Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e37392e302f32342d3234203d3e2034383038.roa
File:                     3134302e3231302e37392e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          dg+d4J40alBHq/WHFeZS1yW6RIAMsYUCm0nUHhWiPu0=
Subject key identifier:   37:AA:9E:35:6B:95:02:89:27:5A:EE:B0:2B:9F:F2:38:0D:54:B3:F3
Certificate issuer:       /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial:       12F02529A623039C8B50C7136F048EA6310AD20B
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e37392e302f32342d3234203d3e2034383038.roa
Signing time:             Wed 10 Jun 2026 17:54:20 +0000
ROA not before:           Wed 10 Jun 2026 17:49:20 +0000
ROA not after:            Wed 09 Jun 2027 17:54:20 +0000
asID:                     4808
IP address blocks:        140.210.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f0:25:29:a6:23:03:9c:8b:50:c7:13:6f:04:8e:a6:31:0a:d2:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
        Validity
            Not Before: Jun 10 17:49:20 2026 GMT
            Not After : Jun  9 17:54:20 2027 GMT
        Subject: CN=37AA9E356B950289275AEEB02B9FF2380D54B3F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:82:a9:7d:d7:77:07:98:36:72:86:67:f9:3f:
                    f5:f2:8f:87:7d:19:3b:92:2b:c6:b8:a3:fd:9f:c3:
                    74:65:44:56:d3:40:d3:64:c4:68:09:de:4b:55:b4:
                    f9:46:d0:87:62:fc:89:25:5d:f2:dc:d1:4c:48:34:
                    e6:e8:4d:c0:8e:a6:92:08:21:95:d9:f0:6e:51:12:
                    26:d7:da:03:00:c0:1b:d1:7a:d6:c9:aa:6b:a6:5e:
                    dd:eb:7c:91:be:25:fe:a2:69:06:7f:96:05:f5:33:
                    65:55:a0:2c:4e:22:2d:75:ca:71:12:b1:13:48:25:
                    89:ea:47:f0:6e:f9:5d:39:89:9b:23:75:84:83:86:
                    a5:fc:67:d8:dd:2e:c6:ca:7d:d3:16:79:97:be:2e:
                    20:65:d0:b1:4a:fd:6e:6b:b1:53:91:57:a1:d2:c3:
                    ba:42:b7:44:68:f1:b5:f7:d6:f1:cf:ba:a9:e0:99:
                    39:06:1c:a9:f5:f2:c9:69:55:2d:07:e4:9c:a9:6f:
                    c8:b3:84:c3:f5:4b:dc:ae:74:17:b6:46:5b:3c:26:
                    a4:64:44:e4:fd:f1:ec:7b:28:df:70:eb:a2:72:72:
                    9a:5d:e7:d3:f6:f5:7a:f1:bb:a4:a0:ba:c7:74:9a:
                    88:a2:c9:13:ee:a3:65:78:cf:b8:74:4d:a5:9d:b1:
                    ae:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AA:9E:35:6B:95:02:89:27:5A:EE:B0:2B:9F:F2:38:0D:54:B3:F3
            X509v3 Authority Key Identifier:
                keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e37392e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:0e:a7:fa:0b:f0:d7:f5:b4:69:63:42:2d:0e:52:32:ae:fe:
         f4:5f:9d:93:eb:05:d8:a1:7d:73:7c:62:a5:24:29:fd:c5:62:
         43:6c:9c:e9:a7:ad:d7:ba:7a:59:7f:e9:d9:72:b5:80:ec:2e:
         d3:ae:76:84:5a:7d:45:5e:8a:fe:ce:ad:03:70:49:48:30:2b:
         fd:51:bf:f6:8b:37:0e:02:7d:dd:2b:f4:f6:9e:cc:c3:c4:4c:
         34:e7:1e:1b:09:53:c4:90:9f:b7:ca:65:b9:a2:30:f4:76:2e:
         2c:90:d1:8e:80:4a:db:72:6e:13:60:af:70:51:f2:07:0a:de:
         4c:56:47:38:fa:b1:71:bd:4b:20:79:1a:eb:6e:d6:7c:a9:09:
         77:23:9e:90:70:e3:34:d3:2d:e4:46:50:44:84:38:a4:6d:67:
         17:c7:87:db:37:e8:d6:b8:4b:91:1a:9b:f7:db:62:7b:34:c2:
         dd:e5:53:2b:92:44:22:cc:a4:51:d2:6a:17:78:ee:cb:cc:b8:
         a2:58:46:2e:a6:fb:8a:26:4c:a0:e1:eb:b2:4a:e0:17:6f:2a:
         6e:bb:84:19:9c:f6:09:65:e8:50:8b:20:af:d2:9d:18:1d:0a:
         f1:99:80:74:ed:f0:06:8a:77:ac:61:b5:39:d5:d5:78:74:9f:
         a6:0f:f2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:50 2026 by rpki-client