ca:
                    d3:b7:aa:77:dd:ce:4d:cf:0d:f2:2a:ba:49:91:67:
                    2d:1b:b6:e6:9f:ad:00:fb:01:a7:72:04:1a:03:d9:
                    fa:34:8c:d2:4a:6c:cc:07:48:57:c2:fb:b4:80:9d:
                    8c:b5:24:8a:40:d6:9e:97:b4:e5:0b:52:38:1a:0b:
                    70:43:47:4c:ce:b1:d4:86:ee:41:30:7e:52:6c:d1:
                    ec:05:52:0f:38:36:8d:a5:47:35:ca:ee:23:ea:03:
                    30:cb:2b:3a:5c:b8:99:82:d4:f1:db:66:d4:67:7f:
                    0a:cb:85:e1:fc:fe:e5:bb:cc:28:81:31:a9:93:e1:
                    fc:43:74:18:14:26:fc:95:80:86:ad:68:7d:66:c5:
                    37:25:96:ea:cf:78:ea:d8:b3:1f:3a:27:f1:99:c2:
                    da:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:97:40:BF:D8:7C:73:59:7E:B0:F5:9F:D2:65:F5:5B:92:6B:D4:3F
            X509v3 Authority Key Identifier:
                keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e37372e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:a7:48:29:b7:0e:0e:0d:0d:83:af:1a:a8:b6:59:9e:01:9e:
         cb:23:a4:c3:2e:b0:73:cc:24:af:1b:35:cd:06:0e:ae:25:4c:
         de:7e:76:76:2c:89:e5:2d:bd:36:1c:0b:02:76:22:0f:2a:d2:
         c9:43:54:0a:58:68:45:75:77:b9:07:6b:2e:3e:b6:6e:2f:26:
         b0:b3:1e:54:9d:26:dd:39:9c:a6:2d:e6:08:9c:3d:85:28:59:
         4d:b5:fa:66:2e:ab:79:9e:ff:16:38:40:4d:01:ef:0b:eb:2b:
         fa:fc:d6:8c:b4:09:1d:c6:dd:ca:e6:c4:d7:a6:f3:86:1f:2f:
         e3:6a:5b:72:67:9a:01:fb:6b:87:4b:7e:2e:68:12:59:a7:65:
         71:ae:08:ee:e3:be:b1:1c:9f:78:6b:fa:01:07:a6:9d:70:62:
         78:1f:dd:05:af:b1:69:03:41:92:4a:b0:4b:ec:f6:3e:12:80:
         21:fa:f2:60:77:b9:24:66:81:da:a9:89:7a:eb:12:0c:f8:d0:
         3a:5f:21:37:68:ed:ca:c3:d9:10:06:a9:44:59:bb:7c:08:16:
         2e:32:f7:67:cc:54:83:d2:07:22:61:9c:95:b7:64:99:86:de:
         95:47:7d:5e:de:6d:f9:99:4e:f2:e6:35:cc:9f:0b:60:ed:69:
         20:b4:dc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:08 2026 by rpki-client