Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/323430323a333665303a663a3a2f34382d3438203d3e20313336313935.roa
File:                     323430323a333665303a663a3a2f34382d3438203d3e20313336313935.roa (raw, json)
Hash identifier:          hJaHChP83EtoDyCl31aqTKP6xCM9ANDm43CImc05LSI=
Subject key identifier:   20:47:19:58:8E:CC:90:1D:EB:3B:17:DE:1E:2D:3F:44:F1:B5:8D:AD
Certificate issuer:       /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Certificate serial:       2D1424CB702B350F6964BCBF648E1D717209350C
Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/323430323a333665303a663a3a2f34382d3438203d3e20313336313935.roa
Signing time:             Wed 01 Jul 2026 09:31:16 +0000
ROA not before:           Wed 01 Jul 2026 09:26:16 +0000
ROA not after:            Wed 30 Jun 2027 09:31:16 +0000
asID:                     136195
IP address blocks:        2402:36e0:f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:14:24:cb:70:2b:35:0f:69:64:bc:bf:64:8e:1d:71:72:09:35:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
        Validity
            Not Before: Jul  1 09:26:16 2026 GMT
            Not After : Jun 30 09:31:16 2027 GMT
        Subject: CN=204719588ECC901DEB3B17DE1E2D3F44F1B58DAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a8:ce:46:a9:5b:05:af:4e:8e:c0:68:bb:21:
                    ed:88:93:7d:c2:3a:56:df:da:44:89:03:64:f3:d4:
                    39:24:b8:91:ad:5b:8c:27:29:a6:2e:63:0c:fe:c8:
                    a8:ac:43:1a:63:44:b4:49:c8:84:18:e9:c9:82:02:
                    43:70:9d:19:b7:1a:a0:b3:19:9f:6f:e2:fb:67:9c:
                    d1:76:4c:46:eb:2e:5f:7a:c8:f7:37:8b:56:93:2b:
                    7b:ff:b3:7f:7a:46:b0:b8:c1:a3:cd:03:6e:08:c2:
                    e5:21:eb:44:7f:f2:ab:6a:02:30:39:5d:85:25:fa:
                    00:10:3b:64:cf:d4:67:4e:32:71:65:57:68:ed:5c:
                    ca:55:98:9b:1b:42:e8:db:30:3b:b3:d8:3b:35:59:
                    de:c8:26:ae:55:ea:d6:e1:39:54:26:3f:2e:04:2d:
                    51:b7:e8:3c:a5:2a:a8:f9:a7:80:9c:23:8f:59:27:
                    3a:38:10:77:7a:c0:7e:99:6b:0c:c8:a9:86:0a:09:
                    50:bb:7a:e1:a8:be:a6:2e:d3:bb:b4:e3:86:fc:34:
                    13:7c:70:a0:32:9a:fe:ba:9e:f0:ed:5b:a4:b1:79:
                    6a:3a:7e:d8:5c:8b:48:28:17:05:1e:d1:75:e9:86:
                    4d:a5:b0:72:4e:82:a5:ab:a3:cc:c7:4e:96:b9:34:
                    90:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:47:19:58:8E:CC:90:1D:EB:3B:17:DE:1E:2D:3F:44:F1:B5:8D:AD
            X509v3 Authority Key Identifier:
                keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/323430323a333665303a663a3a2f34382d3438203d3e20313336313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:36e0:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         dd:43:2a:94:af:1e:a3:59:ba:e3:c2:20:bb:51:a6:46:e2:54:
         4d:bc:b7:5c:e3:6a:bb:18:c4:13:5e:29:a5:36:5f:4c:67:2a:
         6b:82:70:f1:33:f2:86:dd:36:34:7a:f9:58:bd:f9:64:cf:c7:
         28:2f:b3:30:a3:59:2c:22:45:6b:eb:f1:bb:b5:5e:6d:53:75:
         af:3c:a4:da:93:10:73:63:de:81:fa:61:51:07:a0:b8:61:91:
         4e:f1:75:49:dd:29:a3:9a:03:8f:ab:19:ba:81:af:b3:bc:42:
         44:6b:a1:20:96:44:5b:f5:9b:20:02:0e:99:17:65:97:62:6a:
         9d:1a:9a:da:fd:21:d1:54:66:f8:c6:4d:cf:b7:68:36:39:22:
         3f:f5:80:42:d0:37:ff:7c:f2:b8:cf:a1:49:e3:1b:bd:e3:f7:
         92:b5:24:a7:6c:bb:48:48:27:b9:18:ef:75:50:3f:3a:68:92:
         29:de:c1:5c:5e:93:99:1d:30:53:49:d1:16:8e:d0:9f:90:60:
         32:8b:5c:83:da:4d:c9:e2:7d:0f:b7:9f:91:be:49:2f:3f:31:
         2f:37:2b:63:ce:a7:b5:b8:d5:de:d2:d6:2f:be:3f:c5:a3:06:
         ae:41:f6:51:94:f7:4e:cc:9a:1c:72:9a:66:f1:85:77:93:c7:
         50:79:4b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:59 2026 by rpki-client