Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e38382e302f32322d3232203d3e2034383038.roa
File:                     3134302e3231302e38382e302f32322d3232203d3e2034383038.roa (raw, json)
Hash identifier:          s6/t0K9v5U76hgQTuMyYO7Y4W1S4cYC5ITM+pzuewxU=
Subject key identifier:   64:C7:8A:A6:23:A1:CA:2A:79:72:1E:63:54:BC:13:95:6F:9C:1E:6F
Certificate issuer:       /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial:       38C3B6F699E434E0516C74ACD88FC57D159573F6
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e38382e302f32322d3232203d3e2034383038.roa
Signing time:             Wed 10 Jun 2026 17:54:19 +0000
ROA not before:           Wed 10 Jun 2026 17:49:19 +0000
ROA not after:            Wed 09 Jun 2027 17:54:19 +0000
asID:                     4808
IP address blocks:        140.210.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c3:b6:f6:99:e4:34:e0:51:6c:74:ac:d8:8f:c5:7d:15:95:73:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
        Validity
            Not Before: Jun 10 17:49:19 2026 GMT
            Not After : Jun  9 17:54:19 2027 GMT
        Subject: CN=64C78AA623A1CA2A79721E6354BC13956F9C1E6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:66:aa:0d:a4:d9:46:40:4c:25:6e:df:4f:0e:
                    ab:bd:88:16:ed:08:7d:9e:39:c6:dc:35:58:87:0c:
                    36:60:d4:b1:c2:71:dc:53:a5:84:1e:cb:d5:bd:a2:
                    95:1c:a0:f7:6c:2e:62:21:be:b7:d1:62:34:b7:6e:
                    b5:0f:20:65:be:46:43:67:71:5a:ba:c6:72:1f:d0:
                    24:76:a6:46:bb:bd:8c:12:fc:6e:f9:bf:87:7e:f3:
                    0b:92:31:1d:8d:83:69:4b:5f:b2:0f:46:20:54:30:
                    71:05:2b:35:be:29:e8:c8:7d:ef:c3:aa:2e:be:5d:
                    c0:b1:a6:03:3d:b5:a7:bd:61:a2:9a:6e:e2:f3:e6:
                    24:0f:41:7f:4b:86:28:da:4f:91:8d:07:fd:59:78:
                    39:91:50:e7:54:93:1a:27:79:2c:76:e4:f2:f4:26:
                    43:62:d5:93:82:1a:0e:f3:0e:27:f7:9a:8e:2c:0f:
                    27:92:0e:85:2e:f6:ac:91:20:09:f7:ae:18:5e:33:
                    44:e1:af:8e:c6:f3:9e:91:d6:15:86:4c:21:32:b9:
                    78:0a:17:75:f6:9f:f9:b7:4f:94:68:08:da:44:5f:
                    c5:dc:91:6d:d2:d1:95:d1:64:0c:69:d0:0a:95:2f:
                    0d:30:0a:65:f6:13:f0:ed:ee:93:ef:68:68:37:4f:
                    62:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C7:8A:A6:23:A1:CA:2A:79:72:1E:63:54:BC:13:95:6F:9C:1E:6F
            X509v3 Authority Key Identifier:
                keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e38382e302f32322d3232203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:5c:5f:eb:06:af:32:75:cb:56:8a:7b:78:ba:04:53:e8:8f:
         04:4e:a0:d6:bd:2a:a8:07:55:3f:b2:60:10:70:55:58:ec:a9:
         59:5a:c7:8c:ad:01:79:50:06:31:a5:6d:7a:e8:35:37:94:48:
         e7:6f:30:03:fa:5f:e0:86:c1:e2:9c:72:13:9f:9a:73:fe:61:
         da:c1:d2:e4:f5:4a:31:48:a4:b5:db:bc:ca:79:02:09:e4:69:
         6e:9d:1d:21:ac:1f:1f:d7:cf:04:1a:44:fe:8c:01:94:bf:0e:
         6b:0a:26:41:ee:b7:9f:d5:e5:3c:4b:23:a1:5d:3e:dc:63:4b:
         dc:78:ba:22:84:ac:27:0b:81:ea:be:f7:0a:83:a9:9e:e1:13:
         d5:0a:0e:13:5d:1f:fb:96:1f:dd:49:e8:35:c3:4c:a6:35:bf:
         95:43:c1:68:ca:f9:85:62:e4:35:9a:a8:95:36:28:b6:f1:bd:
         dd:91:a7:19:55:b5:05:36:72:9d:74:6a:12:26:06:b1:47:a3:
         5f:59:bf:de:fe:b0:b8:76:4a:c7:3d:43:0d:51:25:44:33:47:
         3d:4a:a6:1d:6f:f1:fe:78:d8:4e:80:e2:64:1e:2f:77:8a:70:
         75:5e:37:69:bb:4e:5e:2d:1e:2c:76:31:38:d2:c7:a7:5b:45:
         c7:1d:81:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:53 2026 by rpki-client