Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948337155/0/323430313a623138303a3a2f33322d3438203d3e203435313032.roa
File:                     323430313a623138303a3a2f33322d3438203d3e203435313032.roa (raw, json)
Hash identifier:          EzCtK7AlEqQcUvC/JzmqBx9B8FH06LC2+fXMDmihzV8=
Subject key identifier:   C3:57:13:71:57:E9:20:A7:4A:6D:C6:FA:E8:03:21:1A:F5:FA:A0:C2
Certificate issuer:       /CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F
Certificate serial:       41841242283B17F31A82035993BB551559308A21
Authority key identifier: 05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/323430313a623138303a3a2f33322d3438203d3e203435313032.roa
Signing time:             Thu 14 May 2026 02:04:12 +0000
ROA not before:           Thu 14 May 2026 01:59:12 +0000
ROA not after:            Thu 13 May 2027 02:04:12 +0000
asID:                     45102
IP address blocks:        2401:b180::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 15:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:84:12:42:28:3b:17:f3:1a:82:03:59:93:bb:55:15:59:30:8a:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F
        Validity
            Not Before: May 14 01:59:12 2026 GMT
            Not After : May 13 02:04:12 2027 GMT
        Subject: CN=C357137157E920A74A6DC6FAE803211AF5FAA0C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:10:51:a3:fc:dc:2e:03:6c:21:fe:01:ff:b7:
                    cd:40:1f:bf:69:dc:72:c9:c7:69:75:d1:d6:08:be:
                    ab:d9:57:4f:d6:a8:97:e8:9c:dd:5a:20:68:fd:6f:
                    02:5d:e4:b6:e2:0c:0e:e8:bb:75:0e:17:5f:15:29:
                    8a:b2:7a:9f:3f:aa:34:64:b0:33:70:35:9a:b4:1a:
                    40:d2:51:cd:c0:35:a8:a7:5f:0f:85:94:76:f1:27:
                    aa:f7:89:f3:22:62:d0:2f:9d:ab:a4:af:31:fd:ff:
                    4e:a4:11:b1:3f:3d:b5:5e:93:7a:ea:ab:c6:d4:51:
                    e0:45:7a:8d:ba:95:d0:8a:fb:c1:5f:04:53:3e:73:
                    55:03:48:c7:16:d3:90:cf:10:dc:cb:42:b6:11:53:
                    b5:84:93:66:b9:6a:d7:2f:3e:ba:9f:1f:a8:6f:81:
                    93:30:52:92:11:80:55:6f:06:d4:b8:a1:a1:e5:ec:
                    1f:1e:fe:4d:35:20:35:1f:76:1d:9e:bd:93:9f:40:
                    df:b5:f8:f2:16:50:ad:74:1f:64:ba:ce:ae:df:45:
                    e2:43:24:b1:da:6f:64:c9:02:35:51:e8:8a:72:f3:
                    71:e9:54:58:53:bd:31:d4:6b:da:28:6c:76:a0:3e:
                    81:71:a9:d6:2f:29:5a:43:c3:4f:dd:23:66:87:f4:
                    14:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:57:13:71:57:E9:20:A7:4A:6D:C6:FA:E8:03:21:1A:F5:FA:A0:C2
            X509v3 Authority Key Identifier:
                keyid:05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/323430313a623138303a3a2f33322d3438203d3e203435313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b180::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:2e:63:8e:81:cb:73:5b:8c:ed:32:45:d1:e3:f5:ce:86:9e:
         f8:8c:32:14:37:40:23:a6:68:ac:99:0f:e1:67:68:af:5d:39:
         5e:5b:ef:96:c9:05:72:c7:b9:3d:fb:b2:8b:da:10:f3:2e:7a:
         30:ac:b4:1c:b6:d7:d2:60:88:3d:96:a2:f3:93:fd:48:a0:6e:
         34:af:52:99:a0:30:42:a6:a9:c5:19:3a:e9:cf:14:e0:b6:ee:
         d0:f5:a7:32:ca:57:e4:72:99:cb:d8:7e:25:95:35:1d:1d:1f:
         5e:ab:69:71:d5:76:74:02:be:93:d6:60:80:eb:56:cc:b9:f4:
         ab:27:86:ce:33:3a:bb:5e:b5:76:30:ab:81:b8:41:da:ec:00:
         7a:9c:4e:ee:b7:09:14:a4:df:42:d5:c1:43:e3:c6:60:fd:ed:
         18:ce:04:bd:b7:f5:4b:de:08:63:59:4f:78:ed:85:71:73:a5:
         62:8a:68:80:e8:2d:ed:78:82:c8:a3:26:6c:a2:33:98:ac:ed:
         e5:7f:ac:1f:b8:c4:22:f8:7c:52:12:15:84:62:5e:62:26:25:
         4d:ed:68:e5:fa:32:3b:a1:42:18:9d:e1:70:5d:4b:dc:9b:bb:
         fa:26:f5:98:3a:6d:ed:3a:5b:83:ad:48:34:6d:18:90:bd:47:
         da:17:16:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:24:02 2026 by rpki-client