Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a393a3a2f34382d3634203d3e203536303431.roa
File:                     323430323a396238303a393a3a2f34382d3634203d3e203536303431.roa (raw, json)
Hash identifier:          uXAzcUwOe3iTpK3u/Rt5w0D7OUluMYBwbjp+0TSkQwE=
Subject key identifier:   98:9D:B2:A5:6C:0C:C8:89:21:78:A9:04:A1:90:86:FB:BE:F8:0F:31
Certificate issuer:       /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial:       69C75A2BA77AD6D3F85380468E59511D7711C1A6
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a393a3a2f34382d3634203d3e203536303431.roa
Signing time:             Fri 29 May 2026 07:14:10 +0000
ROA not before:           Fri 29 May 2026 07:09:10 +0000
ROA not after:            Fri 28 May 2027 07:14:10 +0000
asID:                     56041
IP address blocks:        2402:9b80:9::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 23:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c7:5a:2b:a7:7a:d6:d3:f8:53:80:46:8e:59:51:1d:77:11:c1:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
        Validity
            Not Before: May 29 07:09:10 2026 GMT
            Not After : May 28 07:14:10 2027 GMT
        Subject: CN=989DB2A56C0CC8892178A904A19086FBBEF80F31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:42:c0:38:b5:87:64:3e:ea:bf:56:7f:fc:94:
                    88:0b:70:b8:e4:0e:fe:c8:2f:32:8e:29:44:ca:3b:
                    1d:fb:23:c5:5a:e4:ee:ed:eb:d5:1a:d2:f9:59:51:
                    d3:50:a6:8b:f2:d3:73:48:f9:27:1a:cf:4b:2e:85:
                    ab:81:2c:43:83:63:d2:62:3a:c1:dd:ef:67:bf:6c:
                    d8:94:82:10:e9:34:65:a9:62:bd:49:10:d2:1a:4e:
                    e1:29:5c:f6:17:5f:a3:1d:4b:d2:fa:af:c1:5f:73:
                    12:bd:41:7a:06:7e:8d:dc:b7:c9:2f:1e:2a:ba:9a:
                    b7:6b:44:a6:67:63:56:f0:80:b1:53:38:a6:dd:2f:
                    a9:33:b9:bf:ab:b6:28:2a:c5:5c:fb:08:1a:73:eb:
                    35:ac:50:e8:42:1e:68:9d:47:75:59:76:0c:8b:e0:
                    0d:e1:c3:96:12:bd:9b:0c:74:f4:0f:7f:53:59:29:
                    62:40:a8:94:00:1a:8e:bb:8c:9e:1b:f2:36:65:af:
                    77:9f:6e:b7:7c:24:d7:9f:86:f4:b6:8d:8f:61:34:
                    ff:78:ee:4b:23:1f:83:e3:1c:ff:59:ac:9c:d0:b0:
                    fa:bc:6f:42:54:88:25:a9:03:b1:b9:62:17:7b:7f:
                    45:0f:db:b5:7e:ca:87:31:8e:7c:c3:35:da:03:0a:
                    dc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9D:B2:A5:6C:0C:C8:89:21:78:A9:04:A1:90:86:FB:BE:F8:0F:31
            X509v3 Authority Key Identifier:
                keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a393a3a2f34382d3634203d3e203536303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9b80:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:e0:b3:8a:d4:6a:f0:54:2f:8a:8e:cd:64:0a:5e:90:8d:c1:
         01:2b:67:3f:d1:11:81:ef:1a:f8:a5:49:97:8b:0e:eb:e0:d5:
         46:8d:b1:78:e4:cf:fd:20:c0:f6:f4:5a:b8:e8:c7:35:dd:57:
         64:05:46:91:f4:f0:1a:14:7c:b6:20:73:40:47:fa:48:f2:c4:
         78:e2:56:d4:d6:fe:ab:c5:c9:c0:18:e0:06:06:68:72:37:ba:
         2f:61:6a:41:8c:77:69:44:e8:8c:31:0f:fd:52:95:55:9e:d1:
         f7:bc:96:e5:fa:22:93:68:af:f9:a6:3d:81:4b:50:c3:7c:0d:
         3e:48:75:4c:f2:3a:e1:a0:76:50:1f:f3:25:8b:9f:51:5a:90:
         08:52:5e:db:23:73:73:ff:2a:68:0e:2d:c3:85:55:41:9c:b1:
         30:fd:7c:f0:50:03:23:68:ae:07:6c:40:a1:e1:c3:51:d6:a4:
         f0:ba:74:67:9e:b0:6f:b1:c6:2d:ed:14:31:3b:c7:f7:25:65:
         73:d4:47:5f:13:67:a7:d8:51:a4:4d:92:55:7a:d4:bc:27:60:
         61:7e:fe:e8:5a:14:86:a1:63:56:bd:0c:7e:3a:be:ab:11:33:
         4d:e1:a0:4b:86:6d:8e:63:92:13:b6:0e:08:a2:40:75:7d:c0:
         02:49:0a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:49:12 2026 by rpki-client