Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e38342e302f32342d3234203d3e203536303438.roa
File:                     3134302e3231302e38342e302f32342d3234203d3e203536303438.roa (raw, json)
Hash identifier:          NaeKt1w3IpByv/EsvfYxVhBXXoxTZIiPtFS49TEhb08=
Subject key identifier:   34:54:9E:29:44:FF:3F:54:E8:00:4D:56:E6:76:4C:10:8C:78:07:95
Certificate issuer:       /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial:       6595C07220C206B624306E582DF8225B87D957B9
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e38342e302f32342d3234203d3e203536303438.roa
Signing time:             Wed 10 Jun 2026 17:54:19 +0000
ROA not before:           Wed 10 Jun 2026 17:49:19 +0000
ROA not after:            Wed 09 Jun 2027 17:54:19 +0000
asID:                     56048
IP address blocks:        140.210.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:95:c0:72:20:c2:06:b6:24:30:6e:58:2d:f8:22:5b:87:d9:57:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
        Validity
            Not Before: Jun 10 17:49:19 2026 GMT
            Not After : Jun  9 17:54:19 2027 GMT
        Subject: CN=34549E2944FF3F54E8004D56E6764C108C780795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ce:78:24:1a:b3:6a:cb:69:bb:94:f7:9f:1b:
                    fa:75:c4:1c:33:c1:ab:54:70:c1:f8:da:5e:c5:92:
                    36:bc:5c:59:40:b0:49:ab:e5:c2:e0:94:89:e7:e0:
                    6d:33:fc:6a:f9:6e:58:42:4e:4e:62:3e:7b:0f:4d:
                    f2:52:d8:f3:eb:de:94:5a:f7:08:47:7f:9b:f6:8d:
                    b1:81:1e:c1:f0:9b:76:47:35:f3:59:6d:e0:fd:3d:
                    c7:34:4d:36:a0:01:2b:a3:c6:8e:4f:8a:46:c2:12:
                    95:4a:24:70:e7:aa:85:5a:a2:75:1f:99:78:b3:d5:
                    25:d5:19:1e:a5:94:b4:e3:ea:d1:5b:ec:af:b1:e1:
                    3d:08:50:fa:cc:6e:91:5c:69:d5:26:bb:77:ef:73:
                    f4:39:7d:7a:a6:ad:ea:a6:22:89:40:bf:c3:9d:7b:
                    01:9d:21:8f:28:78:e5:08:e6:04:01:f5:aa:a7:03:
                    ce:f5:ac:54:e8:9c:cd:13:63:58:80:e0:68:e1:15:
                    59:7f:16:14:66:c8:45:70:5a:19:b8:5e:ce:8f:35:
                    98:4f:ab:b2:47:15:7e:ff:03:fd:8c:2e:64:88:83:
                    65:d6:b2:f7:ec:4b:10:68:e2:90:c5:6b:2b:a9:a5:
                    4c:ec:16:76:eb:26:98:f4:7f:9d:d4:d4:df:f5:1a:
                    fa:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:54:9E:29:44:FF:3F:54:E8:00:4D:56:E6:76:4C:10:8C:78:07:95
            X509v3 Authority Key Identifier:
                keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e38342e302f32342d3234203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:de:0f:0a:4a:44:8d:c7:20:cc:c1:b3:da:ef:2a:6b:1b:59:
         33:f7:92:17:df:59:5a:c8:f9:06:17:b2:e4:89:13:bc:ef:d2:
         08:53:57:61:62:c3:16:9c:72:a7:1e:2e:5c:4f:85:67:91:3e:
         8c:b7:92:9c:0b:48:1c:8f:ae:a8:0b:f2:95:07:43:07:c9:fb:
         17:ce:5b:a0:b1:86:d4:6d:48:89:0b:bd:d2:2a:9f:c8:9b:22:
         c6:c9:55:e5:99:05:61:33:a6:b6:32:be:82:27:25:7e:8d:e9:
         f3:9a:92:d6:1e:fa:95:99:e5:77:a3:30:05:01:a4:a1:74:60:
         f9:1d:5f:21:18:cf:2d:ad:b4:cc:fb:8c:e7:03:b1:ab:99:1c:
         38:31:e7:1b:15:ca:5f:65:c1:b7:c9:f8:23:25:f8:29:67:a3:
         2f:e8:97:f0:7d:07:7a:50:f1:6e:81:97:32:aa:0a:07:39:65:
         8c:47:f8:d0:d6:b4:41:3a:b3:80:2b:de:95:bc:61:be:08:49:
         ed:6a:ec:f9:94:66:82:ed:91:ea:a2:2a:26:bb:8f:33:d9:bf:
         76:61:cc:e4:9d:e4:34:70:bc:8d:2a:8e:d2:b5:78:b5:7e:95:
         7d:ae:7a:75:74:37:0f:6e:59:ad:6b:4c:87:44:fa:8e:ff:a9:
         b5:f4:d5:2c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:52 2026 by rpki-client