Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e39322e302f32342d3234203d3e2034383038.roa
File:                     3134302e3231302e39322e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          Lm/IHOjEg8Bjj4dwoF1WpVD9lU5sFKEtueqj0ALgWOI=
Subject key identifier:   EB:AF:A1:32:90:BB:44:CF:3D:CD:87:64:9C:FA:1B:92:EF:60:04:63
Certificate issuer:       /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial:       6C873A4DF07299A596EC4C5C601F3290C28D2AF1
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e39322e302f32342d3234203d3e2034383038.roa
Signing time:             Wed 10 Jun 2026 17:54:19 +0000
ROA not before:           Wed 10 Jun 2026 17:49:19 +0000
ROA not after:            Wed 09 Jun 2027 17:54:19 +0000
asID:                     4808
IP address blocks:        140.210.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:87:3a:4d:f0:72:99:a5:96:ec:4c:5c:60:1f:32:90:c2:8d:2a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
        Validity
            Not Before: Jun 10 17:49:19 2026 GMT
            Not After : Jun  9 17:54:19 2027 GMT
        Subject: CN=EBAFA13290BB44CF3DCD87649CFA1B92EF600463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:df:88:58:e6:41:35:5a:07:4a:0a:04:02:82:
                    17:b2:c5:51:c1:a4:3d:19:95:05:2c:21:e4:b5:6e:
                    ba:a5:09:93:8c:0b:ac:fd:bc:22:2a:f1:66:6b:9b:
                    a1:d5:79:46:f0:14:f9:e4:b8:4a:eb:02:25:72:a6:
                    3c:a6:95:9e:20:f5:40:40:9e:f2:a2:45:49:6c:7e:
                    02:2e:ab:bd:34:c9:89:87:52:ef:f7:2e:ce:dc:c3:
                    b3:31:10:2b:43:9f:43:52:0e:ed:9a:db:24:26:67:
                    3b:e4:64:66:b4:6a:53:a2:dd:57:ac:6e:e0:68:68:
                    eb:e5:67:be:33:d3:07:54:27:be:50:e5:25:69:e9:
                    4e:42:e7:63:58:77:cf:2c:56:e9:4b:18:96:42:6a:
                    1e:e8:dd:ca:66:64:80:11:06:ec:1a:92:c5:58:ee:
                    74:73:53:48:d0:a2:bf:66:02:15:ed:b6:25:9c:3e:
                    a2:3c:25:db:a7:8b:19:a0:c4:f5:ab:05:bb:1d:cc:
                    13:57:cd:74:03:24:d4:b3:c1:8b:99:0c:8a:ba:08:
                    c2:4d:e7:de:14:1b:a9:4c:f4:60:10:83:de:80:e6:
                    bd:c9:b1:29:e6:6e:58:c6:93:5c:c0:1e:c5:4a:f1:
                    de:17:86:3c:0b:b1:ad:80:57:90:c1:04:6d:c1:33:
                    23:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AF:A1:32:90:BB:44:CF:3D:CD:87:64:9C:FA:1B:92:EF:60:04:63
            X509v3 Authority Key Identifier:
                keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e39322e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:d8:97:fe:13:bf:75:d9:c7:72:25:3f:8d:dd:3b:bc:2b:0e:
         95:db:4b:2f:e4:8e:3d:3b:3d:ef:1f:b4:4f:37:d6:e2:27:55:
         9c:0b:80:90:1d:04:13:35:87:40:5c:ed:3e:2b:c9:2b:39:1b:
         42:59:b0:d2:ca:5c:80:b9:b4:e8:ea:d9:32:ad:d9:e9:b9:9c:
         59:af:f2:13:92:4e:c7:75:72:23:d0:6e:9f:55:6d:21:8c:cd:
         8e:b4:c9:8a:36:f2:49:b9:cd:94:52:50:e9:3d:68:82:c0:22:
         be:96:9f:4e:05:5f:4b:59:cb:83:47:95:57:a3:1b:48:5f:bf:
         1d:ef:0f:21:cd:63:4a:2f:d1:15:78:d3:18:42:0e:92:60:53:
         53:78:26:54:27:c9:78:64:6d:fd:f2:8f:13:e1:e3:bd:d2:aa:
         f6:07:cc:ce:4a:1d:4e:20:22:ec:43:78:3b:a8:a8:9a:b9:76:
         5d:80:12:17:2d:11:1d:42:d9:f4:7e:e6:d4:ed:71:61:74:78:
         95:50:26:c5:bc:f5:54:77:6c:db:3e:6e:89:4b:cc:7e:8e:c8:
         ae:32:bb:68:b6:0b:16:82:20:b1:5a:9d:d0:49:c3:b3:17:3e:
         8c:34:c3:7a:a7:64:91:bd:74:b8:24:36:16:0b:4d:62:d2:b6:
         87:82:60:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:48 2026 by rpki-client