Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a353a3a2f34382d3634203d3e203536303431.roa
File:                     323430323a396238303a353a3a2f34382d3634203d3e203536303431.roa (raw, json)
Hash identifier:          Wge5zRsFG/tZPSlnOmOwOT9uStC8E4fLoSksTcu8cFU=
Subject key identifier:   83:8F:EF:43:32:CE:60:D2:41:4D:BC:2C:C0:80:F7:C0:65:46:97:FB
Certificate issuer:       /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial:       1AB3048D6613167E3DC41C3F4751EBF04CCC5CFB
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a353a3a2f34382d3634203d3e203536303431.roa
Signing time:             Fri 29 May 2026 07:14:10 +0000
ROA not before:           Fri 29 May 2026 07:09:10 +0000
ROA not after:            Fri 28 May 2027 07:14:10 +0000
asID:                     56041
IP address blocks:        2402:9b80:5::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 23:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b3:04:8d:66:13:16:7e:3d:c4:1c:3f:47:51:eb:f0:4c:cc:5c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
        Validity
            Not Before: May 29 07:09:10 2026 GMT
            Not After : May 28 07:14:10 2027 GMT
        Subject: CN=838FEF4332CE60D2414DBC2CC080F7C0654697FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d4:f5:90:09:9e:f4:0f:e7:68:1b:86:5f:79:
                    6e:77:0f:9e:b5:f0:ec:f2:bb:05:88:11:ae:fe:f1:
                    f7:91:25:cd:71:41:e3:38:4f:52:11:69:a1:8d:31:
                    7d:91:e8:f1:5f:38:fa:25:af:97:22:51:b7:f7:ec:
                    52:1f:3e:4b:85:1d:c8:41:56:28:cb:04:95:d2:14:
                    c0:19:d5:77:cd:a8:62:06:31:55:5c:f7:3e:4d:96:
                    c9:7f:04:8f:99:b1:9e:59:0d:d3:21:1e:0c:66:18:
                    3f:f8:9f:e3:49:c8:7f:a3:d3:12:52:4f:03:d7:1b:
                    5b:ef:e9:86:4d:c6:e4:c4:cf:a0:c1:2c:78:d7:95:
                    42:72:02:74:6b:23:3c:6b:e5:b7:15:6e:74:ca:e9:
                    2b:80:28:aa:37:d2:43:93:c2:4f:f3:9d:c0:f2:1e:
                    81:32:05:a0:73:7b:7c:24:ac:9d:18:cf:30:c4:e0:
                    c7:75:30:b0:26:ad:0c:50:ba:d1:3d:83:6f:31:36:
                    f8:bf:98:9d:b1:81:19:13:50:58:af:ec:f0:15:b7:
                    0e:8f:5b:8d:c8:98:6a:6b:fb:0d:85:b7:dc:12:6d:
                    24:92:c8:c7:18:bf:33:66:f3:97:5e:3a:4c:ec:b8:
                    6f:d7:f2:33:94:37:f9:c8:9c:12:4b:72:d1:35:dc:
                    12:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8F:EF:43:32:CE:60:D2:41:4D:BC:2C:C0:80:F7:C0:65:46:97:FB
            X509v3 Authority Key Identifier:
                keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a353a3a2f34382d3634203d3e203536303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9b80:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:39:f7:85:db:4b:45:41:9d:65:55:56:b4:03:0d:3e:09:a0:
         47:2a:8b:5b:c1:0c:0d:23:fb:04:2f:81:83:09:1d:c5:c8:c6:
         4b:c3:f0:54:78:96:b0:5b:58:88:ce:71:e1:0f:2f:0e:a6:03:
         39:ff:8b:06:65:a5:56:a7:19:89:92:29:84:8f:26:3c:21:a5:
         b1:f3:fe:78:ed:cc:00:b0:74:d5:bd:78:59:1a:8f:22:f5:f0:
         ed:b5:77:e7:e5:26:ca:96:f3:b1:25:39:84:75:87:3d:56:2f:
         b4:10:bf:17:ce:1b:3b:15:65:36:d5:8d:54:9f:f4:5c:cf:c8:
         7d:cf:7e:c8:d0:5b:16:7e:44:be:24:c0:b1:83:f4:5d:6f:ac:
         20:84:d8:ee:1a:21:26:ec:15:67:58:c8:3e:f1:3b:07:3a:11:
         c3:4d:06:43:94:4f:17:96:2d:48:b1:5b:a0:e6:24:bb:76:e5:
         79:82:92:39:bf:e0:99:b6:1e:68:94:66:6a:3f:3e:ea:5a:37:
         cb:a1:55:c0:d5:29:ca:c4:7f:d5:9d:7f:dd:6f:f1:19:df:f1:
         11:5c:59:44:1c:8e:40:4a:bd:89:82:20:e2:a0:d3:61:15:47:
         d2:a4:7a:e9:ce:39:2f:6b:c7:0a:bc:bd:40:7b:c8:7a:6f:93:
         00:39:36:68
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUGrMEjWYTFn49xBw/R1Hr8EzMXPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2
RUZERDAwRjAeFw0yNjA1MjkwNzA5MTBaFw0yNzA1MjgwNzE0MTBaMDMxMTAvBgNV
BAMTKDgzOEZFRjQzMzJDRTYwRDI0MTREQkMyQ0MwODBGN0MwNjU0Njk3RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo1PWQCZ70D+doG4ZfeW53D561
8OzyuwWIEa7+8feRJc1xQeM4T1IRaaGNMX2R6PFfOPolr5ciUbf37FIfPkuFHchB
VijLBJXSFMAZ1XfNqGIGMVVc9z5Nlsl/BI+ZsZ5ZDdMhHgxmGD/4n+NJyH+j0xJS
TwPXG1vv6YZNxuTEz6DBLHjXlUJyAnRrIzxr5bcVbnTK6SuAKKo30kOTwk/zncDy
HoEyBaBze3wkrJ0YzzDE4Md1MLAmrQxQutE9g28xNvi/mJ2xgRkTUFiv7PAVtw6P
W43ImGpr+w2Ft9wSbSSSyMcYvzNm85deOkzsuG/X8jOUN/nInBJLctE13BK9AgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUg4/vQzLOYNJBTbwswID3wGVGl/swHwYDVR0j
BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5
MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTY3Mjc3NTIzNTE5NDA2MDkvMC8zMjM0MzAzMjNh
Mzk2MjM4MzAzYTM1M2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzUzNjMwMzQzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACQCm4AABTANBgkqhkiG9w0BAQsFAAOCAQEAcjn3hdtLRUGdZVVW
tAMNPgmgRyqLW8EMDSP7BC+BgwkdxcjGS8PwVHiWsFtYiM5x4Q8vDqYDOf+LBmWl
VqcZiZIphI8mPCGlsfP+eO3MALB01b14WRqPIvXw7bV35+UmypbzsSU5hHWHPVYv
tBC/F84bOxVlNtWNVJ/0XM/Ifc9+yNBbFn5EviTAsYP0XW+sIITY7hohJuwVZ1jI
PvE7BzoRw00GQ5RPF5YtSLFboOYku3bleYKSOb/gmbYeaJRmaj8+6lo3y6FVwNUp
ysR/1Z1/3W/xGd/xEVxZRByOQEq9iYIg4qDTYRVH0qR66c45L2vHCry9QHvIem+T
ADk2aA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:49:13 2026 by rpki-client