Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/323430323a366634303a3a2f34382d3438203d3e203435303739.roa
File:                     323430323a366634303a3a2f34382d3438203d3e203435303739.roa (raw, json)
Hash identifier:          9DyG5v2zwa1bJVQz5ZDdDqeReX8GtZWnINJVErcDrz0=
Subject key identifier:   B9:11:F0:2A:0F:FB:2C:7C:54:14:E9:1C:AA:54:5F:49:66:80:7F:77
Certificate issuer:       /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial:       1D09E8B65608D43C914FD09289750BC4F0BA926A
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/323430323a366634303a3a2f34382d3438203d3e203435303739.roa
Signing time:             Thu 14 May 2026 09:34:31 +0000
ROA not before:           Thu 14 May 2026 09:29:31 +0000
ROA not after:            Thu 13 May 2027 09:34:31 +0000
asID:                     45079
IP address blocks:        2402:6f40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:09:e8:b6:56:08:d4:3c:91:4f:d0:92:89:75:0b:c4:f0:ba:92:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
        Validity
            Not Before: May 14 09:29:31 2026 GMT
            Not After : May 13 09:34:31 2027 GMT
        Subject: CN=B911F02A0FFB2C7C5414E91CAA545F4966807F77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9f:58:ba:e8:d4:17:1d:c0:22:2c:0a:2b:87:
                    ab:ab:98:c2:1d:62:bd:ff:d7:95:1b:e6:46:29:64:
                    56:96:cc:95:a4:bd:5b:6a:72:3f:78:6a:45:7b:c5:
                    b8:06:f7:b1:52:a5:33:d4:63:b6:f1:1c:91:32:88:
                    df:8d:26:cc:5c:21:25:8c:c2:78:f7:f8:0c:00:05:
                    fb:94:c2:cd:38:bf:93:64:ef:fc:27:f1:2a:d4:e4:
                    4a:7d:64:72:c4:55:23:70:df:83:0b:54:3e:98:3a:
                    9c:9a:dd:f0:44:04:a8:ca:78:fa:95:f8:68:cb:db:
                    6b:51:67:11:a4:cd:96:bc:26:8e:f5:cf:7b:6f:a5:
                    d7:9a:66:9d:5d:0f:69:d1:93:fc:6f:8a:36:96:4a:
                    e8:0a:36:77:71:f3:7d:ff:24:4f:b9:ea:c2:1a:9d:
                    2b:64:4a:10:b4:61:57:d2:d2:58:fe:89:f0:2f:42:
                    46:58:5b:af:db:88:eb:d6:6c:15:95:48:94:9a:15:
                    c0:bf:09:4e:37:b5:b2:ad:cd:0a:cd:bc:11:3c:49:
                    26:d2:e0:0e:c8:dc:e2:b1:8a:70:9d:5b:d4:70:3b:
                    a5:fe:78:16:f9:69:6c:58:67:ca:dd:5e:21:72:4f:
                    7a:51:63:c0:f4:60:6a:02:a0:d5:a1:a8:1e:0c:2a:
                    97:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:11:F0:2A:0F:FB:2C:7C:54:14:E9:1C:AA:54:5F:49:66:80:7F:77
            X509v3 Authority Key Identifier:
                keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/323430323a366634303a3a2f34382d3438203d3e203435303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:6f40::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:ac:f7:a2:6b:22:ba:8c:ca:bb:06:88:44:5c:eb:19:d4:45:
         77:b9:db:3d:be:fb:30:e9:86:25:70:6e:56:7c:03:8b:28:2e:
         24:e8:95:b6:da:32:e2:d3:59:ac:05:94:4e:cd:01:0d:47:c8:
         08:fd:47:f1:7d:f3:33:2e:17:14:ae:7d:70:b1:fe:50:79:f2:
         7e:e8:37:51:0d:07:cf:1b:59:5c:9b:7f:72:a0:60:79:df:67:
         41:7a:56:cd:56:74:64:55:78:8d:80:25:0a:e5:3d:79:d7:e8:
         cd:0d:2c:e9:11:17:f8:70:5f:51:03:4d:f3:66:d1:a1:37:8e:
         bb:dc:ab:04:44:bd:d1:fb:a7:39:18:de:21:a8:5e:31:c5:e3:
         14:75:0d:ae:86:2b:33:a9:9b:d3:ac:a9:63:ec:af:3a:21:52:
         07:e3:e1:3d:a9:b9:0a:8e:af:4f:86:8f:00:77:29:4e:ef:dc:
         ac:c8:4f:90:be:df:c6:36:89:14:02:84:5e:ab:db:d9:47:7b:
         96:98:bd:b4:73:21:15:47:f2:db:91:07:d6:83:17:e1:dc:a4:
         52:2c:b7:ac:8e:77:22:72:2f:7e:56:b2:c0:99:e1:c2:4c:00:
         25:83:61:ff:80:cd:75:c0:3c:16:f2:7a:75:6b:f4:8d:7a:66:
         8d:e6:bd:10
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:59:09 2026 by rpki-client