Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e38332e302f32342d3234203d3e2034383038.roa
File:                     3134302e3231302e38332e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          XP0Rg8/ljwznPMRDNfZ+UB2bRX4Sz/Sa2xxTu6zVKbQ=
Subject key identifier:   F7:BA:3D:A9:EC:99:58:F1:B1:E2:79:AB:81:3C:09:81:1C:E9:2A:2A
Certificate issuer:       /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial:       0BE60C03CB771ADB3F3A52837DFB35FEEA751E27
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e38332e302f32342d3234203d3e2034383038.roa
Signing time:             Wed 10 Jun 2026 17:54:20 +0000
ROA not before:           Wed 10 Jun 2026 17:49:20 +0000
ROA not after:            Wed 09 Jun 2027 17:54:20 +0000
asID:                     4808
IP address blocks:        140.210.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e6:0c:03:cb:77:1a:db:3f:3a:52:83:7d:fb:35:fe:ea:75:1e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
        Validity
            Not Before: Jun 10 17:49:20 2026 GMT
            Not After : Jun  9 17:54:20 2027 GMT
        Subject: CN=F7BA3DA9EC9958F1B1E279AB813C09811CE92A2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f8:8f:ef:5e:5b:d0:d4:c2:54:7b:e3:d6:92:
                    81:8a:98:45:a7:3c:4e:d1:83:f2:c9:ca:1a:3c:94:
                    6f:30:d8:73:4e:fb:a3:f5:8e:d7:c5:a8:ce:25:5c:
                    02:23:72:df:cc:63:bf:a8:3c:62:e7:eb:7c:83:f7:
                    c8:e7:6d:0c:6f:04:6b:3e:ae:a4:7c:96:80:71:60:
                    94:5e:c0:92:07:74:65:74:5d:ef:8d:96:26:ee:5f:
                    16:28:f6:1e:39:87:aa:ca:8d:f7:5e:e7:55:f7:e1:
                    ef:27:21:6f:29:4e:1a:2b:fd:d2:7a:25:0e:98:a2:
                    91:ba:5e:ca:75:67:f8:28:2d:54:d4:76:21:2a:df:
                    f6:8d:da:a9:6d:a9:95:af:37:ad:7e:4e:83:e8:12:
                    53:e8:cf:8f:dc:6e:b1:79:2e:2d:a2:07:d6:fa:a3:
                    be:92:d9:4c:a3:ad:4a:1a:e7:9e:30:14:1d:4d:9e:
                    84:09:96:fe:19:85:3b:bb:4a:a3:89:ab:0a:51:1f:
                    ce:54:cb:25:2e:1e:e8:7d:f5:46:30:77:b3:ce:23:
                    76:ee:4b:61:78:95:cc:f3:7c:15:b1:ac:ff:ab:d7:
                    4a:f8:de:1d:88:4d:b7:dd:83:a6:db:10:c6:70:6c:
                    3d:87:c2:04:aa:32:d5:73:88:ce:0d:f1:f3:46:04:
                    50:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BA:3D:A9:EC:99:58:F1:B1:E2:79:AB:81:3C:09:81:1C:E9:2A:2A
            X509v3 Authority Key Identifier:
                keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e38332e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:76:fc:77:36:e7:f6:dd:e5:6b:14:99:4b:fd:a8:e7:7f:8b:
         6d:d8:80:9b:9a:56:82:56:c0:1c:6d:59:58:db:5c:39:3d:66:
         fc:fa:df:67:2e:29:6a:0a:52:19:59:dc:a4:fe:8a:8d:0a:fd:
         d7:aa:49:3b:4d:1c:9f:8c:89:60:d5:1d:fa:99:44:ec:27:c0:
         c4:04:85:43:95:8e:e6:db:d8:8d:92:ae:d2:78:f9:46:5b:bd:
         9e:c3:1b:ff:6f:00:de:8c:e2:00:fe:22:7f:8c:cc:ef:e9:bf:
         95:83:5e:15:df:18:c0:d7:ea:6c:76:87:49:8e:f1:12:a9:6a:
         31:08:bf:53:c8:67:83:7c:b7:99:18:26:15:16:7e:d9:59:a1:
         bf:f8:69:ab:46:5d:93:68:9b:88:28:fc:96:33:c0:72:79:67:
         af:81:2b:6b:37:d8:f7:3a:5a:c9:da:9e:ad:1d:63:df:59:81:
         40:ed:9c:ef:95:f2:e6:b0:01:2d:32:d1:17:58:35:9b:89:f7:
         ae:f4:8f:19:7b:7e:19:3d:fd:fb:c4:ad:80:45:ea:27:c0:5b:
         9b:84:b4:19:81:dd:05:99:28:6a:26:62:4e:e7:b4:62:ba:f6:
         25:85:7a:3f:5b:c1:3d:76:83:73:74:ac:b9:7e:91:30:10:d0:
         bb:b1:2f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:52 2026 by rpki-client