Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714684417/0/323430373a333763303a3a2f33322d3438203d3e20313334383130.roa
File:                     323430373a333763303a3a2f33322d3438203d3e20313334383130.roa (raw, json)
Hash identifier:          YB0M9nKNMoHBywOJDf6bSjW4vSlUBOGyW8ueImFl0Ok=
Subject key identifier:   16:DF:A7:F6:E5:99:76:E2:EE:07:2C:CE:97:42:45:4D:01:DE:C1:76
Certificate issuer:       /CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357
Certificate serial:       66D85DFC6D7A40DCCEE73ABA36D4A38C60F21671
Authority key identifier: 50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/323430373a333763303a3a2f33322d3438203d3e20313334383130.roa
Signing time:             Thu 28 May 2026 08:00:08 +0000
ROA not before:           Thu 28 May 2026 07:55:08 +0000
ROA not after:            Thu 27 May 2027 08:00:08 +0000
asID:                     134810
IP address blocks:        2407:37c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 07:36:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d8:5d:fc:6d:7a:40:dc:ce:e7:3a:ba:36:d4:a3:8c:60:f2:16:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357
        Validity
            Not Before: May 28 07:55:08 2026 GMT
            Not After : May 27 08:00:08 2027 GMT
        Subject: CN=16DFA7F6E59976E2EE072CCE9742454D01DEC176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ba:1a:6e:5e:66:df:a3:a8:d5:38:90:f4:fe:
                    73:1a:ba:ec:47:2a:c7:cb:69:93:b0:db:fe:a0:b5:
                    21:c7:81:9c:52:f9:70:87:97:5c:33:46:01:68:87:
                    9d:ed:5b:59:f2:8f:83:19:e4:8d:3c:e2:cf:8f:65:
                    25:0a:3d:e0:f8:0f:2e:3c:20:fe:33:84:cf:78:84:
                    7d:6f:0c:7e:49:2e:b5:d3:08:ef:42:08:5d:94:72:
                    a7:9a:48:fb:59:cf:8c:55:34:84:64:51:10:d6:33:
                    42:0b:a7:14:69:6c:dc:00:a3:c0:12:15:7b:78:ef:
                    a1:e8:bc:2c:07:75:65:d4:f5:d8:b2:0d:8e:f1:04:
                    4e:df:15:9a:cd:e6:a5:66:87:ce:a9:ac:82:36:d7:
                    a2:cb:2c:1b:13:69:e2:5b:3f:89:6d:27:a4:76:ce:
                    0a:76:98:89:52:d0:b6:b0:eb:ba:1e:0a:4b:16:e4:
                    b6:6f:f2:e9:aa:bd:59:67:35:3e:cd:f0:88:40:c8:
                    b8:f0:b3:b1:c1:33:16:3d:01:3e:2f:c2:40:44:15:
                    a1:4c:5f:a9:a3:f2:18:8e:b1:ec:e7:96:22:9c:0b:
                    28:9d:f6:76:5a:45:61:32:b5:b7:bb:48:fa:fc:b0:
                    a1:1c:a5:3d:a8:93:aa:73:4c:50:50:c5:8e:89:61:
                    8d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DF:A7:F6:E5:99:76:E2:EE:07:2C:CE:97:42:45:4D:01:DE:C1:76
            X509v3 Authority Key Identifier:
                keyid:50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/323430373a333763303a3a2f33322d3438203d3e20313334383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:37c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:63:67:26:6c:d7:1c:72:a8:b6:d1:b2:af:7d:95:59:92:5b:
         be:f3:ce:2f:22:f3:9b:d3:de:24:9e:f3:50:f9:b4:85:0c:ba:
         3a:81:72:ff:fc:90:b3:6c:78:4d:5a:1d:44:51:f6:fb:25:b3:
         fa:46:bd:3f:c8:a8:2e:c6:59:8f:ff:46:ca:e7:b9:be:43:e0:
         3c:b4:b8:66:2e:08:22:f9:99:43:08:aa:cf:22:32:2a:72:6f:
         fe:55:47:6c:66:d8:05:a5:87:9a:94:f1:f4:a9:9c:0c:7d:93:
         84:cb:f5:e1:2f:a8:64:37:d5:db:73:c3:fe:5e:07:db:9e:2c:
         f6:fa:50:d2:ee:91:27:35:67:84:d2:bc:9e:a2:d8:fb:88:19:
         98:98:46:ef:49:fe:7c:48:f6:8e:f1:f7:6a:a5:78:2d:4d:06:
         c2:6f:77:f7:88:38:28:f1:df:1d:7d:39:98:5f:fd:51:4a:65:
         1b:54:60:4b:23:6b:cd:c6:58:67:ec:35:6d:ec:50:fd:9c:e2:
         5a:8f:c7:8b:6c:e3:bc:25:36:2e:05:9e:98:b5:90:23:4a:ad:
         ba:66:22:fc:75:50:9a:bc:39:0f:25:d2:50:93:dc:26:5f:c0:
         dc:99:17:e2:4c:f9:51:ff:75:74:88:46:44:ec:9b:c8:79:2e:
         d1:0c:2b:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:37 2026 by rpki-client