Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e38332e302f32342d3234203d3e203536303438.roa
File:                     3134302e3231302e38332e302f32342d3234203d3e203536303438.roa (raw, json)
Hash identifier:          YjPXb3huXxnlumGA+/PLzzjjen3LnUJY+6AZh582Jxk=
Subject key identifier:   EF:7A:25:D5:54:FB:D3:CA:88:AB:0F:ED:F4:1C:1B:B2:18:0F:EE:C0
Certificate issuer:       /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial:       455E2161DC34EB80F94D39CBFB7BC8DF4DD23D47
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e38332e302f32342d3234203d3e203536303438.roa
Signing time:             Wed 10 Jun 2026 17:54:19 +0000
ROA not before:           Wed 10 Jun 2026 17:49:19 +0000
ROA not after:            Wed 09 Jun 2027 17:54:19 +0000
asID:                     56048
IP address blocks:        140.210.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:5e:21:61:dc:34:eb:80:f9:4d:39:cb:fb:7b:c8:df:4d:d2:3d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
        Validity
            Not Before: Jun 10 17:49:19 2026 GMT
            Not After : Jun  9 17:54:19 2027 GMT
        Subject: CN=EF7A25D554FBD3CA88AB0FEDF41C1BB2180FEEC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5e:86:02:a7:48:bd:16:c6:60:de:b2:cb:da:
                    d9:89:7b:77:44:2a:4b:48:2b:58:bb:90:c4:bd:17:
                    8a:b0:cf:80:ee:75:6b:7c:db:c7:79:42:a5:3e:84:
                    d0:20:9b:1a:19:ec:1d:5c:a5:f0:a0:73:fe:ea:14:
                    57:85:16:7b:33:26:98:8b:16:5f:fb:e5:2e:b9:5d:
                    55:70:d5:5f:54:6a:56:5b:23:83:34:a0:06:da:72:
                    6c:76:c2:83:ed:d2:87:50:75:2c:cf:fb:08:af:a5:
                    8a:e9:b7:1f:7e:f4:50:a9:ce:a8:e5:e3:f7:cc:e3:
                    29:e8:11:f5:8b:2f:08:56:a9:12:a3:78:88:fd:ca:
                    b2:70:f3:c7:0a:ea:f3:17:9e:37:b8:12:b6:1b:2f:
                    9a:72:a1:ea:39:4a:e0:6e:e6:bd:85:4c:b4:79:f0:
                    2b:2d:7f:b2:0a:dc:79:d5:5b:ea:81:db:f2:6f:f6:
                    14:6f:5a:e7:b7:44:b1:8b:27:5e:f1:18:c5:ef:f8:
                    28:5d:7d:fe:8a:bf:ce:82:65:1d:1b:87:5a:3a:d0:
                    1b:03:cb:8d:6a:9d:97:9b:df:45:ae:0c:d5:80:d2:
                    c1:7f:00:19:3c:74:09:3d:7b:14:88:f9:66:5d:5c:
                    c2:8c:da:0e:68:9a:ca:09:bf:e1:c5:ab:f6:c3:ef:
                    21:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7A:25:D5:54:FB:D3:CA:88:AB:0F:ED:F4:1C:1B:B2:18:0F:EE:C0
            X509v3 Authority Key Identifier:
                keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e38332e302f32342d3234203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:cb:cd:7e:40:b2:07:76:bb:de:b5:55:af:53:ce:04:01:a0:
         d7:87:bf:e2:f2:37:97:87:c6:bb:e7:07:5f:8a:95:ad:dd:01:
         fe:48:42:25:7d:b4:2c:a9:a7:a7:77:f3:77:ed:d0:25:c3:8b:
         07:52:43:f2:3a:fb:2a:04:a4:dc:b6:00:25:00:07:4a:b8:ec:
         62:68:9d:fb:e6:1d:6b:85:b5:c9:49:70:ab:f4:8a:be:67:a6:
         63:9a:02:62:e9:63:91:62:da:66:c1:8c:9d:7f:d5:22:7e:b0:
         cd:94:df:32:ed:36:25:3e:74:3e:33:4d:6c:cb:29:a4:ef:30:
         3e:a5:88:a0:8a:65:91:18:04:80:74:2c:1f:81:38:29:db:6e:
         9c:f0:96:2b:82:0e:5a:57:62:4e:e2:9e:f3:3a:9d:36:3e:46:
         67:de:a9:7d:7d:93:32:54:63:c7:8c:d8:ae:93:2e:24:2d:97:
         c9:ab:2e:c7:f0:4f:30:e1:9e:94:99:f2:cb:b3:a4:09:c6:71:
         17:14:e4:f9:e3:88:04:b7:e6:2b:27:72:2f:f3:05:70:21:02:
         88:68:54:70:5c:6c:54:97:75:d4:78:37:01:48:3e:fc:44:cc:
         be:86:ea:0c:e0:35:25:33:9a:c1:74:fc:c4:e4:31:2a:3b:e3:
         66:94:c1:d6
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIURV4hYdw064D5TTnL+3vI303SPUcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZE
RUYwMERCQTAeFw0yNjA2MTAxNzQ5MTlaFw0yNzA2MDkxNzU0MTlaMDMxMTAvBgNV
BAMTKEVGN0EyNUQ1NTRGQkQzQ0E4OEFCMEZFREY0MUMxQkIyMTgwRkVFQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtXoYCp0i9FsZg3rLL2tmJe3dE
KktIK1i7kMS9F4qwz4DudWt828d5QqU+hNAgmxoZ7B1cpfCgc/7qFFeFFnszJpiL
Fl/75S65XVVw1V9UalZbI4M0oAbacmx2woPt0odQdSzP+wivpYrptx9+9FCpzqjl
4/fM4ynoEfWLLwhWqRKjeIj9yrJw88cK6vMXnje4ErYbL5pyoeo5SuBu5r2FTLR5
8Cstf7IK3HnVW+qB2/Jv9hRvWue3RLGLJ17xGMXv+Chdff6Kv86CZR0bh1o60BsD
y41qnZeb30WuDNWA0sF/ABk8dAk9exSI+WZdXMKM2g5omsoJv+HFq/bD7yEpAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU73ol1VT708qIqw/t9BwbshgP7sAwHwYDVR0j
BBgwFoAUNNWKBis9mW2x6KK7J2QYj97wDbowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODE1NjkzMC8xLzM0RDU4QTA2MkIzRDk5NkRCMUU4QTJCQjI3NjQx
ODhGREVGMDBEQkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZERUYwMERCQS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4ODk5MzU0ODE1NjkzMC8xLzMxMzQzMDJlMzIz
MTMwMmUzODMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAIzSUzANBgkqhkiG9w0BAQsFAAOCAQEAgsvNfkCyB3a73rVVr1POBAGg
14e/4vI3l4fGu+cHX4qVrd0B/khCJX20LKmnp3fzd+3QJcOLB1JD8jr7KgSk3LYA
JQAHSrjsYmid++Yda4W1yUlwq/SKvmemY5oCYuljkWLaZsGMnX/VIn6wzZTfMu02
JT50PjNNbMsppO8wPqWIoIplkRgEgHQsH4E4KdtunPCWK4IOWldiTuKe8zqdNj5G
Z96pfX2TMlRjx4zYrpMuJC2Xyasux/BPMOGelJnyy7OkCcZxFxTk+eOIBLfmKydy
L/MFcCECiGhUcFxsVJd11Hg3AUg+/ETMvobqDOA1JTOawXT8xOQxKjvjZpTB1g==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:51 2026 by rpki-client