Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/323430323a333665303a653a3a2f34382d3438203d3e20313336313935.roa
File:                     323430323a333665303a653a3a2f34382d3438203d3e20313336313935.roa (raw, json)
Hash identifier:          +krFwSi897QsqND47Aj4jSSR9qqUwc8tifOgMj+a5ZQ=
Subject key identifier:   1F:7D:88:A8:7B:A9:9C:C1:6F:6A:BD:C7:5F:4E:39:B7:CC:DE:CE:FE
Certificate issuer:       /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Certificate serial:       30ADBD21E2FD8EB0402803482A97C2AC45634312
Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/323430323a333665303a653a3a2f34382d3438203d3e20313336313935.roa
Signing time:             Wed 01 Jul 2026 09:31:17 +0000
ROA not before:           Wed 01 Jul 2026 09:26:17 +0000
ROA not after:            Wed 30 Jun 2027 09:31:17 +0000
asID:                     136195
IP address blocks:        2402:36e0:e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ad:bd:21:e2:fd:8e:b0:40:28:03:48:2a:97:c2:ac:45:63:43:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
        Validity
            Not Before: Jul  1 09:26:17 2026 GMT
            Not After : Jun 30 09:31:17 2027 GMT
        Subject: CN=1F7D88A87BA99CC16F6ABDC75F4E39B7CCDECEFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:00:ca:1a:41:71:0d:68:75:87:cd:bf:e6:80:
                    5e:4e:2d:38:93:0a:c4:bf:f3:e7:1a:c1:6c:b0:55:
                    bc:36:0b:14:2e:be:b7:bd:61:38:61:9c:e0:94:03:
                    ca:2d:f1:3d:24:5d:9c:ef:52:86:2f:98:ee:91:a4:
                    4e:bd:77:fa:cc:46:1a:b3:96:53:8e:0a:0b:ad:b2:
                    05:5b:e8:9c:4d:74:d8:a7:27:0d:e2:4b:ba:84:c0:
                    94:ce:f1:fc:13:88:d1:0c:ff:fd:6d:59:86:6c:65:
                    7d:af:fd:a8:49:e3:90:67:31:f6:b0:ee:cc:40:86:
                    71:e5:81:9f:ce:b1:7b:75:00:79:44:bb:2f:d7:a1:
                    32:15:5f:5e:3f:df:83:be:c3:bf:2e:88:b8:76:82:
                    9d:d6:97:53:4c:ff:f9:88:ea:24:64:bf:53:42:8e:
                    6a:5d:1a:76:b0:80:05:67:82:0e:4c:32:e8:95:4a:
                    cf:69:73:ca:ca:6f:db:3a:f4:99:01:47:47:ed:1b:
                    d3:89:7e:15:6c:51:81:07:99:ae:51:43:0d:d5:21:
                    7c:f9:35:81:c7:ce:10:ef:8d:3c:0e:0f:41:75:04:
                    c0:90:30:39:51:51:33:2e:b6:70:c2:cc:9b:c9:22:
                    1b:eb:98:16:f5:24:0c:c1:44:01:ef:40:0f:d0:77:
                    22:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7D:88:A8:7B:A9:9C:C1:6F:6A:BD:C7:5F:4E:39:B7:CC:DE:CE:FE
            X509v3 Authority Key Identifier:
                keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/323430323a333665303a653a3a2f34382d3438203d3e20313336313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:36e0:e::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:1d:e4:14:cb:29:a6:c4:80:8f:7a:33:b9:94:61:d9:b1:19:
         b7:53:70:9a:6c:4a:56:51:93:ce:b1:cd:45:b2:8a:21:b7:1b:
         f2:9e:85:0e:9f:1f:6b:35:b3:d7:ac:86:fb:a0:83:b8:de:ae:
         d0:ff:46:58:5d:08:db:b6:60:c2:41:cd:96:fe:d0:d0:d8:78:
         70:48:69:23:b6:d4:87:42:dd:0c:7b:5b:79:f9:5c:ac:56:38:
         22:0e:2b:62:f3:d9:33:2b:8c:6f:1b:1f:f8:8a:0a:7f:58:92:
         3f:7b:71:6c:79:d7:2a:cb:ff:1a:d2:1f:a9:53:52:63:f7:f7:
         52:f1:83:39:7a:70:07:8e:7b:aa:1f:9f:fa:62:d0:a1:ae:fe:
         8b:95:0b:1b:31:37:ee:74:22:b2:d8:65:7c:03:bd:78:82:30:
         4c:27:58:4e:6c:de:ae:d5:ce:c9:1f:f2:27:bb:6c:ed:6b:38:
         7f:8e:3b:3a:2d:51:a4:63:f3:3e:5c:c8:c1:a0:96:db:a5:71:
         08:a9:13:e4:3b:ea:da:d2:04:80:0c:22:0e:5b:85:c0:06:ff:
         f9:22:53:c4:58:1b:d6:8a:de:d8:82:fb:0f:d1:2d:39:75:72:
         e3:5b:52:7c:53:d6:0b:7d:1e:0c:5f:ea:2c:28:ee:fe:db:94:
         95:ff:1c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:20 2026 by rpki-client