Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e38342e302f32342d3234203d3e2034383038.roa
File:                     3134302e3231302e38342e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          2iiIZWzoio8JbC5ca4CDp/C3+CUJl1uYVtzo4tEJUeg=
Subject key identifier:   CB:64:F9:7D:EC:1D:61:66:70:22:D0:69:66:49:39:6D:5F:44:C6:3E
Certificate issuer:       /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial:       665430450A861F19A2653D03838B6CB72AFF82DA
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e38342e302f32342d3234203d3e2034383038.roa
Signing time:             Wed 10 Jun 2026 17:54:20 +0000
ROA not before:           Wed 10 Jun 2026 17:49:20 +0000
ROA not after:            Wed 09 Jun 2027 17:54:20 +0000
asID:                     4808
IP address blocks:        140.210.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:54:30:45:0a:86:1f:19:a2:65:3d:03:83:8b:6c:b7:2a:ff:82:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
        Validity
            Not Before: Jun 10 17:49:20 2026 GMT
            Not After : Jun  9 17:54:20 2027 GMT
        Subject: CN=CB64F97DEC1D61667022D0696649396D5F44C63E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2b:41:2d:d0:3a:e5:6a:11:37:72:e7:00:e3:
                    cb:f7:78:54:8a:7c:39:71:c9:db:ad:54:7d:98:80:
                    ec:fc:6d:d4:21:a7:71:a7:80:ae:32:67:32:21:e3:
                    27:b5:e1:42:85:63:b2:44:a0:06:0a:76:90:54:59:
                    7a:a5:dc:63:9c:11:df:62:c8:bc:bb:2e:2f:56:77:
                    1f:36:48:a2:f0:cd:b4:5d:4e:19:aa:18:d2:a5:61:
                    1a:c0:a8:e0:d1:fd:bc:0c:b4:45:49:4c:c7:01:4d:
                    ad:dc:d4:1b:9c:15:8f:57:c1:85:aa:ae:26:43:9c:
                    dc:0c:3b:bc:3d:80:ca:51:24:b3:0d:68:07:cc:9c:
                    44:29:13:ae:2d:02:22:b3:45:e1:26:09:5b:f9:33:
                    5b:9b:fe:4a:75:1a:0d:d8:0b:5a:f0:2b:ee:e6:16:
                    83:da:f2:91:c3:3e:cd:6f:cc:c5:ed:42:9e:5b:75:
                    dc:3d:c4:56:b9:a9:22:f9:a7:16:c9:12:2c:82:0b:
                    51:9c:bf:aa:c6:f9:35:bb:fb:6b:f3:b7:0e:f7:1e:
                    d7:43:91:88:7d:77:70:f0:7b:42:fc:dd:de:b6:36:
                    d8:7b:5c:ae:fd:7d:47:48:d4:75:36:87:dd:f2:f6:
                    ae:43:56:fe:cf:00:1f:96:61:70:35:b5:72:82:2a:
                    96:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:64:F9:7D:EC:1D:61:66:70:22:D0:69:66:49:39:6D:5F:44:C6:3E
            X509v3 Authority Key Identifier:
                keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e38342e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:f9:94:78:59:9f:6a:1d:75:66:51:91:fe:53:5a:d3:af:09:
         8a:67:f7:be:c8:b6:33:fa:4c:f0:fc:19:95:42:c0:e4:64:f9:
         a5:39:82:9b:77:36:74:36:33:3a:98:74:46:cf:45:f6:fb:81:
         d3:c7:2c:38:3d:93:af:14:94:bb:00:fc:06:2d:8b:41:d6:2d:
         47:20:f6:78:ed:3f:0a:dc:47:73:34:f1:c6:39:37:f5:61:03:
         f9:a4:39:86:af:c6:4e:a9:d5:59:ea:71:1d:59:4b:81:bc:3c:
         dc:cf:40:22:ee:b6:f1:6f:ae:70:b9:86:dd:1b:e0:55:1d:1e:
         47:65:45:54:01:57:bb:b9:7e:ec:80:6f:7c:d5:86:f2:66:4d:
         7a:33:70:cc:86:7f:7c:0d:40:0b:30:ea:9a:9a:16:77:d3:b7:
         b1:d5:7d:cb:2d:2c:72:eb:e6:cf:a2:2f:12:8e:72:6e:59:a1:
         82:1b:99:6a:8b:0b:16:53:28:42:33:4c:47:06:20:f7:33:58:
         3f:48:87:f2:eb:85:c1:d8:60:06:47:55:af:40:09:ce:ba:9c:
         86:39:a2:d9:de:91:53:67:d6:32:19:e6:7e:d1:ca:b6:59:f5:
         23:77:0a:b0:e2:66:15:78:9d:ad:c0:b3:61:f7:72:9c:d9:5a:
         a9:5c:5c:ea
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUZlQwRQqGHxmiZT0Dg4tstyr/gtowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZE
RUYwMERCQTAeFw0yNjA2MTAxNzQ5MjBaFw0yNzA2MDkxNzU0MjBaMDMxMTAvBgNV
BAMTKENCNjRGOTdERUMxRDYxNjY3MDIyRDA2OTY2NDkzOTZENUY0NEM2M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1K0Et0DrlahE3cucA48v3eFSK
fDlxydutVH2YgOz8bdQhp3GngK4yZzIh4ye14UKFY7JEoAYKdpBUWXql3GOcEd9i
yLy7Li9Wdx82SKLwzbRdThmqGNKlYRrAqODR/bwMtEVJTMcBTa3c1BucFY9XwYWq
riZDnNwMO7w9gMpRJLMNaAfMnEQpE64tAiKzReEmCVv5M1ub/kp1Gg3YC1rwK+7m
FoPa8pHDPs1vzMXtQp5bddw9xFa5qSL5pxbJEiyCC1Gcv6rG+TW7+2vztw73HtdD
kYh9d3Dwe0L83d62Nth7XK79fUdI1HU2h93y9q5DVv7PAB+WYXA1tXKCKpbXAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUy2T5fewdYWZwItBpZkk5bV9Exj4wHwYDVR0j
BBgwFoAUNNWKBis9mW2x6KK7J2QYj97wDbowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODE1NjkzMC8xLzM0RDU4QTA2MkIzRDk5NkRCMUU4QTJCQjI3NjQx
ODhGREVGMDBEQkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZERUYwMERCQS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTg4OTkzNTQ4MTU2OTMwLzEvMzEzNDMwMmUzMjMx
MzAyZTM4MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAIzSVDANBgkqhkiG9w0BAQsFAAOCAQEAf/mUeFmfah11ZlGR/lNa068Jimf3
vsi2M/pM8PwZlULA5GT5pTmCm3c2dDYzOph0Rs9F9vuB08csOD2TrxSUuwD8Bi2L
QdYtRyD2eO0/CtxHczTxxjk39WED+aQ5hq/GTqnVWepxHVlLgbw83M9AIu628W+u
cLmG3RvgVR0eR2VFVAFXu7l+7IBvfNWG8mZNejNwzIZ/fA1ACzDqmpoWd9O3sdV9
yy0scuvmz6IvEo5yblmhghuZaosLFlMoQjNMRwYg9zNYP0iH8uuFwdhgBkdVr0AJ
zrqchjmi2d6RU2fWMhnmftHKtln1I3cKsOJmFXidrcCzYfdynNlaqVxc6g==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:53 2026 by rpki-client