Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a343a3a2f34382d3634203d3e203536303431.roa
File:                     323430323a396238303a343a3a2f34382d3634203d3e203536303431.roa (raw, json)
Hash identifier:          OD+JWfW0GJMm8hd0MxubZ9GfE4xHzIUrYfjdhBpM09I=
Subject key identifier:   CB:76:B0:7E:E7:D0:5D:3D:0D:1B:93:DD:DC:A2:76:98:E6:FE:03:DE
Certificate issuer:       /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial:       2FC31B5D9A6BD35ABC2D98CCDD0247B34C461E36
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a343a3a2f34382d3634203d3e203536303431.roa
Signing time:             Fri 29 May 2026 07:14:09 +0000
ROA not before:           Fri 29 May 2026 07:09:09 +0000
ROA not after:            Fri 28 May 2027 07:14:09 +0000
asID:                     56041
IP address blocks:        2402:9b80:4::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 23:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c3:1b:5d:9a:6b:d3:5a:bc:2d:98:cc:dd:02:47:b3:4c:46:1e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
        Validity
            Not Before: May 29 07:09:09 2026 GMT
            Not After : May 28 07:14:09 2027 GMT
        Subject: CN=CB76B07EE7D05D3D0D1B93DDDCA27698E6FE03DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:19:b0:a8:ed:6e:94:63:e5:8e:1f:3a:86:34:
                    7c:ad:e4:31:e8:33:de:6e:98:42:e6:3f:00:ae:84:
                    bf:a6:21:c0:4b:56:80:a1:a2:a3:93:08:9c:48:48:
                    de:c7:72:fe:7e:e9:36:da:97:fd:d3:aa:85:98:97:
                    bb:5a:0f:1a:82:7e:cf:ef:36:0b:52:c8:c2:0a:9b:
                    50:f7:ef:43:f1:7e:d2:13:ea:c0:f4:54:e7:6b:46:
                    b7:20:55:7f:f4:8c:b9:20:55:f2:af:de:91:cf:f1:
                    cf:72:f1:b0:a5:23:de:eb:54:fa:d6:64:f0:91:82:
                    7f:1b:2a:db:11:e3:f5:8b:16:02:2a:1f:a4:76:13:
                    81:da:b0:36:ac:a1:e6:6a:a3:e2:28:f6:a2:f9:a5:
                    ee:53:bd:76:31:b6:5b:32:e4:d9:1f:ce:13:85:ef:
                    eb:2a:8e:3e:a7:1a:15:79:9c:a7:a4:aa:89:77:fb:
                    bb:0d:15:83:ea:58:57:8b:40:d5:b7:d9:84:b8:fb:
                    99:ef:75:43:24:bf:87:68:ff:b0:b8:17:c1:7b:a2:
                    54:d8:8c:3d:2b:de:c2:ba:84:51:b4:7d:0e:cf:3d:
                    d7:6a:28:e2:43:53:c4:89:1a:ad:25:3e:40:2b:e5:
                    1b:6d:d4:d3:d8:8a:95:bf:d7:09:85:28:cd:36:04:
                    89:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:76:B0:7E:E7:D0:5D:3D:0D:1B:93:DD:DC:A2:76:98:E6:FE:03:DE
            X509v3 Authority Key Identifier:
                keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a343a3a2f34382d3634203d3e203536303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9b80:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:90:cf:c5:39:ca:69:d2:ff:35:8f:05:00:ee:ab:34:68:c1:
         29:b9:19:e8:2a:b2:7a:c6:64:f1:95:85:e0:37:52:ea:94:4b:
         74:43:7d:f5:5d:eb:68:6f:a3:17:0c:cc:18:08:4d:8f:c2:da:
         a4:65:5e:6e:1c:80:f2:a4:24:46:35:04:a7:0a:39:fa:d1:0d:
         c6:c9:f0:f3:f0:63:1a:8b:34:9d:15:57:1b:f8:2c:72:03:6e:
         20:65:55:39:7e:04:14:8c:40:cf:8f:37:d1:50:bb:82:00:c7:
         6a:f5:25:f8:6d:ab:59:f5:89:52:03:ea:c1:99:1c:aa:01:c0:
         1d:7e:60:3d:c0:f9:87:2a:c0:03:96:a3:f5:78:e9:80:3d:f0:
         d5:4c:04:a6:bf:ef:e7:03:68:a0:da:14:0c:93:a5:b0:00:4a:
         70:95:31:4e:23:42:a8:2c:a8:d2:ba:d0:e5:c5:b6:2e:eb:1b:
         f0:04:c8:26:d4:c1:43:35:78:e1:5e:81:77:73:fb:46:ab:5c:
         6e:93:6f:50:85:16:8b:14:d4:d9:d8:e9:9c:e0:5d:8b:25:df:
         a1:d5:25:c8:b9:07:e6:83:ab:30:40:a1:e5:45:64:27:94:0a:
         2a:1b:dd:01:8a:39:99:03:2d:40:79:2d:57:d7:38:95:2d:40:
         70:22:55:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:57 2026 by rpki-client