Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e39342e302f32342d3234203d3e203536303438.roa
File:                     3134302e3231302e39342e302f32342d3234203d3e203536303438.roa (raw, json)
Hash identifier:          lYnKbToVTP4448tkc8e0PcAgc63zcii0xOS1JxLdZQ4=
Subject key identifier:   34:EB:72:E0:7C:EA:06:DC:D1:4B:0B:4D:F8:0F:EC:04:CA:D8:DD:2A
Certificate issuer:       /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial:       2EAEA09BCCADE5F93F529DD1A83A8752D9914A62
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e39342e302f32342d3234203d3e203536303438.roa
Signing time:             Wed 10 Jun 2026 17:54:19 +0000
ROA not before:           Wed 10 Jun 2026 17:49:19 +0000
ROA not after:            Wed 09 Jun 2027 17:54:19 +0000
asID:                     56048
IP address blocks:        140.210.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ae:a0:9b:cc:ad:e5:f9:3f:52:9d:d1:a8:3a:87:52:d9:91:4a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
        Validity
            Not Before: Jun 10 17:49:19 2026 GMT
            Not After : Jun  9 17:54:19 2027 GMT
        Subject: CN=34EB72E07CEA06DCD14B0B4DF80FEC04CAD8DD2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:13:e8:35:2c:33:e6:40:a5:aa:bd:0f:8c:75:
                    78:8a:6b:28:ea:78:61:88:f3:a4:ee:73:76:ef:ea:
                    c4:d3:92:07:35:b1:f2:f7:0e:db:c3:c7:c4:e7:2b:
                    ae:5b:ae:31:b6:9c:a2:71:90:7d:a4:cc:14:1e:90:
                    8c:ec:71:89:a6:ba:e9:32:ed:ce:89:28:64:62:21:
                    b4:68:d6:da:26:8a:77:f1:c0:48:91:c0:12:5d:84:
                    e6:59:05:b5:ee:54:08:7b:9e:07:23:0e:fc:26:90:
                    9c:24:b7:33:46:31:21:6d:ea:2c:1e:7c:c4:40:30:
                    e4:55:de:98:66:f8:f3:91:d7:a0:4d:db:8b:fb:b9:
                    4f:8f:39:f1:d0:3f:87:34:d3:c9:24:76:6c:b5:21:
                    88:4d:98:a3:fb:99:61:4f:38:7e:99:79:7e:20:ae:
                    e4:9b:cc:0e:c2:9c:1c:cc:68:75:22:88:97:52:b5:
                    65:df:da:7f:5d:0d:27:0f:14:57:c2:a0:b3:d0:cc:
                    a9:fc:a4:a4:3c:a1:4a:05:89:91:8a:a1:3f:78:eb:
                    42:a6:c0:68:2f:7c:81:6b:19:87:43:6a:c8:95:c1:
                    92:b0:c7:dd:13:e9:2b:9d:9a:5b:a1:ce:1d:0d:cd:
                    e2:a8:f8:3f:68:6d:2d:e1:99:ba:92:7b:7e:64:27:
                    9a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EB:72:E0:7C:EA:06:DC:D1:4B:0B:4D:F8:0F:EC:04:CA:D8:DD:2A
            X509v3 Authority Key Identifier:
                keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e39342e302f32342d3234203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:14:8d:24:53:bc:9f:9b:61:8a:fe:e0:97:a0:4f:01:a8:4c:
         ab:92:7c:12:dc:be:5a:41:de:9e:da:cc:92:2b:61:81:30:bb:
         1b:f5:45:cf:d7:d0:1c:17:20:41:02:ca:52:02:b7:ff:4e:ba:
         73:bd:71:24:f4:0c:b0:d2:dd:04:75:5d:83:0e:b8:6a:03:a4:
         38:95:84:10:a4:0c:4c:2d:fc:60:1a:1e:df:cb:1f:b3:26:9e:
         67:b5:5e:5a:ed:f8:5a:b7:63:82:39:fb:a8:33:48:df:dc:dd:
         ea:e6:a6:6e:84:1e:8f:db:0a:9e:a7:4d:a8:4c:e1:31:51:78:
         ae:88:42:28:04:21:7b:83:df:21:f7:a9:01:ae:bc:8f:f2:8a:
         37:e6:a9:e7:5e:e1:6a:5b:78:6c:f8:79:0a:08:b3:ab:c9:ff:
         76:1e:9d:7e:88:c8:1e:6c:6e:99:f6:c4:9a:47:8b:93:4b:aa:
         79:ff:ff:9c:02:74:5d:a4:a9:e4:26:e6:b0:49:8b:43:3b:b0:
         66:ee:37:f2:ba:a3:aa:27:42:ca:57:d4:ae:65:19:cc:b0:79:
         40:2f:75:41:a4:c0:79:3b:56:6a:50:f0:db:2c:b7:95:6a:2b:
         55:c0:d8:48:ad:bf:98:df:f2:c6:e9:ff:cd:e9:0c:31:24:1d:
         d2:03:2d:db
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:52 2026 by rpki-client