Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/AS62387.roa
File:                     AS62387.roa (raw, json)
Hash identifier:          528udEsBXqsLsn8aiNhTNkv7MM3rg/7PRfSHEf31CtI=
Subject key identifier:   46:47:95:4E:3A:44:CF:E5:97:FE:6F:03:09:55:A5:E4:4F:62:19:43
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       2308C6D5265661A5DBDEAEA37C0A147EC9EDD56F
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/AS62387.roa
Signing time:             Tue 02 Jun 2026 08:07:59 +0000
ROA not before:           Tue 02 Jun 2026 08:02:59 +0000
ROA not after:            Tue 01 Jun 2027 08:07:59 +0000
asID:                     62387
IP address blocks:        123.98.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 08:07:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:08:c6:d5:26:56:61:a5:db:de:ae:a3:7c:0a:14:7e:c9:ed:d5:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Jun  2 08:02:59 2026 GMT
            Not After : Jun  1 08:07:59 2027 GMT
        Subject: CN=4647954E3A44CFE597FE6F030955A5E44F621943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:64:b4:f5:89:4b:b0:1f:9c:85:c6:43:45:
                    41:95:ff:7c:66:2d:1a:f6:00:1e:13:2d:8e:1a:55:
                    7d:4b:31:08:9e:fb:23:30:6f:25:4a:8e:9f:17:3a:
                    7d:31:77:c2:5d:ec:b5:f1:2f:d9:43:8f:5b:74:bd:
                    04:99:98:ed:13:c0:04:2a:47:9c:7b:1a:02:d4:c9:
                    9f:3b:ee:ed:08:0e:c2:73:a9:e9:1c:e8:68:49:54:
                    fb:fc:a3:1d:7a:2f:79:4a:a1:52:c1:d5:fe:82:83:
                    6f:f6:63:77:3e:89:cc:63:dd:6e:c9:01:e7:c3:14:
                    58:31:1e:bf:76:57:b2:1e:58:5c:fd:e3:56:4c:1c:
                    75:11:d6:95:ac:76:fc:8a:04:83:e2:28:59:2b:1f:
                    79:fd:51:4b:8b:90:a3:43:28:8e:75:0e:18:23:c5:
                    7a:fc:bf:bb:85:8c:07:17:d3:c4:41:f1:ee:f7:e3:
                    fc:0c:d7:1c:09:03:de:11:67:82:d1:bd:22:52:d1:
                    50:19:8d:e8:cc:e2:e3:44:cd:0f:86:9c:ed:ca:74:
                    d8:cf:9e:73:a0:fd:29:5f:57:72:29:d2:65:7c:49:
                    fc:2f:8c:90:37:2e:8b:b8:86:89:03:1c:98:1d:7e:
                    61:6b:c5:ff:9e:fd:db:06:ef:b8:1e:ae:8e:86:10:
                    97:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:47:95:4E:3A:44:CF:E5:97:FE:6F:03:09:55:A5:E4:4F:62:19:43
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/AS62387.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.98.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:b1:8a:97:57:9f:a4:0d:bf:39:31:90:5e:12:10:7a:8f:38:
         ab:cf:32:a4:ca:83:59:d7:3f:24:82:e4:f5:15:f9:50:cf:8b:
         1c:4a:8a:bb:77:b1:c5:a1:01:d8:89:85:41:c3:46:67:8e:68:
         a1:3c:8e:6e:da:5e:12:c8:85:83:eb:eb:d7:13:f2:03:8f:51:
         fe:be:24:5b:40:85:78:3f:fb:1e:6f:cc:87:3e:2d:28:4b:40:
         7a:1f:10:fd:b2:13:db:2c:ab:30:63:cb:b6:18:c1:a2:ea:fa:
         5d:e6:f9:a7:89:e5:38:da:73:7e:b4:25:8c:b6:26:f3:d0:73:
         c3:96:a1:65:41:88:da:f1:9f:53:a9:5d:78:9c:22:8c:f8:83:
         b7:7a:0f:39:f6:24:61:d0:c4:75:59:a3:ec:0a:51:10:4c:a9:
         be:0a:36:90:7c:04:e7:fa:78:b3:76:49:26:9a:78:52:a2:f0:
         e4:f1:ae:c3:fc:8f:41:15:d2:6f:30:0f:17:ca:d2:9a:70:eb:
         d9:c2:90:98:d4:8e:c9:01:8b:f7:fe:11:66:75:45:ed:b8:37:
         52:e5:f8:a6:21:27:46:ea:06:df:7c:fb:12:71:03:30:e5:87:
         6c:3e:b9:c1:25:9b:28:14:d5:a6:96:98:5f:5f:f6:15:46:47:
         ac:c9:d1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 18:52:14 2026 by rpki-client