Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948009475/0/323430303a356130303a3a2f33322d3332203d3e2039383037.roa
File:                     323430303a356130303a3a2f33322d3332203d3e2039383037.roa (raw, json)
Hash identifier:          LogFkd2wHLYxjTnS7A6XZRJU7XgOiWX8cKqHZgMnfdc=
Subject key identifier:   65:A2:5F:67:8D:A8:34:34:72:0E:28:EC:65:C8:F3:DE:AA:BE:16:F7
Certificate issuer:       /CN=46C13E5032045116B0FA54934DD7BFCA0483335A
Certificate serial:       0ACC5660280839048A9992A90337F28413A9B4D1
Authority key identifier: 46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/323430303a356130303a3a2f33322d3332203d3e2039383037.roa
Signing time:             Mon 09 Feb 2026 04:22:36 +0000
ROA not before:           Mon 09 Feb 2026 04:17:36 +0000
ROA not after:            Mon 08 Feb 2027 04:22:36 +0000
asID:                     9807
IP address blocks:        2400:5a00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Feb 2026 17:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:cc:56:60:28:08:39:04:8a:99:92:a9:03:37:f2:84:13:a9:b4:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46C13E5032045116B0FA54934DD7BFCA0483335A
        Validity
            Not Before: Feb  9 04:17:36 2026 GMT
            Not After : Feb  8 04:22:36 2027 GMT
        Subject: CN=65A25F678DA83434720E28EC65C8F3DEAABE16F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ad:a9:95:44:eb:e1:ff:06:6b:95:43:fb:21:
                    36:cc:82:14:23:6d:a9:ab:36:2c:91:c7:fc:0a:b8:
                    7e:9f:55:30:10:cf:62:d0:eb:dc:78:c3:64:fe:91:
                    85:49:48:c9:23:9e:79:35:07:b6:b9:21:51:5b:29:
                    c1:ef:4e:b8:81:c4:ca:5f:61:b8:63:c8:97:84:20:
                    5e:4b:2a:21:1e:8d:ab:c0:d0:61:fe:cc:b1:bf:4d:
                    03:f4:c9:e4:4e:02:48:8f:32:fa:3c:96:25:9d:2f:
                    88:12:99:38:80:83:8d:e2:9d:73:51:25:fa:cd:f0:
                    27:20:42:89:16:9f:28:f2:cf:bb:83:06:91:04:dd:
                    95:20:fb:6b:6b:31:13:0b:0b:b4:9a:ba:f4:f0:c3:
                    f2:56:66:a4:b3:4e:0d:d4:a9:ca:8a:18:f5:76:db:
                    7f:1a:5a:1e:8c:61:ac:71:51:7d:81:b8:d1:2e:04:
                    05:43:0e:82:70:48:ba:57:d8:ef:74:33:eb:32:9f:
                    ed:86:af:1c:5a:e0:03:a4:78:83:10:b4:0e:42:9e:
                    17:39:d9:86:98:fb:12:52:e5:de:55:18:74:94:5b:
                    5d:e7:ce:f9:a9:8b:0c:1a:ed:d2:89:e0:1b:22:e2:
                    43:84:5d:db:8d:be:77:72:fd:57:8c:e2:55:c2:05:
                    e3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A2:5F:67:8D:A8:34:34:72:0E:28:EC:65:C8:F3:DE:AA:BE:16:F7
            X509v3 Authority Key Identifier:
                keyid:46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/323430303a356130303a3a2f33322d3332203d3e2039383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:5a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:2f:e6:c5:6e:c2:c6:78:71:34:99:09:4d:b8:83:b8:f2:65:
         e8:11:ae:9a:e2:77:0f:29:eb:6b:85:5b:e6:43:92:13:b1:7e:
         67:03:8a:7d:83:2d:16:3d:b3:93:ff:a4:31:32:d8:dd:e4:3d:
         8e:e0:a0:da:29:3c:c4:ed:df:eb:bb:34:3b:a1:a4:91:84:3b:
         05:2b:a8:35:c9:64:43:95:2d:b4:13:d9:9e:70:83:ba:dd:5d:
         c6:2f:33:b3:dd:e6:b9:9c:b0:90:40:e1:5d:a5:bf:fc:7a:98:
         5e:7e:d9:79:a0:b3:f3:51:0b:6a:6f:37:db:66:b2:66:0e:bc:
         4a:f6:03:0a:7e:7c:75:be:2f:c0:56:45:19:5d:30:da:22:73:
         fe:52:da:cb:93:61:76:77:7a:5c:c5:39:11:51:5a:66:24:c5:
         4f:3a:16:9e:b2:b5:d5:a5:63:03:45:93:38:71:84:54:e9:b8:
         0e:40:94:45:d4:9c:0d:12:fe:5c:8c:5d:2d:83:2a:b0:9f:3c:
         4e:b6:fb:5e:10:dd:e2:3d:dd:4e:2a:0f:87:b4:cc:2c:e1:3f:
         3e:62:54:3a:a6:3d:69:ba:63:2b:9f:b5:32:92:0f:98:04:51:
         64:fd:b4:00:8f:64:08:69:51:14:6a:cb:d0:d8:a4:78:59:91:
         3b:17:1e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 03:25:08 2026 by rpki-client