Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e39322e302f32342d3234203d3e203536303438.roa
File:                     3134302e3231302e39322e302f32342d3234203d3e203536303438.roa (raw, json)
Hash identifier:          WZprXrmOtxlRXNxy3cepqrhA03u3sI/2jkAr/Hum5Fs=
Subject key identifier:   1D:72:41:AF:DC:EF:E9:F5:47:2F:61:EA:AD:37:3D:BB:0E:77:0A:5D
Certificate issuer:       /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial:       6D40268F90551B611E0BB55B16F95E0ACFC9A23B
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e39322e302f32342d3234203d3e203536303438.roa
Signing time:             Wed 10 Jun 2026 17:54:19 +0000
ROA not before:           Wed 10 Jun 2026 17:49:19 +0000
ROA not after:            Wed 09 Jun 2027 17:54:19 +0000
asID:                     56048
IP address blocks:        140.210.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:40:26:8f:90:55:1b:61:1e:0b:b5:5b:16:f9:5e:0a:cf:c9:a2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
        Validity
            Not Before: Jun 10 17:49:19 2026 GMT
            Not After : Jun  9 17:54:19 2027 GMT
        Subject: CN=1D7241AFDCEFE9F5472F61EAAD373DBB0E770A5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b9:50:25:4d:2f:29:91:bf:0a:3c:32:26:bb:
                    16:7e:11:01:c1:1e:d8:16:8b:d9:73:66:25:15:b5:
                    5d:f4:d7:a8:f9:1b:f7:b3:0a:80:30:f7:07:37:f0:
                    56:cb:6e:8c:36:87:6a:2f:0f:0e:2d:d2:3f:9e:3e:
                    2f:59:24:4b:c9:5b:03:3e:44:a1:a1:37:5d:b0:4c:
                    5e:a6:8e:bd:16:0f:ad:30:32:2f:66:35:f2:b1:58:
                    5b:e3:56:4a:ee:d5:6a:e7:b0:4a:83:4b:b0:3d:f9:
                    96:52:95:94:14:bb:d9:36:27:72:82:32:cd:69:2d:
                    35:25:3d:b7:9a:56:85:db:b9:a1:86:51:6e:64:54:
                    1a:a8:3e:ca:8e:59:04:0b:7b:db:48:d2:00:32:bf:
                    0c:a6:fb:07:ba:9d:8a:05:bf:f0:c2:e0:0b:2f:59:
                    42:52:ba:04:56:2f:dd:4d:e6:5c:96:c2:1e:85:64:
                    0b:e8:48:2e:31:c0:44:d3:93:ca:40:86:f3:ee:08:
                    ee:91:ef:82:54:00:17:40:bd:af:be:3c:1a:4b:0e:
                    4a:d3:48:85:40:48:fa:40:a2:93:74:95:df:ee:9d:
                    72:e9:56:92:3e:ff:13:cb:79:f4:86:eb:30:d1:ac:
                    f8:e5:6e:6a:a8:c8:9d:0f:e4:f5:d6:19:6c:d7:c3:
                    76:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:72:41:AF:DC:EF:E9:F5:47:2F:61:EA:AD:37:3D:BB:0E:77:0A:5D
            X509v3 Authority Key Identifier:
                keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e39322e302f32342d3234203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:2e:14:31:71:92:6a:de:7f:29:ef:b1:51:96:db:44:f3:66:
         24:3a:3b:76:36:39:92:12:b4:79:c4:41:01:60:a6:dd:db:87:
         24:48:fb:59:74:4b:21:a6:84:9e:09:5b:72:f3:65:20:54:29:
         fb:7b:41:00:09:04:9b:21:9a:fc:2a:33:13:c5:40:bf:56:c4:
         a6:8a:0b:5e:07:ba:f1:c0:3d:8d:89:52:6f:06:9a:9e:fd:ba:
         33:98:9a:6f:b3:32:46:b6:76:67:4a:d4:d1:5d:a9:4a:63:45:
         84:61:cf:e0:d5:bc:82:c4:89:18:a7:c8:76:b5:89:44:ce:f2:
         62:e1:4b:60:f7:f0:2e:dc:05:12:be:a5:9f:b2:ec:d8:a2:23:
         33:0f:d9:73:aa:6e:6b:5f:47:36:7b:d7:d9:5d:8a:b7:46:be:
         6a:a7:19:e4:14:99:44:27:33:2b:a6:db:7b:32:15:99:15:34:
         f5:fa:60:fc:6c:6b:37:f9:0e:50:d8:d1:4b:f3:19:47:24:0c:
         41:9c:97:e3:1f:62:87:73:76:09:34:d8:d2:15:62:1c:56:eb:
         cf:6a:33:e9:5a:45:4f:1e:1d:8c:bc:42:22:0e:f7:3a:ad:1f:
         69:6d:46:c2:e6:13:1d:6c:06:21:f0:e7:74:5a:2e:35:ac:33:
         61:9a:7d:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:45:03 2026 by rpki-client