Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a663a3a2f34382d3438203d3e20313531333131.roa
File:                     323430313a373163303a663a3a2f34382d3438203d3e20313531333131.roa (raw, json)
Hash identifier:          pQRYdFrlA3TDKhWFgZMu4ZqI4hr4uXD3YgIdMHfgZB4=
Subject key identifier:   0A:69:13:7A:D7:7A:D7:6A:9A:76:C4:EB:21:CE:BF:8B:24:AA:B5:90
Certificate issuer:       /CN=3D426BEA44C56109707602923668D40F4458FBEF
Certificate serial:       6DC3063732B41F73922A169938F3768742C55D28
Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a663a3a2f34382d3438203d3e20313531333131.roa
Signing time:             Thu 04 Jun 2026 02:24:31 +0000
ROA not before:           Thu 04 Jun 2026 02:19:31 +0000
ROA not after:            Thu 03 Jun 2027 02:24:31 +0000
asID:                     151311
IP address blocks:        2401:71c0:f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 02:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c3:06:37:32:b4:1f:73:92:2a:16:99:38:f3:76:87:42:c5:5d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF
        Validity
            Not Before: Jun  4 02:19:31 2026 GMT
            Not After : Jun  3 02:24:31 2027 GMT
        Subject: CN=0A69137AD77AD76A9A76C4EB21CEBF8B24AAB590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:08:c1:1a:6f:c3:df:8e:21:c5:1e:96:1f:90:
                    97:61:d7:2a:8c:8d:af:15:ed:16:35:e9:82:50:44:
                    db:99:37:50:0e:b5:8c:2d:f3:4a:ec:a6:55:17:f7:
                    31:2a:17:d4:67:58:e2:4f:7d:29:eb:c7:fd:87:31:
                    80:ff:b8:1a:87:3c:c8:5f:51:22:ff:71:2a:8e:35:
                    3c:bc:d6:2c:f8:04:ed:86:a6:94:ae:34:68:79:53:
                    05:e9:6b:65:50:4f:22:b7:72:37:c8:d8:a0:27:dc:
                    3d:86:9c:10:a3:57:86:3a:45:d7:5d:dc:f2:6a:ec:
                    b7:f7:4a:9d:ae:2d:52:e1:07:82:b0:bc:f9:57:4d:
                    c7:94:d5:78:85:06:c9:9b:57:3e:c7:e2:76:d8:d5:
                    ed:ff:b3:02:d1:e1:78:80:b1:46:7b:2f:f6:57:e1:
                    81:3d:95:66:60:95:3e:f5:85:ea:08:1b:18:b3:8a:
                    1d:e4:ac:40:f2:fe:51:f9:97:b9:f4:c4:d8:2f:ef:
                    e0:b1:69:4f:53:77:ca:4e:df:05:38:cc:b9:a4:10:
                    d4:ab:cf:ef:27:a0:41:99:98:19:73:e5:d2:39:71:
                    e2:6f:b6:68:5a:5b:e8:08:ee:45:24:48:8c:5d:57:
                    40:e4:a7:fb:ee:28:55:65:54:52:d1:18:71:78:ce:
                    cf:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:69:13:7A:D7:7A:D7:6A:9A:76:C4:EB:21:CE:BF:8B:24:AA:B5:90
            X509v3 Authority Key Identifier:
                keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a663a3a2f34382d3438203d3e20313531333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:71c0:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         cb:70:cc:81:97:8f:3b:50:91:68:07:09:84:ce:17:bc:d1:d3:
         31:fb:3b:d5:ee:f4:95:dc:88:0a:35:59:db:09:77:2e:51:e4:
         5d:dc:a8:f7:55:17:8a:5a:f9:87:58:21:d6:05:a2:dd:ce:8e:
         9d:ca:4e:11:c0:f8:32:b4:fa:33:b0:ce:38:04:6a:0b:44:b4:
         57:70:d5:e0:4b:88:cb:74:1e:fc:6c:d5:df:96:de:fe:b0:4f:
         99:9d:70:02:01:70:61:3b:73:f2:b0:69:b9:e7:d0:78:c2:1e:
         83:7a:3e:e9:2c:c5:1a:69:4b:48:ba:db:14:91:2e:00:88:aa:
         93:b6:1a:51:1e:37:10:ed:a7:5b:28:52:bb:e1:f5:1a:bd:4e:
         6c:95:07:b4:b2:05:28:bf:9a:49:d4:91:a3:97:a0:60:12:d6:
         87:58:5a:11:ad:03:a9:f3:d5:f3:56:47:77:aa:bd:e8:38:50:
         aa:a1:99:51:b7:20:b6:72:47:93:3f:2b:1c:43:b6:23:25:3a:
         1c:2b:6e:7a:9b:ba:3a:ff:2a:07:3f:08:df:d5:7b:b6:03:92:
         f8:ea:3b:f6:2a:6b:88:a6:56:8a:73:5f:cb:d0:6f:f6:64:0b:
         09:dd:a4:d7:7e:de:26:fc:20:d3:a0:a6:e9:8c:00:2d:cb:fd:
         1e:14:fe:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:45:16 2026 by rpki-client