Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e38372e302f32342d3234203d3e203536303438.roa
File:                     3134302e3231302e38372e302f32342d3234203d3e203536303438.roa (raw, json)
Hash identifier:          pbPbaITKogzz3Ens08nVKgBeMgVCVs89qIrrtfS/zFU=
Subject key identifier:   10:CA:5F:FB:BC:B6:2E:F6:D2:82:B4:17:43:F9:89:A7:04:03:F2:59
Certificate issuer:       /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial:       54A7801EC08AC1C72E568F90D872FA000E3575EE
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e38372e302f32342d3234203d3e203536303438.roa
Signing time:             Wed 10 Jun 2026 17:54:20 +0000
ROA not before:           Wed 10 Jun 2026 17:49:20 +0000
ROA not after:            Wed 09 Jun 2027 17:54:20 +0000
asID:                     56048
IP address blocks:        140.210.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a7:80:1e:c0:8a:c1:c7:2e:56:8f:90:d8:72:fa:00:0e:35:75:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
        Validity
            Not Before: Jun 10 17:49:20 2026 GMT
            Not After : Jun  9 17:54:20 2027 GMT
        Subject: CN=10CA5FFBBCB62EF6D282B41743F989A70403F259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:06:dd:0c:1d:55:f5:3a:12:23:7f:8f:7e:18:
                    ad:e5:1a:0e:a5:d5:6a:d2:82:4c:13:2a:69:d0:e9:
                    2b:3b:16:69:5b:ae:43:cc:d4:7b:b0:fa:d8:1a:ee:
                    e3:50:68:06:9b:49:5f:1f:b6:81:33:f3:59:be:fa:
                    1b:ce:f0:0d:b3:cb:49:27:86:16:d1:97:dd:d0:cf:
                    01:de:de:d8:d4:5b:2b:7b:2a:0c:23:ab:68:f9:2f:
                    7c:6a:1e:4b:8d:53:c5:8a:2b:96:b7:fc:98:bd:ef:
                    7f:ff:07:91:b3:93:97:3b:a5:3d:84:ca:a2:e2:8f:
                    41:cb:e0:e3:bd:c2:94:3f:3e:5e:d6:d4:f1:14:63:
                    73:92:ad:78:0f:2a:a5:be:80:b0:08:84:4b:2b:04:
                    a6:dd:24:1f:c1:e9:58:7d:bd:2a:fe:c7:82:d7:95:
                    3b:63:c8:5f:cc:63:e7:4a:0c:39:a8:f7:23:e2:2d:
                    91:8f:af:f1:94:9f:d9:77:84:d3:49:53:10:a1:56:
                    1e:58:63:cd:13:cb:5c:0d:1f:34:ce:9f:88:f7:41:
                    53:bb:df:ab:7e:a2:cf:64:ee:13:10:f8:6e:fd:81:
                    3a:da:a3:1b:58:0d:5a:9e:00:ba:41:04:ea:8b:9a:
                    fa:3e:5a:32:e1:46:15:c3:97:94:c2:11:4c:56:70:
                    76:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CA:5F:FB:BC:B6:2E:F6:D2:82:B4:17:43:F9:89:A7:04:03:F2:59
            X509v3 Authority Key Identifier:
                keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e38372e302f32342d3234203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:ee:01:7a:a9:61:27:47:d8:dd:56:6e:5d:e1:91:ea:29:03:
         f0:f3:b2:13:37:c8:71:a0:7b:a4:1a:eb:30:9b:56:a3:f2:07:
         db:32:c3:25:c0:64:d8:a2:b9:4f:e9:73:d8:11:46:a2:de:d2:
         40:9e:f3:bf:a9:c3:82:61:ca:d8:0a:25:1e:f9:a8:0f:d9:d8:
         c1:41:47:72:de:e1:4a:be:b4:e6:72:23:1f:51:58:21:4a:32:
         fa:f6:31:bd:c8:45:c9:2b:88:0f:1d:2a:b8:7e:3c:20:b6:2a:
         24:aa:ba:f7:20:59:51:76:e7:d7:4a:af:12:08:7a:e3:f8:21:
         68:10:80:08:80:1c:76:d3:49:42:7e:59:c9:e9:0e:f8:35:78:
         35:71:6a:62:e3:7e:6d:04:f9:58:5f:76:91:ee:df:9e:82:fb:
         c4:5b:e4:f6:b1:6e:88:5a:38:64:c8:35:f7:55:36:a0:88:0a:
         95:56:6a:36:8f:a6:00:6c:ae:4c:21:ee:1d:3e:78:e4:09:1a:
         3d:7c:e8:f3:90:07:7a:47:62:15:fe:2e:d9:ee:09:a0:12:e8:
         bc:71:b2:75:40:dc:aa:5d:33:f8:ee:34:26:66:0a:8c:cb:b7:
         a2:5c:f0:b4:a7:f7:f8:d1:e4:82:8c:bb:73:a8:c6:81:29:d8:
         44:17:fa:1d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:53 2026 by rpki-client