Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e37392e302f32342d3234203d3e203536303438.roa
File:                     3134302e3231302e37392e302f32342d3234203d3e203536303438.roa (raw, json)
Hash identifier:          QkUH4JlCPro9nsHKTArRG2EjErCn+b2SHF8FoYuUPZA=
Subject key identifier:   49:D5:81:DD:CE:33:0B:E7:A9:A2:6B:AF:52:96:11:81:D8:16:C2:55
Certificate issuer:       /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial:       2C616AB20437CC151943CEDD693CF241560C6F35
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e37392e302f32342d3234203d3e203536303438.roa
Signing time:             Wed 10 Jun 2026 17:54:20 +0000
ROA not before:           Wed 10 Jun 2026 17:49:20 +0000
ROA not after:            Wed 09 Jun 2027 17:54:20 +0000
asID:                     56048
IP address blocks:        140.210.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:61:6a:b2:04:37:cc:15:19:43:ce:dd:69:3c:f2:41:56:0c:6f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
        Validity
            Not Before: Jun 10 17:49:20 2026 GMT
            Not After : Jun  9 17:54:20 2027 GMT
        Subject: CN=49D581DDCE330BE7A9A26BAF52961181D816C255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8c:13:fe:9c:2c:58:c0:7f:58:9e:c2:ae:cd:
                    fd:94:85:cc:d4:01:12:84:d7:f4:31:da:f0:8b:0e:
                    b0:77:44:b0:fd:89:3e:12:fc:c2:4e:c6:c4:b1:3e:
                    98:24:c5:b7:fd:b3:54:ea:46:fb:40:bb:54:c5:59:
                    2d:cd:03:37:21:44:ce:1e:83:10:1d:85:0c:d4:6e:
                    e7:3a:fd:02:4c:ee:07:51:32:6b:07:55:fe:13:60:
                    52:2c:1f:ea:0c:d8:06:81:4f:12:db:d8:15:ae:6a:
                    34:52:3e:00:07:dc:e2:48:b5:99:46:d0:9c:4e:20:
                    26:01:ab:9d:c7:40:7e:84:b8:10:c1:a1:91:bc:7d:
                    51:31:4e:3d:4c:3b:4d:2c:89:a8:fe:87:56:a4:2e:
                    38:9d:0d:2f:04:39:e7:9d:d3:0a:ae:9f:82:01:1b:
                    af:78:78:4c:a3:4b:f6:18:d4:bf:fd:70:08:07:1d:
                    93:28:48:c4:43:9d:e3:5e:2d:b1:49:f9:ca:d1:9e:
                    b6:ff:52:be:f3:e2:7b:6f:bf:8c:e5:aa:ca:96:a7:
                    3c:3b:d2:3a:6a:4e:b1:45:11:1b:64:e6:99:e3:e7:
                    ee:39:fb:aa:a3:59:60:55:9b:58:55:dd:56:ac:1d:
                    f7:af:b3:39:9d:09:f1:15:4e:31:b9:b4:c6:ca:93:
                    e6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D5:81:DD:CE:33:0B:E7:A9:A2:6B:AF:52:96:11:81:D8:16:C2:55
            X509v3 Authority Key Identifier:
                keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e37392e302f32342d3234203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:a8:79:d0:50:26:22:ca:9f:3a:18:4d:61:09:60:1b:f1:92:
         41:f9:2d:0d:cd:54:8c:a6:8f:c8:fa:ad:c3:75:f2:82:5d:10:
         83:e7:5e:ab:47:63:ff:c4:1b:dc:28:ec:cc:f8:ce:28:ff:a3:
         05:5e:b6:7a:be:18:40:5a:d6:5b:60:4b:bc:09:21:2a:0e:64:
         17:28:bb:f7:c3:cb:34:09:48:ae:33:03:75:42:a4:24:d2:15:
         33:a3:81:d7:34:a6:18:ca:6f:f4:8e:6f:b7:60:c1:2c:dc:74:
         a2:68:d4:e9:6d:84:68:7a:7f:c2:75:a9:93:b0:27:3e:9a:5e:
         04:28:d6:29:44:46:dd:0a:04:37:2a:a4:99:a4:d7:45:de:05:
         7a:bb:9e:25:bf:55:14:d3:64:c0:67:a4:4a:a0:05:62:0a:7e:
         44:bb:20:65:e3:ed:a7:05:71:8d:43:a4:5c:bd:cd:86:ee:9a:
         ab:05:a9:1e:9b:81:e9:4b:93:21:54:a7:cf:0a:14:62:c6:c1:
         57:39:eb:51:ce:8c:bc:9a:8d:b0:0c:ed:4f:d1:1a:86:3a:7a:
         55:fe:8c:ea:7e:27:b8:3c:20:09:f1:26:8c:c3:29:70:12:8a:
         b0:78:f9:1a:b5:56:51:2c:74:dd:97:14:48:be:5c:aa:a2:e2:
         f3:49:0c:cf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:51 2026 by rpki-client