Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a363a3a2f34382d3634203d3e203536303431.roa
File:                     323430323a396238303a363a3a2f34382d3634203d3e203536303431.roa (raw, json)
Hash identifier:          AMJKH33p3OPMYNPdYO5RuXDbB7lH0GHbyGfZZsBVQmI=
Subject key identifier:   D7:7F:66:E3:EC:48:A3:E1:10:82:51:78:CD:C5:7A:D0:53:D9:2B:35
Certificate issuer:       /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial:       6411C2DFCF3C973638CA277B55CDBFC2B914FC5D
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a363a3a2f34382d3634203d3e203536303431.roa
Signing time:             Fri 29 May 2026 07:14:09 +0000
ROA not before:           Fri 29 May 2026 07:09:09 +0000
ROA not after:            Fri 28 May 2027 07:14:09 +0000
asID:                     56041
IP address blocks:        2402:9b80:6::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 23:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:11:c2:df:cf:3c:97:36:38:ca:27:7b:55:cd:bf:c2:b9:14:fc:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
        Validity
            Not Before: May 29 07:09:09 2026 GMT
            Not After : May 28 07:14:09 2027 GMT
        Subject: CN=D77F66E3EC48A3E110825178CDC57AD053D92B35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6f:24:46:d7:90:e4:e5:69:2a:03:cb:e1:32:
                    ec:04:09:5f:01:ee:bb:5d:8d:bc:7c:77:e7:3f:ac:
                    b5:f3:48:5b:ec:35:27:e5:02:c5:31:2b:83:98:5d:
                    4f:bb:c7:a5:d1:57:81:d7:70:17:b4:de:8f:57:a3:
                    b3:69:0f:76:bf:5f:1e:f6:ea:2b:e8:b5:96:01:f4:
                    6b:0e:44:c0:35:95:d8:e5:1c:cb:7a:fe:6b:9b:10:
                    0d:be:36:2e:4d:5c:a3:73:cb:ad:76:ac:eb:04:77:
                    09:f1:1f:63:7e:e6:00:fc:20:9b:8e:94:62:a4:6d:
                    8f:e6:54:a4:41:fd:c6:ba:7b:97:67:da:c9:44:76:
                    63:14:01:4a:f7:02:a7:0e:3f:43:a0:5b:d1:49:e8:
                    a3:98:4a:ec:ee:e9:cb:b6:6e:5f:ad:2c:56:ed:9f:
                    6e:63:e4:72:0c:d9:d0:7a:8c:f2:d8:1f:a7:b8:c7:
                    df:81:61:75:e0:f8:c3:d0:7f:4c:61:82:a0:0a:74:
                    a5:ce:05:a1:8e:83:ff:89:1d:f5:be:37:9d:e2:df:
                    fb:62:af:0e:e8:4d:c6:f0:8c:a7:69:01:8a:6e:c1:
                    af:69:ef:d9:7e:d7:6c:05:f7:d9:a5:e0:44:11:8a:
                    31:ea:a6:cc:43:bd:f0:26:1f:dd:fe:cd:b2:36:65:
                    f7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7F:66:E3:EC:48:A3:E1:10:82:51:78:CD:C5:7A:D0:53:D9:2B:35
            X509v3 Authority Key Identifier:
                keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a363a3a2f34382d3634203d3e203536303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9b80:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:21:74:76:e1:1b:76:9f:9a:eb:c2:a6:c9:96:2f:5a:de:14:
         98:52:93:7f:2d:b1:b9:7d:49:d0:d0:a5:f2:d4:e5:3b:62:32:
         49:35:8c:fa:69:ae:fe:6f:fa:37:8a:a8:37:8a:14:5b:f0:21:
         f8:08:99:ee:1a:29:1c:49:a1:c0:a6:ae:82:68:93:db:15:24:
         27:13:9b:aa:e0:64:ad:36:28:26:b1:7f:8c:b0:7e:4d:7d:ab:
         29:2a:2d:f4:3d:bf:ad:2e:29:cb:52:94:54:b6:c0:b8:84:e9:
         f2:fc:70:fa:0e:1e:94:c4:e5:96:79:03:ad:25:13:5b:ce:c5:
         c1:af:43:bb:71:27:24:33:41:9e:b4:8e:12:c9:08:d1:cf:48:
         95:18:9b:fa:4f:4b:27:f4:d2:92:6a:87:8c:07:bc:45:63:5c:
         07:f2:c3:76:c9:b9:f5:fc:17:55:da:4a:f4:48:e5:30:36:7d:
         d1:e7:a6:a0:aa:b2:68:9b:b1:95:65:3c:1f:99:b4:9d:21:c1:
         a7:74:08:0f:4b:11:3f:eb:d2:eb:d4:f6:d7:d2:ec:16:c8:e8:
         09:a5:05:fb:12:30:3d:58:62:bb:ed:9f:c5:77:66:19:63:0c:
         7d:5e:97:c9:07:f3:86:c8:47:97:20:1b:1c:e7:49:9b:13:ef:
         6a:d1:1c:38
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUZBHC3888lzY4yid7Vc2/wrkU/F0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2
RUZERDAwRjAeFw0yNjA1MjkwNzA5MDlaFw0yNzA1MjgwNzE0MDlaMDMxMTAvBgNV
BAMTKEQ3N0Y2NkUzRUM0OEEzRTExMDgyNTE3OENEQzU3QUQwNTNEOTJCMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgbyRG15Dk5WkqA8vhMuwECV8B
7rtdjbx8d+c/rLXzSFvsNSflAsUxK4OYXU+7x6XRV4HXcBe03o9Xo7NpD3a/Xx72
6ivotZYB9GsORMA1ldjlHMt6/mubEA2+Ni5NXKNzy612rOsEdwnxH2N+5gD8IJuO
lGKkbY/mVKRB/ca6e5dn2slEdmMUAUr3AqcOP0OgW9FJ6KOYSuzu6cu2bl+tLFbt
n25j5HIM2dB6jPLYH6e4x9+BYXXg+MPQf0xhgqAKdKXOBaGOg/+JHfW+N53i3/ti
rw7oTcbwjKdpAYpuwa9p79l+12wF99ml4EQRijHqpsxDvfAmH93+zbI2ZfdBAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQU139m4+xIo+EQglF4zcV60FPZKzUwHwYDVR0j
BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5
MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTY3Mjc3NTIzNTE5NDA2MDkvMC8zMjM0MzAzMjNh
Mzk2MjM4MzAzYTM2M2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzUzNjMwMzQzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACQCm4AABjANBgkqhkiG9w0BAQsFAAOCAQEAOiF0duEbdp+a68Km
yZYvWt4UmFKTfy2xuX1J0NCl8tTlO2IySTWM+mmu/m/6N4qoN4oUW/Ah+AiZ7hop
HEmhwKaugmiT2xUkJxObquBkrTYoJrF/jLB+TX2rKSot9D2/rS4py1KUVLbAuITp
8vxw+g4elMTllnkDrSUTW87Fwa9Du3EnJDNBnrSOEskI0c9IlRib+k9LJ/TSkmqH
jAe8RWNcB/LDdsm59fwXVdpK9EjlMDZ90eemoKqyaJuxlWU8H5m0nSHBp3QID0sR
P+vS69T219LsFsjoCaUF+xIwPVhiu+2fxXdmGWMMfV6XyQfzhshHlyAbHOdJmxPv
atEcOA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:58 2026 by rpki-client