Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a613a3a2f34382d3438203d3e20313531333131.roa
File:                     323430313a373163303a613a3a2f34382d3438203d3e20313531333131.roa (raw, json)
Hash identifier:          kVVayd2Clmk9R565Y+MEml4WmgXV7P4+lMCr7A4+C4E=
Subject key identifier:   80:EB:58:64:D6:4E:D6:27:CC:C7:4C:19:B9:0E:C2:85:7C:E3:1F:A5
Certificate issuer:       /CN=3D426BEA44C56109707602923668D40F4458FBEF
Certificate serial:       05D4BAF7A3E0F211F211C66F296DD428DDC38770
Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a613a3a2f34382d3438203d3e20313531333131.roa
Signing time:             Thu 04 Jun 2026 02:23:43 +0000
ROA not before:           Thu 04 Jun 2026 02:18:43 +0000
ROA not after:            Thu 03 Jun 2027 02:23:43 +0000
asID:                     151311
IP address blocks:        2401:71c0:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 02:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d4:ba:f7:a3:e0:f2:11:f2:11:c6:6f:29:6d:d4:28:dd:c3:87:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF
        Validity
            Not Before: Jun  4 02:18:43 2026 GMT
            Not After : Jun  3 02:23:43 2027 GMT
        Subject: CN=80EB5864D64ED627CCC74C19B90EC2857CE31FA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:87:a7:2d:47:d3:bb:9e:82:d1:c9:0e:ce:de:
                    58:94:9c:28:be:a1:a2:7d:9e:af:28:e4:b8:66:10:
                    94:80:61:d2:58:52:bf:87:d7:cb:ef:40:42:3e:8c:
                    b9:43:a8:23:36:34:89:03:43:3f:28:20:1a:00:97:
                    ea:24:67:df:86:d4:b3:26:81:83:7a:dc:ae:2b:a8:
                    cc:10:1d:21:45:6f:bd:94:bb:43:d2:ba:e7:f5:e3:
                    ec:5c:0d:e5:9f:d6:d3:95:f6:67:2f:52:66:dd:17:
                    a3:00:fa:a7:53:ca:4c:13:37:a3:92:13:27:5f:f0:
                    44:fe:41:ab:12:ab:ad:ad:6b:c2:be:28:1b:e9:fa:
                    b8:94:dd:fb:a1:83:3b:48:c2:02:5e:ac:df:6b:6b:
                    11:d3:49:d0:5f:73:51:2c:5b:48:2b:b6:29:ff:31:
                    fc:a6:72:a2:68:8b:75:8b:75:74:4f:37:26:23:db:
                    2b:bd:8f:91:7c:0d:f1:fa:1b:5a:88:e1:13:47:4b:
                    f2:43:b7:a5:71:a7:f1:c8:bc:07:48:f8:36:9a:0f:
                    27:7f:c1:3c:c4:c3:f6:4d:89:9c:09:d2:f2:e3:b0:
                    6b:49:d8:98:0d:60:13:4b:b9:fd:64:80:1c:25:b2:
                    b0:ac:9e:1b:a3:e7:17:30:61:06:9a:6b:5c:79:b2:
                    b4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:EB:58:64:D6:4E:D6:27:CC:C7:4C:19:B9:0E:C2:85:7C:E3:1F:A5
            X509v3 Authority Key Identifier:
                keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a613a3a2f34382d3438203d3e20313531333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:71c0:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         c8:e8:1f:32:53:25:0e:f7:57:f3:08:d0:3e:73:4b:93:42:78:
         db:3b:92:94:2e:00:18:b2:c4:e3:f2:1c:e6:8f:f7:81:eb:db:
         b5:42:fc:33:e3:27:33:38:a6:62:12:07:f9:3b:d0:f2:95:9c:
         61:6f:ee:ca:48:77:1d:27:fb:79:18:71:79:1f:02:c7:4c:a9:
         35:e6:7d:f2:c2:cf:ea:69:5c:c6:46:cb:cb:48:78:ff:c2:5c:
         0e:c8:df:ca:cc:7f:29:46:83:ed:c4:9f:b7:f0:6d:e1:4f:3d:
         79:3f:29:3c:21:eb:82:7f:d9:fb:99:b9:26:84:cd:bb:4f:90:
         77:58:98:5b:9c:1f:c9:65:33:18:37:e1:73:36:a1:92:78:35:
         00:c1:a4:f4:cb:68:84:6b:7b:48:3d:b3:0a:7c:cb:bb:bb:b4:
         eb:1f:47:17:c8:6f:c8:6a:6d:e9:a5:43:61:af:db:2b:25:da:
         a6:68:53:4d:e5:40:f9:09:ab:ba:5a:7a:fc:1e:41:2e:7c:7a:
         4f:b5:a0:e1:cd:53:79:73:d6:82:66:92:32:60:4a:04:69:0f:
         3c:b4:de:4c:d8:36:a0:57:ce:26:0e:ac:cd:0b:87:8c:22:19:
         0a:a8:83:3a:e2:b1:06:10:89:bb:02:2d:2a:c3:9b:a8:41:90:
         ce:51:93:4a
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUBdS696Pg8hHyEcZvKW3UKN3Dh3AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0
NDU4RkJFRjAeFw0yNjA2MDQwMjE4NDNaFw0yNzA2MDMwMjIzNDNaMDMxMTAvBgNV
BAMTKDgwRUI1ODY0RDY0RUQ2MjdDQ0M3NEMxOUI5MEVDMjg1N0NFMzFGQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1h6ctR9O7noLRyQ7O3liUnCi+
oaJ9nq8o5LhmEJSAYdJYUr+H18vvQEI+jLlDqCM2NIkDQz8oIBoAl+okZ9+G1LMm
gYN63K4rqMwQHSFFb72Uu0PSuuf14+xcDeWf1tOV9mcvUmbdF6MA+qdTykwTN6OS
Eydf8ET+QasSq62ta8K+KBvp+riU3fuhgztIwgJerN9raxHTSdBfc1EsW0grtin/
MfymcqJoi3WLdXRPNyYj2yu9j5F8DfH6G1qI4RNHS/JDt6Vxp/HIvAdI+DaaDyd/
wTzEw/ZNiZwJ0vLjsGtJ2JgNYBNLuf1kgBwlsrCsnhuj5xcwYQaaa1x5srQDAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUgOtYZNZO1ifMx0wZuQ7ChXzjH6UwHwYDVR0j
BBgwFoAUPUJr6kTFYQlwdgKSNmjUD0RY++8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDgwODQwOTQ0Nzg1ODE3OS8wLzNENDI2QkVBNDRDNTYxMDk3MDc2MDI5MjM2NjhE
NDBGNDQ1OEZCRUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0NDU4RkJFRi5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDk0ODA4NDA5NDQ3ODU4MTc5LzAvMzIzNDMwMzEz
YTM3MzE2MzMwM2E2MTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzUzMTMzMzEz
MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACQBccAACjANBgkqhkiG9w0BAQsFAAOCAQEAyOgfMlMlDvdX
8wjQPnNLk0J42zuSlC4AGLLE4/Ic5o/3gevbtUL8M+MnMzimYhIH+TvQ8pWcYW/u
ykh3HSf7eRhxeR8Cx0ypNeZ98sLP6mlcxkbLy0h4/8JcDsjfysx/KUaD7cSft/Bt
4U89eT8pPCHrgn/Z+5m5JoTNu0+Qd1iYW5wfyWUzGDfhczahkng1AMGk9MtohGt7
SD2zCnzLu7u06x9HF8hvyGpt6aVDYa/bKyXapmhTTeVA+Qmrulp6/B5BLnx6T7Wg
4c1TeXPWgmaSMmBKBGkPPLTeTNg2oFfOJg6szQuHjCIZCqiDOuKxBhCJuwItKsOb
qEGQzlGTSg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:45:15 2026 by rpki-client