Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/323430323a333665303a3a2f34342d3434203d3e20313336313935.roa
File:                     323430323a333665303a3a2f34342d3434203d3e20313336313935.roa (raw, json)
Hash identifier:          IoxJVAyyD+NvQNCCECYolhxRSs20V3rwSGYcepVEDyk=
Subject key identifier:   B1:AB:8A:61:73:D3:CE:50:8E:86:62:20:18:5B:42:CF:A0:B6:16:EE
Certificate issuer:       /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Certificate serial:       09B4FDF08A505E9DD2C2D5D7BE12B54E78C494BD
Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/323430323a333665303a3a2f34342d3434203d3e20313336313935.roa
Signing time:             Wed 01 Jul 2026 09:31:16 +0000
ROA not before:           Wed 01 Jul 2026 09:26:16 +0000
ROA not after:            Wed 30 Jun 2027 09:31:16 +0000
asID:                     136195
IP address blocks:        2402:36e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b4:fd:f0:8a:50:5e:9d:d2:c2:d5:d7:be:12:b5:4e:78:c4:94:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
        Validity
            Not Before: Jul  1 09:26:16 2026 GMT
            Not After : Jun 30 09:31:16 2027 GMT
        Subject: CN=B1AB8A6173D3CE508E866220185B42CFA0B616EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:44:f8:fe:2d:16:27:3a:e0:07:a0:82:59:20:
                    96:ab:a9:13:f1:58:70:30:dd:5f:04:4b:87:c6:c5:
                    27:6a:56:ff:34:84:62:e3:ef:a0:98:aa:e1:42:79:
                    4a:4c:4f:54:20:2f:c4:78:d1:55:79:d7:9d:dc:90:
                    b3:9b:73:27:8c:31:5e:76:b9:5a:2d:16:4e:58:41:
                    9a:fc:97:fc:fc:9c:31:b8:b6:6f:49:62:f6:5f:ad:
                    d2:f9:fa:37:95:ed:7a:c7:fe:00:d8:c8:34:72:81:
                    53:59:d5:a9:b2:d1:9d:c8:ac:e1:89:49:cd:5f:1c:
                    a6:41:52:dd:4c:27:60:59:70:da:6d:a9:dd:2e:f7:
                    de:a6:7b:d1:92:49:3b:c2:d2:6b:62:ca:62:81:c6:
                    d3:a9:7c:49:88:c2:e7:7b:66:9c:9b:c9:c6:97:2a:
                    b3:2a:74:53:a1:9c:fd:52:4b:96:5f:a2:7e:98:bf:
                    5d:57:d7:61:ba:e5:05:f8:04:31:8f:4b:9e:48:76:
                    f6:b2:1b:4a:bc:5c:fd:83:8e:1b:fd:cd:30:cd:44:
                    fb:dc:73:d3:86:37:76:7b:c6:5d:82:53:41:25:2d:
                    c0:2b:8d:df:ac:84:b9:59:6d:93:22:23:82:ae:dd:
                    fe:bf:b9:84:f2:27:41:77:79:b5:c7:a7:a4:a1:55:
                    98:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AB:8A:61:73:D3:CE:50:8E:86:62:20:18:5B:42:CF:A0:B6:16:EE
            X509v3 Authority Key Identifier:
                keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/323430323a333665303a3a2f34342d3434203d3e20313336313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:36e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         c6:05:be:ae:4f:4c:cd:b8:80:68:94:bd:b5:67:94:47:61:f5:
         b4:29:d5:36:95:05:5c:53:2c:48:21:f3:14:df:81:7d:90:fe:
         85:ab:ef:36:3f:5a:96:bd:0b:07:3e:3c:a0:1a:38:32:4e:54:
         71:28:c1:16:0f:0d:09:d0:9c:b5:cc:72:a2:b7:9c:b7:a5:7f:
         e4:c4:70:6d:d2:6d:f3:7d:54:b8:cb:5a:3e:9e:2b:d9:d1:07:
         a2:38:a7:dd:d3:dd:3b:b5:66:c4:f1:94:85:98:1a:df:41:64:
         8f:c9:42:88:d9:36:f4:43:5e:ff:a9:06:f0:38:ad:8c:3e:e1:
         be:20:ac:b8:f4:60:72:cf:c5:10:50:7a:8e:1b:53:64:dd:37:
         2c:ed:1a:25:e7:c2:1c:a6:60:3c:c2:72:78:7d:c9:45:e0:cc:
         4c:3b:c8:49:89:7b:5d:e3:79:ea:eb:d0:80:01:b5:54:fa:dd:
         79:01:5e:d1:0c:da:da:ec:f7:7d:23:50:10:c6:e5:ba:90:89:
         99:b0:8f:58:29:13:cc:9e:84:83:6e:05:38:69:d2:d2:0d:56:
         31:1b:b9:7c:8d:90:7d:4a:a5:99:ae:60:e5:6e:9a:73:b5:4f:
         03:e4:4e:52:67:3a:33:f5:cb:c9:1c:e2:1e:c9:36:c5:1d:c4:
         41:a3:ec:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:07 2026 by rpki-client