Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a333a3a2f34382d3634203d3e203536303431.roa
File:                     323430323a396238303a333a3a2f34382d3634203d3e203536303431.roa (raw, json)
Hash identifier:          fDgA6ruGeUAU4wfv9gPlGSDZYoKboQYWNkUHvatwmAE=
Subject key identifier:   79:57:68:D4:78:D2:4B:D9:0D:25:F2:AA:AD:B9:53:43:BB:B1:E2:AF
Certificate issuer:       /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial:       4142E5102FCEF49E78E3581B94C7BC3B5C083EA7
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a333a3a2f34382d3634203d3e203536303431.roa
Signing time:             Fri 29 May 2026 07:14:09 +0000
ROA not before:           Fri 29 May 2026 07:09:09 +0000
ROA not after:            Fri 28 May 2027 07:14:09 +0000
asID:                     56041
IP address blocks:        2402:9b80:3::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 23:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:42:e5:10:2f:ce:f4:9e:78:e3:58:1b:94:c7:bc:3b:5c:08:3e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
        Validity
            Not Before: May 29 07:09:09 2026 GMT
            Not After : May 28 07:14:09 2027 GMT
        Subject: CN=795768D478D24BD90D25F2AAADB95343BBB1E2AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:69:a5:2f:8d:69:40:80:71:09:f6:7e:57:a3:
                    bb:fa:91:d0:56:08:d8:52:64:9f:59:07:5d:ff:dc:
                    92:02:fa:1b:ed:62:48:4d:99:4d:1d:1e:82:64:3a:
                    a2:ac:cf:72:b0:91:20:94:54:4b:58:e8:56:cc:21:
                    20:29:63:c8:d8:9d:ea:c3:f2:02:90:c7:62:33:73:
                    8f:37:ee:8b:cd:74:b0:c5:ae:7b:38:f5:cc:3d:d7:
                    09:13:90:82:de:57:00:c6:fa:c5:f1:46:cd:94:63:
                    9f:16:27:14:90:f6:8b:2c:eb:2b:5d:a0:53:0f:f6:
                    27:94:55:3a:c0:7d:c8:f9:43:3e:4b:01:6d:37:9e:
                    e6:f2:07:41:bd:6c:90:d9:00:c2:ef:fd:7b:6a:0a:
                    73:5e:90:6b:75:d2:12:ab:0b:3a:fa:c8:e9:ad:14:
                    af:f8:b9:e6:fb:1d:58:a3:92:dd:2e:31:a0:97:05:
                    dd:b4:91:8e:f2:76:5a:16:d1:ee:e8:3f:ae:5d:a1:
                    49:fc:5e:26:b0:df:0f:f4:98:4a:40:df:3a:15:41:
                    3e:06:0e:45:2f:3b:b7:cb:6b:85:e7:c0:db:4d:c7:
                    e8:08:79:96:e8:58:a1:d8:8d:bd:29:34:54:ad:ff:
                    a6:3e:bf:1e:8c:0a:e0:9c:8c:45:ae:21:cf:73:31:
                    2b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:57:68:D4:78:D2:4B:D9:0D:25:F2:AA:AD:B9:53:43:BB:B1:E2:AF
            X509v3 Authority Key Identifier:
                keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a333a3a2f34382d3634203d3e203536303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9b80:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:0c:42:8e:a6:e6:b5:74:2c:7a:59:ec:c5:3c:0d:b2:8b:88:
         d3:34:18:e5:d3:d8:ee:d5:fa:f0:28:48:e0:f9:78:00:5f:04:
         e4:f2:c7:ec:77:42:e4:53:5a:69:be:9a:7c:97:20:b9:1f:89:
         d4:e8:13:43:65:e0:0f:54:80:7a:69:81:2f:df:62:a4:a9:1a:
         f4:1c:ec:b9:17:f9:c8:05:59:2b:ae:e9:1e:cf:e5:0a:b1:fb:
         f9:ce:66:16:6b:14:5c:8c:82:ed:87:be:fc:30:c0:2c:de:e0:
         f9:90:37:99:c6:32:8b:49:66:bc:d7:a6:3c:f3:b8:4c:3a:61:
         d5:46:d0:43:23:5a:56:a3:7a:8d:cc:65:b0:9e:40:6a:cf:a1:
         23:7b:b3:65:b3:79:87:db:ad:1e:3d:4c:c2:5a:62:71:4d:16:
         5c:b3:ec:97:3a:82:9e:b6:0b:cd:a0:78:3a:db:8b:fe:67:bf:
         37:e0:14:b4:5a:0c:37:b3:af:06:ec:ef:7b:8d:2c:0e:82:05:
         72:55:c6:2f:63:1c:29:14:86:ba:41:68:a5:d3:e0:6c:41:fd:
         cf:c1:9b:08:96:0c:fd:f7:cf:be:a8:9a:ae:b1:f7:4c:48:98:
         86:26:90:ae:db:81:21:fa:a9:77:63:1e:18:7f:e3:78:f2:62:
         84:d9:ef:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:49:12 2026 by rpki-client