Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/323430333a316638303a3a2f33322d3332203d3e2030.roa
File:                     323430333a316638303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier:          C3n5OWMLpoak4RJkrmKLGOTFE9VB8zAehVX31CssZ0Y=
Subject key identifier:   F0:25:0B:FB:34:DE:D0:A5:8D:39:80:87:E5:22:22:8F:C1:F0:69:3E
Certificate issuer:       /CN=5ACF72DA32919503D15480832BA57EB063AE113B
Certificate serial:       5C6A0B40DD1F4E91C8C9C476A3086C905DE6AC29
Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/323430333a316638303a3a2f33322d3332203d3e2030.roa
Signing time:             Wed 27 May 2026 06:59:18 +0000
ROA not before:           Wed 27 May 2026 06:54:18 +0000
ROA not after:            Wed 26 May 2027 06:59:18 +0000
asID:                     0
IP address blocks:        2403:1f80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 12:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6a:0b:40:dd:1f:4e:91:c8:c9:c4:76:a3:08:6c:90:5d:e6:ac:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B
        Validity
            Not Before: May 27 06:54:18 2026 GMT
            Not After : May 26 06:59:18 2027 GMT
        Subject: CN=F0250BFB34DED0A58D398087E522228FC1F0693E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:eb:79:05:cf:87:62:b8:68:75:f1:4e:aa:3f:
                    b3:ff:2d:93:b2:0f:e5:6e:61:93:65:9b:fc:56:58:
                    a1:c5:f5:95:1b:da:16:51:6a:f5:29:a0:de:b3:d4:
                    66:c1:40:43:e2:e9:02:17:88:fd:b4:12:a3:d8:b0:
                    c5:5a:a2:65:0b:00:6b:25:42:f4:1d:b6:82:c8:a5:
                    72:61:41:23:c9:7d:a4:d6:a7:2c:74:b7:64:28:e9:
                    36:fa:d1:d2:bb:95:78:86:a8:9a:94:b3:13:3a:cf:
                    ad:ce:6b:3d:57:64:be:7c:fd:a1:00:47:24:79:32:
                    b7:2e:c0:26:3c:5d:09:f7:7c:6d:4d:13:ad:9e:b7:
                    b8:58:ca:c5:68:02:bc:3e:5d:87:11:37:bd:f7:61:
                    bb:d5:54:54:91:36:c7:b0:9a:97:24:a2:9f:99:c1:
                    86:15:f8:dd:48:35:92:1c:0b:fe:18:de:c2:21:62:
                    22:30:7a:29:95:af:0f:49:38:bc:fa:42:23:f9:d2:
                    f5:9c:ec:98:91:d3:e1:5b:a4:05:75:76:c2:85:37:
                    bb:03:cb:4c:97:29:5a:5b:46:0e:6a:dd:df:2c:34:
                    23:5b:58:85:7e:a9:78:5a:0e:8e:13:4a:54:ff:d8:
                    b4:92:06:4b:a9:0a:bd:e7:05:cd:b6:13:65:ac:5c:
                    fc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:25:0B:FB:34:DE:D0:A5:8D:39:80:87:E5:22:22:8F:C1:F0:69:3E
            X509v3 Authority Key Identifier:
                keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/323430333a316638303a3a2f33322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:1f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:38:c3:2d:91:2c:f4:3d:7e:d4:38:99:35:2c:22:b8:f6:36:
         00:2e:d8:9d:10:ee:69:9f:2b:1a:c1:f6:e4:f7:08:b9:ad:66:
         ad:2a:68:7d:75:7f:e3:c1:e9:5f:68:94:16:b6:ca:6d:57:de:
         5f:4b:0d:8b:9e:87:5d:ad:dd:06:60:39:71:7f:88:c3:3a:c5:
         9e:4f:93:33:17:e4:8e:3f:e4:91:73:66:3f:8b:9a:0f:d5:4c:
         a8:ec:6e:c9:78:bf:d1:2b:9d:81:49:48:8c:f2:95:79:b6:cf:
         4c:5a:fa:11:2f:c6:fd:92:1d:f2:9d:33:44:e5:90:60:73:2c:
         d2:2b:25:82:c8:83:d5:64:42:80:98:eb:6c:ea:f2:5b:1a:39:
         2d:53:7f:1e:25:b2:ad:df:8d:f6:4e:3b:cb:11:54:31:8b:5a:
         f5:4a:b7:9e:71:49:af:03:a0:e0:af:03:de:5e:95:52:ae:85:
         f3:8e:c5:cd:d3:f8:67:44:a1:5d:55:97:c8:29:7c:94:44:d3:
         1f:7b:95:cc:7d:be:3a:b2:0c:8c:a3:b2:62:10:76:6b:ce:26:
         be:91:e7:40:91:26:93:21:2e:5a:51:f0:fb:56:0c:a6:db:91:
         42:b6:71:1d:ba:75:8b:99:17:b5:8a:94:c0:d9:78:44:2f:f1:
         0a:ce:e9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:23 2026 by rpki-client