Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a393a3a2f34382d3438203d3e20313531333131.roa
File:                     323430313a373163303a393a3a2f34382d3438203d3e20313531333131.roa (raw, json)
Hash identifier:          kZU/D5J7rMnj2qjEGjDObNY4kpNM0Hs/fw98HqYRm7A=
Subject key identifier:   79:DB:7B:6D:D4:DA:64:15:E7:80:1B:AD:A4:A2:73:18:2A:5B:FB:B6
Certificate issuer:       /CN=3D426BEA44C56109707602923668D40F4458FBEF
Certificate serial:       7282C14E881EE89137F9BB45A487032EC18EA5BE
Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a393a3a2f34382d3438203d3e20313531333131.roa
Signing time:             Thu 04 Jun 2026 02:23:34 +0000
ROA not before:           Thu 04 Jun 2026 02:18:34 +0000
ROA not after:            Thu 03 Jun 2027 02:23:34 +0000
asID:                     151311
IP address blocks:        2401:71c0:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 02:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:82:c1:4e:88:1e:e8:91:37:f9:bb:45:a4:87:03:2e:c1:8e:a5:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF
        Validity
            Not Before: Jun  4 02:18:34 2026 GMT
            Not After : Jun  3 02:23:34 2027 GMT
        Subject: CN=79DB7B6DD4DA6415E7801BADA4A273182A5BFBB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:12:ba:6a:4b:e0:7d:52:85:e8:c2:2e:60:5e:
                    78:5e:17:a2:f0:c3:10:19:28:e9:4c:75:6f:f9:3f:
                    44:0b:fc:23:82:d1:7c:62:df:90:e7:0e:94:26:98:
                    f7:52:e4:4d:6e:21:41:88:c6:65:1d:5b:5f:be:1e:
                    1a:a9:2f:ad:1c:f7:bf:cc:b1:65:17:5f:16:9b:c8:
                    4e:22:03:fc:a9:82:46:5e:0d:a3:93:c9:aa:25:91:
                    61:8f:6c:1d:cf:43:53:6b:39:bf:4c:d4:49:72:6c:
                    13:00:c0:d9:2d:60:fb:41:69:60:4b:f7:c8:06:21:
                    b0:19:03:b0:ac:d1:ad:25:7b:50:a8:70:a2:2f:f3:
                    ad:b3:2e:95:24:31:6b:42:5e:fb:f6:0b:78:60:65:
                    4e:de:4c:2a:fe:5d:cd:2b:50:4f:80:82:82:02:47:
                    7b:eb:fd:28:44:e0:8e:74:cc:7e:f4:d6:47:d9:b5:
                    99:4a:fd:88:3b:a4:46:9e:2e:c3:e7:82:7a:e7:53:
                    c0:ce:73:49:b0:13:27:54:94:05:dd:25:79:34:03:
                    fa:15:de:8f:5e:25:4f:79:c7:b2:7c:a2:1d:41:30:
                    cc:03:f3:e9:bb:31:e6:78:f3:7a:f7:f3:90:c2:3d:
                    fb:cd:7a:03:c9:dc:c1:18:17:fc:a7:19:02:d5:94:
                    9f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:DB:7B:6D:D4:DA:64:15:E7:80:1B:AD:A4:A2:73:18:2A:5B:FB:B6
            X509v3 Authority Key Identifier:
                keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a393a3a2f34382d3438203d3e20313531333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:71c0:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         cb:a5:46:27:92:2c:cf:1f:c8:57:db:e3:f6:06:1c:1f:13:00:
         b7:f9:45:f8:6e:63:33:a5:4d:b6:4f:b1:9f:09:f2:ec:77:6e:
         5f:b0:3c:87:81:0b:37:02:ac:bb:b2:61:e6:6c:95:78:94:28:
         02:f6:29:47:1d:27:30:c5:78:bc:11:33:a4:73:15:10:e7:fa:
         75:4a:ca:82:e2:2b:ef:29:79:b2:56:cf:7c:a2:56:ac:d5:72:
         55:a4:54:df:25:e9:2d:c5:b9:33:c0:55:a5:02:97:51:68:07:
         67:6c:99:6a:91:03:e8:cd:52:8b:51:41:1e:11:c3:73:1e:f8:
         da:a0:0d:0c:24:ef:91:fb:49:8f:70:ba:66:0b:44:c3:fb:e9:
         c9:08:db:c5:aa:8f:f8:4d:ba:e5:61:14:2f:4a:d9:78:cb:fc:
         71:83:2c:5a:5a:2c:69:d0:17:75:35:52:1d:d7:10:0b:07:91:
         70:37:8d:be:11:5f:0a:a8:46:22:40:c6:15:8a:0c:2f:7f:7a:
         7b:41:96:63:f0:6b:a8:e6:b8:20:a1:a4:b9:6d:16:c4:51:79:
         c4:24:7d:db:20:40:f3:30:3e:fd:3a:7f:4f:1e:e8:11:65:9b:
         2f:d1:9d:b8:2a:0b:c7:80:ad:71:85:2c:b2:b3:9e:82:ee:45:
         5e:81:1a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:45:15 2026 by rpki-client